Attackers in certain countries appear to have a particular focus on breaching organisations operating in the travel sector.