This is the link to the research, you provided a link to Reddit:
<a href="https://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com" rel="nofollow">https://salt.security/blog/traveling-with-oauth-account-take...</a>