The Register Home Page

back to article Fraudster hacked hotel system, paid 1 cent for luxury rooms, Spanish cops say

Spanish police arrested a hacker who allegedly manipulated a hotel booking website, allowing him to pay one cent for luxury hotel stays. He also raided the mini-bars and didn't settle some of those tabs, police say. "This cyberattack was specifically designed to alter the payment validation system, and this is the first time …

  1. Brian 3

    hard to believe he's clever enough to get one over on the payment processing system and not clever enough to not hit the same place several times!!!

    MIND BOGGLING

    1. Excused Boots Silver badge

      Greed, plus a belief that he is better than anyone else and can and will get away with it forever. Evidently not!

      The old maxim of ‘quit when you’re ahead’ applies here; alas greed gets in the way.

    2. MachDiamond Silver badge

      "hard to believe he's clever enough to get one over on the payment processing system and not clever enough to not hit the same place several times!!!"

      And staying multiple nights at a time.

      If the billing was heavily discounted rather than free, nobody may have noticed. Could have been a coupon, points, package deal, etc. Creating a coupon code in the system and using that to get a top end room for budget pricing would have been a better hack.

      The "loss" by the hotel is really their housekeeping and mini bar since I'd be amazed if the super expensive rooms are booked solid. We all know that a £9 bottle of water doesn't cost them more than 50p and a tiny bag of crisps about the same.

      1. goblinski Silver badge
        Boffin

        "...We all know that a £9 bottle of water doesn't cost them more than 50p and a tiny bag of crisps about the same..."

        Blasphemy!!!

        Do you have any idea how much individually wrapped cashews cost ?!? Those are bespoke items !!! The best of the best. They have to have an order of magnitudes longer shelf life as they are never used nor replaced, yet they have to taste just as stale when perfectly fresh. They have to be sound-resistant and not crumble when a parent screams at some lost kid who unrwapped them before they could stop him, they are individually and manually infused at the factory with purified guilt...Little idea do you have of the work that goes in crafting those.

        1. MachDiamond Silver badge

          "Do you have any idea how much individually wrapped cashews cost ?!?"

          OMG! Who let the marketing weeny in?!

          There will be a reckoning.

    3. cyberdemon Silver badge
      Pint

      Someone give the boy a job

      All he needs is a good boss to put that brain to work

    4. DS999 Silver badge

      Maybe he's hitting different places and this is the first one that caught him?

    5. David Hicklin Silver badge

      And according to the BBC article he used his real name...

    6. Anonymous Coward
      Anonymous Coward

      Petty criminals are inherently pretty stupid people.

  2. MrReynolds2U

    Cyber attack?

    Or faulty website?

    1. Claptrap314 Silver badge

      Re: Cyber attack?

      whynotboth.jpg?

  3. Pete 2 Silver badge

    Five stars

    I hope he at least had the style to leave them good reviews

    1. MachDiamond Silver badge

      Re: Five stars

      "I hope he at least had the style to leave them good reviews"

      Great room, friendly staff, lots of amenities. The prison sentence is my only complaint.

  4. Anonymous Coward
    Anonymous Coward

    Similar-ish thing happened to me

    Though the hack in the article was probably more sophisticated, I had a customer using PayPal who replicated what PayPal sends back to me with a legitimate order. They paid $0.01 so that an actual order was raised, but managed to send me something that told me it was the correct amount. As I'm selling software registration codes, I sent the code before I realised, so that was something I couldn't take back. It only happened once, and I've changed the system now, and blocked the code so it can't be used again. I considered more robust checks, but most of those would have involved not trusting valid customers, so the potential push-back and loss of sales from that was not worth it, much like over-aggressive copy protection on software in years gone by.

  5. bill 27

    Wait a second...

    didn't The Stainless Steel Rat pull this off decades ago?

    1. Yet Another Anonymous coward Silver badge

      Re: Wait a second...

      No he did it centuries from now

    2. MachDiamond Silver badge

      Re: Wait a second...

      "didn't The Stainless Steel Rat pull this off decades ago?"

      I don't think I've seen a Slippy Jim DiGriz reference on the ol' Reg before. Nice one.

      (gotta go load up the series on the iPod again)

  6. Anonymous Coward
    Anonymous Coward

    €1,000 A night

    Almost as much as the collective value of the mini bar.

  7. JPCavendish

    "According to the cops, he stayed at this hotel several times, costing the business more than €20,000 ($23,608) in losses."

    Not getting revenue != losses. Using the published room rate as a multiplier to calculate loss is a logical fallacy.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon