As the travel industry witnesses a resurgence post-lockdown, Imperva, a Thales company specializing in cybersecurity, issues a stark warning about the escalating cybersecurity threats in the travel sector.
Last year, the industry faced a notable spike in bad bot activity, with bots comprising 45% of global web traffic, up from 37% in 2022 as per the Imperva 2024 Bad Bot Report, highlighting the prevalence of cybersecurity risks in the travel industry.
The mounting cyber threats, including seat spinning, unauthorized web scraping, account takeovers (ATOs), and fraud, pose significant challenges for travel companies. Seat spinning, a prevalent issue in Asia, allows bots to reserve airline seats without payment, leading to financial repercussions for airlines.
Unauthorized web scraping by bots further complicates matters, impacting airlines’ data insights and increasing partner-related fees. A notable case saw an airline paying US$500,000 monthly due to high bot traffic disrupting its search API functionality, underscoring the financial risks posed by cyber threats.
The travel industry also faces a substantial volume of ATO attempts, with 11% of global ATO attacks targeting this sector in 2023. Cybercriminals exploit travel companies for access to personal information, payment methods, and loyalty points, emphasizing the need for robust cybersecurity measures to safeguard against fraud and unauthorized activities in user accounts.
Imperva recommends a comprehensive defense approach for travel organizations, encompassing advanced traffic analysis and real-time bot detection across digital channels like APIs and mobile applications. Strategies to mitigate risks include blocking outdated browsers, restricting access from bulk IP data centers, and monitoring for signs of automation. Regular vigilance and awareness of data breaches are vital to combat evolving cyber threats effectively in the travel sector.
Daniel Toh, Chief Solutions Architect for Asia Pacific and Japan at Imperva, stresses the significance of proactive cybersecurity practices to address the intricate challenges of cybersecurity threats in the travel industry.
Leave a Reply