Search This Blog

Powered by Blogger.

Blog Archive

Labels

Showing posts with label Black Friday. Show all posts

How to Stay Protect From Cybercrimes in This Holiday Season?


As the Christmas month is almost here, online consumers are increasingly turning to online shopping, making it also a festive season for threat actors to conduct cybercrime activities.

Because of the increase in e-commerce and the sizeable number of online buyers, fraudsters have access to a wider network of prospective victims. Thus, they have more opportunities to steal money as a result.

Peter Olyott, CEO of financial service company, Indwe Risk Services (Indwe) says, “Shoppers tend to be more relaxed during the festive season, making them more susceptible to overlooking suspicious online activity, and the abundance of special offers and deals during this period makes scams more believable,”

According to a report published by Interpol, online scams pose the most significant threat to consumers regarding cybercrime. They note that cybercrime activities tend to escalate over Black Friday and the holiday season. 

In order to mitigate the risk of cybercrime and stay secure, online users must know some of the common cybercrimes. Here, we are mentioning some of these common cybercrimes:

  • Fake Website: These are made to look like real brands, making it difficult to tell them apart from scammers. But frequently, they offer discounts and offers that seem too good to be true. Cybercriminals take advantage of the opportunity to steal critical information when unwary buyers click on these bargains and divulge their banking information.
  • Phishing Schemes: Phishing involves sending emails that trick recipients into downloading attachments, clicking on links, or creating accounts. Phishing emails can easily slip through the cracks this season due to the deluge of holiday-themed mailings.
  • Fake Gift Cards: These are an effective way for financial thieves to steal money. Gift card transactions are almost impossible to charge back, in contrast to credit card transactions. Scammers use a variety of strategies, including assuming the identity of trustworthy businesses and demanding payment in the form of gift cards, creating phoney gift card activation websites in order to obtain personal data, and posting phoney gift cards with discounts on websites belonging to other parties.

How to Stay Protected in this Black Friday? 

Here are some of the safety measures one can take to protect themselves in this holiday season:

  • Regularly check electronic statements and debit/credit card balances. 
  • Go with strong, unique passwords for different accounts. 
  • Set up two-factor authentication on all significant accounts, including social media, banking, and email.

“Given the increasing sophistication and escalation of cybercrime, we strongly encourage consumers to exercise caution while shopping online during the holiday season. By remaining alert for anything suspicious, you can protect yourself from falling victim to cybercrime, so you can enjoy a happy and safe festive season,” adds Olyott.  

Hackers Construct Fraudulent Websites & Steal Data During 'Black Friday' Sales

 

In accordance with a new report, threat actors are hosting websites for malicious campaigns centered on the Black Friday theme, with e-commerce, cryptocurrency, and travel being the top targets. 

Researchers discovered that cybercrime forums in various languages are buzzing with talk about Black Friday. According to CloudSEK researchers, who also discovered an Ethereum giveaway scam website, while some actors promote their malicious services/campaigns, others seek to use them.

“Compromised personal identifiable information (PII) and banking credentials can be used to perform unauthorized transactions and social engineering attacks,” they warned.

CloudSEK's contextual AI digital risk platform 'XVigil' discovered hundreds of registered and operational Black Friday-themed domains. The impersonation of legitimate websites, services for Google/Facebook ads, and the spread of malicious applications were all common types of attacks.

The discovery revealed that website cloning is a common technique used by hackers of all levels of sophistication to host bogus copies of legitimate websites.

"The iconic Black Friday sale has now become a global theme, with cybercriminals of all levels and expertise attempting to launch malicious campaigns." "The majority of these campaigns misrepresent or impersonate popular brands and companies offering sales and services in order to defraud the public," Desai added.

The researchers cautioned against accepting freebies, attractive deals, or third-party solutions that appear suspicious.

Security Experts warn about threats before Black Friday


Experts of the antivirus company Kaspersky Lab reported that in the discount season, also known as Black Friday, the number of threats from cyber fraudsters has grown significantly.

"According to Kaspersky Lab, the number of phishing threats related to Black Friday has increased significantly over the past two weeks. On the eve of big sales and the upcoming holiday shopping season, cybercriminals are increasingly trying to attack users who prefer to shop online," said the antivirus company.

So, in the period from 18 to 24 November, the company recorded almost twice as many fraudulent resources, compared to the previous week.

The number of phishing attacks on online stores has also increased.“This growth is especially noticeable in Russia: if approximately every 20th phishing attack was sent to the e-commerce section in Runet two weeks ago, last week phishers tried to attack Russian online stores in every 11th case,” concluded company.

As Kaspersky Lab content analyst Tatyana Sidorina noted, an increase in the percentage of phishing attacks is also expected in the upcoming New Year's sales. In addition, there are about 12% more such attacks in the fourth quarter than at other times of the year.

It is interesting to note that earlier, Roskomnadzor warned about the appearance on the eve of Black Friday fraudulent sites that illegally collect personal data under the guise of sales.

"Roskomnadzor experts note that the main purpose of collecting such data (name, phone number, email address, bank details, etc.) is to use them later as spammer databases and to steal bank card data,” stated the regulator.

To avoid identity theft, Roskomnadzor recommends checking the originality of the domain of the online store and checking the presence of an SSL certificate. If the site address begins with http://, and not with https://, this is a reason to doubt the originality of the page.