Cybercriminals are exploiting stolen travel booking data and WhatsApp for highly personalized phishing attacks that appear deceptively authentic and redirect to fake booking portals.