Cyber/physical perils in hospitality

April 2019 Editor's Choice, Cyber Security, Entertainment and Hospitality (Industry)

Most of us wait all year for our annual vacation. In all likelihood, it will be either a time relaxing at home with loved ones or embarking on a trip to an idyllic location. Although technology has seemingly made travel and accommodation planning a lot easier, many people are finding out that they are under more stress than during the Internet-free days.

Although, in the not so distant memory, there were cases of arriving at a dodgy destination, most vacationers returned to trusted venues and used reputable travel agencies. In the past, securing your home while you were away entailed arranging a house sitter, setting certain lights to a timer, having your mail collected regularly and asking trusted neighbours to keep an eye on the place.

Today we face a world of unscrupulous scam artists, cons, fake websites and the like, all trying their utmost to fleece us from our hard-earned money. How can we prepare for our holidays and avoid becoming the victim of a scam or data breach?

• When doing an Internet search, beware of third-party websites or being redirected to another site.

• Fraudulent call centres and websites often claim to be official representatives of hotels and airlines. This can lead to a wrong booking, hidden costs or a worst-case scenario, no reservation at all.

• Preferably book through the hotel’s official website. Type in the URL rather than clicking on a link. Should you have to use a third-party site, confirm with the hotel that they are indeed affiliated.

• Confirm that your choice of hotel/resort has adequate privacy and data protection policies in place. Credit card details of guests are normally kept on file for additional charges incurred and these make attractive targets for hackers and the like.

• Does the establishment have a secure computer and Wi-Fi network?

• Free Wi-Fi + thousands of users + latest technology = a recipe for having your data breached.

• Make use of a VPN (although not 100% safe) if you will be accessing sensitive information. Remember, DarkHotel malware is still doing the rounds and it is a very cunning piece of malware, able to track you around the world and hiding itself if it considered it had been detected. The Marriot Hotel Group were recently breached via their Starwood guest register database, leaking the personal details of over 500 million clients.

• Never leave devices unattended in hotel rooms. Magical elves do not make up the room, humans do.

• Familiarise yourself with foreign immigration laws. Certain countries have laws that allow your devices to be inspected and if need be, all your data copied.

• Encryption, VPN and certain websites are banned in some countries, jail terms can apply.

• Do not announce your travel plans on social media, this not only opens you up to cybercrime, but physical robbery at your home and even your holiday venue. Post your photos when you get back.

What can be done to protect you and your devices?

• Take the minimum devices needed and secure those left at home.

• Disable Bluetooth (even your vehicle/rental) and your home Wi-Fi.

• Disable auto-connect functions and let devices ‘forget’ SSIDs in their lists.

• Remove/configure geolocation and photo options.

• Configure/disable apps that do not need to have access to your devices.

• Use strong passwords, preferably 2FA (two-factor authentication).

• Back up all your data.

• If in doubt about a Wi-Fi connection, revert to mobile data. Not cheap on consumption, but safer.

• Only visit websites offering https://, even though this is not totally safe nowadays.

• Ensure all devices are running the latest OSs. Windows 10 needs the latest Defender.

• Before departing, charge all your devices fully and have back up power sources. A multi-adaptor is essential if visiting foreign countries.

• Should you purchase any electronics (especially from those cheap Asian countries), be sure to check them out on your return as most have built in spyware, etc.

• Change your passwords again on your return.

On a personal safety note:

• Before embarking to your destination, be it local or foreign, check out government travel warnings regarding both country and location.

• What surveillance systems does your proposed destination have in place? Physical security, CCTV cameras or both?

• What tested reaction plans do they have in place in the event of an incident. Are there medical facilities on-site or in the vicinity?

• Are there tourist police available who speak your language and who are less likely to be corrupt?

• Are there crowd control measures in places for popular venues, e.g. theme parks, sports stadiums, concert venues, beaches, etc?

• Do an online search of your location, checking for complaints, past incidents, resolution to issues, etc.

If you have managed to do all the above, then you really need a holiday.

For more information contact Wolfpack Information Risk, +27 11 794 7322, info@wolfpackrisk.com, www.wolfpackrisk.com


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Constructive CCTV contributions to research
September 2019, Leaderware , Editor's Choice, CCTV, Surveillance & Remote Monitoring
Study leads to understanding that we need more recognition and reward for constructive participation in society.

Read more...
Ensuring a seamless ultra-wideband ecosystem
September 2019 , Editor's Choice, IT infrastructure
FiRa consortium ensures an interoperable ultra-wideband technology ecosystem across chipset, device and service infrastructure through standards and certifications.

Read more...
Check Point appoints new regional director for Africa
September 2019 , News, Cyber Security
Check Point Software Technologies has appointed Pankaj Bhula as regional director for Africa.

Read more...
ISO standard for protecting personal data
September 2019 , News, Cyber Security
Tackling privacy information management head on: first ISO standard for protecting personal data has been published.

Read more...
The hunt for the Carbanak group
September 2019 , Editor's Choice, Cyber Security, News
Tomorrow Unlocked has released a free four-part documentary that tells the story of the notorious Carbanak APT group and its $1 billion bank heist.

Read more...
Genetec to integrate CylancePROTECT
September 2019, Genetec , Editor's Choice, CCTV, Surveillance & Remote Monitoring, News
Genetec has announced it is partnering with Cylance, a business unit of Blackberry, to bring AI-based antivirus protection to its appliance customers.

Read more...
Building automation vulnerable to hacks
September 2019 , News, Cyber Security
New vulnerability revealed in Internet-connected building automation devices at the DEF CON IoT Village that could impact critical building systems.

Read more...
X-rays in 3D
September 2019, XPro Security Solutions , Editor's Choice, Security Services & Risk Management
Hi-Tech Security Solutions asked Greg Dixon, director of XPro, for some insights into X-ray scanning and its pros and cons in today?s volatile world.

Read more...
Smart Inspection Unit developed by Roteck
September 2019 , Editor's Choice, Security Services & Risk Management
Roteck has announced a portable personnel and bag scanning unit that can easily be transported, set up and used in almost any location.

Read more...
Keeping our changing environment secure
August 2019 , Editor's Choice, Security Services & Risk Management
For a crime to take place there needs to be a victim and a criminal who sees an opportunity. For a cybercrime to take place we need the same set of circumstances.

Read more...