Microsoft Uncovers Widespread Hotel Phishing Campaign in Japan

Microsoft and Trend Micro report an active phishing campaign (since April 2026) targeting hotel front-desk staff with fake guest complaints and photo links. Recipients are tricked into downloading ZIP files that contain apparently benign photos but actually malicious shortcut files that execute malware; attackers use trusted services and redirect links (Calendly, Google, Gmail) to increase credibility. Infected reception machines may allow credential theft or access to reservation tools, and smaller accommodations that use a single inbox for bookings and complaints are especially at risk.