Scammers have fleeced at least 532 travellers out of £370,000 after hacking their way into hotel accounts - customers then receive emails from a fake account operated by a crime gang