One day a hotel staff receives an email from a scammer who is impersonating to be a senior level executive and doesn't think about it to be anything bad
Ana: Hmm! What's this email about now
Email: Effective Immediately, we are requiring all staff members to take a mandatory training
Ana: This is extra work that I really don't want to do
Ana: I still have to do it though
Ana: Great!! Now I have to take this training
Ana clicks on the training link and is asked to provide her credentials to start the training
Ana: Great!! I am getting an error after providing my credentials. Let me try doing it again
Hacker: We can now install malware to get everyone who checks in the hotel with their information and current history of clients
Hacker: Awesome!!!! We are in.
Hacker: Here comes the first person's information!! Fantastic
Hacker on the other side is able to install malware in the hotels system and now every one who checks in to the hotel is directly sending their information to the hackers
Ana: I should talk to the manager and let him know what's going on
Ana: The email looked like as if it's from you!!
Manager: It seems like you have sent information to a scammer. There is nothing that can be done now for all the customers whose information has been leaked. This is really bad for the reputation of our hotel