Multiple hotels have been caught up in a phishing scam, with guests receiving fake emails which include details from legitimate bookings.