Shoppers should Stay Alert on Black Friday/Cyber Monday as Hackers Launch Their Own Holiday Specials

guest · Nov 17, 2022

November 17, 2022

Highlights

Check Point Research found a sharp increase in fake shopping related websites in the run up to Black Friday sales.

17% of all malicious files distributed by email in November were related to orders/deliveries and shipping.

Since the start of this month, 4% of all new shopping related websites found to be malicious.

Click to expand...

Will November break all-time shopping records?
November is arguably the peak of the busiest shopping period, as people all over the world prepare for the holiday season. It was recently reported that over 154 million Americans shopped on Black Friday in 2021, with 88 million of them making purchases online.

According to Adobe, online holiday spending will near $210B this year, a 2.5% increase year on year. However, while consumers are getting ready to bag the best deal, cybercriminals are taking advantage of distracted minds by launching their own shopping “specials” in the form of phishing campaigns and lookalike fake websites. In this blog, we explore some of the campaigns we have seen and offer advice on how shoppers can enjoy threat-free online shopping this November.
Click to expand...

Avoid the scams and enjoy threat-free shopping this November
Cybercriminals are taking full advantage of the holiday spirit. That is why it is important that everyone takes extra precautions to enjoy a safer online shopping experience. Here are six ways you can stay safe this Black Friday:
Click to expand...

guest · Nov 17, 2022

More Than Half of Black Friday Spam Emails Are Scams
James Coker, Deputy Editor, Infosecurity Magazine @ReporterCoker - November 17, 2022

Over half (56%) of Black Friday spam emails received between October 26 and November 6 2022 were scams, according to research from Bitdefender.
Click to expand...

The firm’s antispam researchers analyzed all unsolicited Black Friday-related emails delivered to its customers over the period, with the vast majority (68%) sent on the final three days (November 4, 5 and 6).

Unsurprisingly, the highest proportion of Black Friday spam messages were received in the US (27%). This was closely followed by Ireland (24%), then Sweden (8%), Denmark (7%) and France (5%).
Speaking to Infosecurity about the large proportion in Ireland, Alina Bizga, security analyst at Bitdefender, noted:

“Given that the majority of Black Friday spam emails were redacted in English and that thousands of retailers in Ireland are preparing for this year’s Black Friday weekend, it’s not unusual for us to see a high portion of shopping-related spam hitting users in the region.”
Click to expand...

Another significant avenue pursued by fraudsters was ‘giveaway scams.’ In one example, recipients in the US, Ireland, Sweden, Denmark, Canada and the UK were invited to claim a Home Depot gift card worth $500. However, after clicking the link, the users were taken to a fake online survey page that had nothing to do with the gift card. Upon completion, they would be taken to another page to pick out a ‘prize,’ including a Google Pixel and an iPhone 13.
Click to expand...

She urged shoppers to be cautious around email offers during this period, especially those that require urgent action to be taken. “Urgent subjects and text lures such as (limited sales, limited stock and security issues or suspicious activity on financial and shopping accounts) remain some of the most effective lures used by scammers during the shopping season. Additionally, consumers also tend to fall for traditional too-good-to-be-true deals and discounts, especially when paired with the names of well-known retailers,” added Bizga.
Click to expand...

Bitdefender: Just your yearly dose of Black Friday spam: Cybercrooks get ahead of the game to steal shoppers’ info

By Alina BÎZGĂ - November 16, 2022
As the biggest sales event of the year looms large, online crooks are starting to target eager consumers looking to save big on Black Friday.

Every year during Black Friday and Cyber Monday, scammers and identity thieves take advantage of the shopping frenzy by pumping out email-based schemes designed to trick buyers out of their money and personal information.
This shopping season is no exception. Researchers at Bitdefender Antispam Lab have been on the hunt these past weeks for new custom scams threatening consumers’ wallets on Black Friday.
Click to expand...

guest · Nov 18, 2022

Beware this Cyber Monday: Shopping Securely Online as You Grab The Best Deals
November 18, 2022

Phishing scams, fake domains and malware attacks increase during this time of year, according to Check Point Software.

Webloyalty points out in a recent study that, Cyber Monday sales will grow this year by 11% and an average spend of about 155€ will be made, 5% more than in 2021.

Click to expand...

Cyber Monday emerged in 2005 as a continuation of the long weekend shopping starting on Black Friday. Black Friday, named after Thanksgiving was initially intended for sales and shopping in physical stores, and “Cyber Monday” for the same, but for online stores and ecommerce platforms. According to a new report by Adobe Analytics, Cyber Monday in the US is expected to remain the year’s biggest shopping day, driving an impressive $11.2billion in spending in the US, increasing 5.1% over last year, versus just 1% growth for Black Friday sales.

Nowadays both dates are practically the same and have no differentiation, not only in terms of purchases and figures, but also in the cyber-attacks they receive and which are related to these ‘shopping’ days.
Webloyalty’s Black Friday 2022 report shows that this year both shopping and spending on both days will increase. An 11% increase in sales and an average spend of 155€ (5% more than in 2021), a great opportunity for cybercriminals to commit their misdeeds.
Click to expand...

And it is not just websites that you have to watch out for, phishing is also a big player these days.

In order for people to take the necessary precautions when buying their favourite products, Check Point Software would like to provide a series of tips to stay safe whilst participating in this season of shopping and as you start to put favoured purchases in your Cyber Monday shopping carts: [...]
Click to expand...

Cyber Monday is a great opportunity for many people to get services and products they need at a great discount, although they should also be on the alert to cyber scams, phishing and specially discounted offers. In this type of online offer days, many cybercriminals try to impersonate companies involved in such specials, such as delivery companies or stores.
Click to expand...

guest · Nov 24, 2022

Scammers, bots dominate threat landscape ahead of Black Friday and Cyber Monday
By Jonathan Greig @jgreigj - November 24, 2022

As Black Friday and Cyber Monday approach, cybersecurity experts and the U.S. government are warning consumers to beware of scams, and retailers are being informed of bots scooping up troves of inventory.
Click to expand...

On Wednesday, the Cybersecurity and Infrastructure Security Agency (CISA) said the holiday shopping season is a “prime opportunity” for scammers and cybercriminals to take advantage of shoppers through fake websites, malicious links, and even fake charities in an effort to steal information and money.

CISA suggested shoppers follow basic cybersecurity advice: always use multi-factor authentication, double check website addresses and make sure any emails offering sales are legitimate.

“By following a few guiding principles like checking your devices, shopping from trusted sources, using safe purchasing methods, and following basic cyber hygiene like multi-factor authentication, you can drastically improve your online safety when shopping online for gifts this year,” CISA Director Jen Easterly said.
Click to expand...

Most of the emails fall under five categories: fake gift card requests and giveaways, fraudulent donation requests, demographic targeting, subscription renewals and crypto payment demands.

Researchers at Check Point Security have found dozens of fake websites spoofing well-known brands like Louis Vuitton. In October they found scammers offering sales for the brand in phishing emails with the subject line: “Black Friday Sale. Starts at $100. You’ll Fall In Love With Prices.”
Click to expand...

‘Freebie’ Bot concerns
In addition to the concern about cybercriminals and scams, bots are causing widespread problems for retailers and consumers looking to buy in-demand items.

Kasada’s threat research team uncovered a new type of bot that automatically scans retail websites for mispriced goods and services, and purchases them at scale before the error is fixed.
More than 250 retail companies were recently being targeted by Freebie Bots, with over 7 million messages being sent monthly in freebie communities, Kasada researchers found.
Click to expand...

guest · Nov 25, 2022

Black Friday shoppers beware: online threats so far in 2022
November 23, 2022

The shopping event of the year, Black Friday, is almost here, and while the big day does not officially arrive until Friday, November 25th, deals are already starting. The day kickstarts the frenzied holiday shopping season with eye-catching promotional deals that lure shoppers into spending more of their hard-earned cash. In the weeks leading up to Black Friday, we have already seen discounts reaching 70% and even 80%, grabbing the attention of millions of customers.

While on ordinary days, the customer can easily see that if the product is too cheap, it is most likely a scam, during the Black Friday sales, it gets harder to tell. Shoppers become less vigilant, and therefore, an easy target for cybercriminals. That is why we constantly monitor the landscape of shopping-related cyberthreats and protect users from these risks. Here is what we have found this year.
Click to expand...

guest · Nov 25, 2022

Experts Warn Remote Workers of Black Friday Security Threats
Phil Muncaster UK / EMEA News Reporter, Infosecurity Magazine - November 25, 2022

Security experts have warned of the potential risk to corporate IT systems and data from remote workers surfing for Black Friday deals.

Today’s sales spectacular represents the official start of the holiday shopping season and typically attracts a range of scams – from sales of non-existent items to phishing attempts.
Data published last week from Bitdefender claimed that over half (56%) of Black Friday spam emails received between October 26 and November 6 this year were scams.
Click to expand...

According to Proofpoint, the scams often extend to delivery. When sent via text, these lures comprised 56% of all smishing cases in Q4 2021, a 105% year-on-year increase, it claimed.
Separately, OpenText Security Solutions said it recorded a third (34%) of all phishing activity for 2021 in the month of November.
Click to expand...

Dominic Trott, UK head of strategy at Orange Cyberdefense, warned that home workers may inadvertently put their employer at risk if they reuse passwords across work and consumer accounts, or unwittingly download info-stealing malware or worse.

“It’s becoming common for employees to use their work devices for personal tasks as the boundary between home and work fades, meaning that any malicious link they click on could result in cyber-criminals infiltrating corporate networks or stealing corporate credentials,” he added.

“Businesses therefore need to take responsibility for educating their staff on the risks that may arise from activity outside of their jobs, and the cyber-hygiene behavior they need to adopt to stop the worst from happening. Ultimately, if businesses advise and educate employees on how to identify and report phishing around the holiday period, they should be able to minimize the risk of ransomware and credential theft.”
Click to expand...

Log in or Sign up

Shoppers should Stay Alert on Black Friday/Cyber Monday as Hackers Launch Their Own Holiday Specials

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Shoppers should Stay Alert on Black Friday/Cyber Monday as Hackers Launch Their Own Holiday Specials

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches