The new ways cybercriminals are attacking travel companies