Skip to content
CybercrimeFinancialAdvanced sophistication

RevengeHotels

RevengeHotels is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 10 sectors, including Government and Technology, in 33 countries, including the United States and India. It uses 4 MITRE ATT&CK techniques.

Also known as
  • TA558
Techniques
4
Exploited CVEs
No CVE data
First seen
Jan 1, 2015
Record updated

Who They Target.

About RevengeHotels.

Active since 2015, this threat actor has historically targeted hotel guests and travelers, stealing payment card data through phishing emails. Recent campaigns show a significant shift towards AI-generated attacks.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.