Latest national scam more sophisticated and 'just the tip of the iceberg'

Customers across Australia are receiving scam messages following a data leak involving third-party booking provider RMS.

Travellers to Western Australia's north say they were initially fooled by the phishing scams, as they included accurate details about upcoming accommodation bookings.

RMS says investigations are continuing to assess the full scope and impact of the incident.

A cybersecurity expert says scammers are using fear and "weaponising urgency", as holiday-makers and hotels in Western Australia's Kimberley are caught up in a global data breach.

The breach, involving third-party booking provider RMS, saw hackers access names, booking information and contact details from across the country.

Cameron Craig received a WhatsApp message regarding his upcoming booking at Cable Beach Club in Broome last week.

The Sydney resident said the text requested him to provide his payment details through a link, or risk losing his booking.

The message included details including the correct dates of his planned trip and his full name.

Mr Craig said he clicked on the link and entered some of his credit card information but the session timed out.

He later realised the message was sent by an international number and the reservation code was different.

Mr Craig said he alerted Cable Beach Club, which then notified guests.

The resort has been contacted for comment.

Kimberley Accommodation Group, which also uses RMS Cloud as its third-party reservation system, received reports from guests who had received similar phishing messages.

Managing director Dannielle Hart said hackers used genuine booking details and asked customers to confirm card details or make a payment.

Ms Hart said the company was not able to comment on the number of customers impacted, or any customer financial losses at this stage.

"Our advice to guests is not to respond to unexpected messages, click links, provide card details or make payments in response to communications about their booking," she said.

RMS confirmed the unauthorised activity identified within the RMS environment had been contained yesterday.

The provider said investigations were continuing as it assessed the full scope and impact of the incident.

Chief executive Adam Seskis said scams had become "increasingly sophisticated" in a statement, but confirmed credit card and payment details were not involved in the breach.

Cybersecurity lecturer Brianna O'Shea said phishing scams had evolved over time to become more convincing.

"Early attempts relied on generic mass emails with obvious spelling errors, poorly designed fake logos and simple web links," she said.

The Murdoch University academic said third-party systems were a "lucrative target" for hackers.

She said the breach could also have implications for FIFO workers and independent bed and breakfasts, where RMS was used to support bookings in temporary accommodation.

"This is just the tip of the iceberg," Dr O'Shea said.

"It'll be up to the owners to reach out to their customers and provide them with that support."