TRAVEL & HOSPITALITY CYBERSECURITY Cyber Ops Alliance cyberopsalliance.com | info@cyberopsalliance.com

ERINYES™ enables companies in the hospitality industry to validate their security through proactive darknet monitoring cyber defense. In January 2017, The New York Times reported that hackers breached the electronic key system at the Romantik Seehotel Jaegerwirt, in Austria, and locked guests out of their rooms. It was a ransomware attack; the hackers demanded a payment of around $1,800 USD to unlock the rooms, which the hotel management gladly handed over. The hospitality industry consists of numerous leisure locations, products and services that attract tourists from all over the globe; they include lodging, restaurants, theme parks, cruise lines, spas and other businesses that focus mainly on disposable income. The nature of the business requires that large volumes of private customer data and payment card data are stored and processed by the hospitality industry. This makes this industry a prime target for cybercriminals. Countless high-valued targets are hosted in every major city worldwide. Hospitality databases hold a great deal of customer financial information; since most customer information these days are reserved by credit or debit card, that information is stored in the destinations customer database. Hackers who breach those systems can download the information and help themselves to personal and corporate financials. There are other instances of data compromise within hospitality information systems. For example, automobile information or Social Security numbers are associated with customer check-in data as well. Also, hospitality destinations increasingly have additional customer data including contact details, travel plans, air miles, birthdays, personal preferences and other bits of information that can be exploited, ranging from fraud to extortion.

DARKNET MONITORING Monitoring of the hospitality company and third-part agents Advance AI technology monitoring criminal blackmarket travel agents exploiting stolen information PoS malware, ransomware, IoT exploits and DDoS attacks Terrorist, extremists, activists chatter on darknet, encrypted messaging apps and social media chatter Terrorist and extremist targeting guests and destination BRAND EQUITY Personal identifiable information (PII) Real-time alerts 24/7 of company brand chatter among darknet nefarious forums (CyberHUMINT) Reward Programs – customer compromised accounts and points activity Threat actor intentions impacting your brand Risk assessment of 24/7 in our proprietary SIEM company and customer database for sale

HOTEL NEWS NOW 10 JANUARY 2018 1:16 PM (10:42:16 AM) XXX@exploit.im: cant u sell airline manifests? (10:42:25 AM) XXX@exploit.im: it has air marshals i believe (10:42:38 AM) XXX@exploit.im: ill go sell that shit to some terrorists (10:42:41 AM) XXX@exploit.im: wouldn’t be hard (10:45:32 AM) XXX@exploit.im: i could get over 50k for these airline manifests from the allah ahkbar fuckers` (10:01:59 AM) XXX@exploit.im: i have infected all 4 hotels so far (10:02:05 AM) XXX@exploit.im: im gonna do the sands kenya in a few (10:02:10 AM) nosautemnox@exploit.im/hell: just having a few issues (10:02:12 AM) (BOC Intel Covert Operative): nice (10:02:17 AM) XXX@exploit.im: i manages to pivot into club quarters. HOTEL NEWS NOW 10 JANUARY 2018 1:16 PM Timeline: The growing number of hotel data breaches Sabre Hospitality Solutions When: Announced starting 6 July What happened: Multiple hotel companies, including Hard Rock Hotels & Casinos, Four Seasons Hotels and Resorts, Trump Hotels, Loews Hotels, Kimpton Hotels & Restaurants, RLH Corporation and Club Quarter Hotels reported a data breach via a third-party reservations system provided by Sabre Hospitality Solutions. Sabre notified the companies in June of the breach, which granted unauthorized access to credit card information and some reservation information between August 2016 and March 2017.

cyberopsalliance.com | info@cyberopsalliance.com CONTACT YOUR REPRESENTATIVE TO SCHEDULE AN ONLINE DEMO TODAY cyberopsalliance.com | info@cyberopsalliance.com