High potential for online shopping scams and phishing attacks targeting post-holiday sales.

‍

After the holiday season, marked by shopping extravaganzas like Black Friday, Cyber Monday, and the Christmas rush, the festive spirit often lingers. However, alongside the cheer and post-holiday sales, a less welcome phenomenon also persists: the heightened risk of online shopping scams and phishing attacks. Cybercriminals exploit the consumer frenzy during this period, targeting eager shoppers with fake websites, phishing emails, and fraudulent deals that promise significant discounts but result in financial losses or identity theft. As consumers continue to hunt for bargains and clearances, understanding and mitigating these cyber threats becomes increasingly crucial to protect individuals and maintain trust in e-commerce platforms.

‍

CEO Fraud

One common phishing attack that has gained traction in recent years involves cybercriminals impersonating a company executive, such as the CEO or manager, to target unsuspecting employees. This scheme, often referred to as a "gift card scam" or "CEO fraud", begins with an email crafted to appear as though it is from the company's boss. The message typically conveys urgency and appeals to the employee's sense of responsibility or goodwill, requesting assistance in purchasing gift cards for staff as a gesture of appreciation. Once the employee complies and buys the gift cards, the attacker asks for the codes to "finalize the process," claiming they will distribute the gifts personally. In reality, the scammer uses these codes for personal gain, often leaving the victim employee to absorb the financial loss. This social engineering tactic leverages trust and hierarchical dynamics within organizations, making it an effective and damaging method of exploitation.

‍

‍

Fake Domains (Brand-Impersonation Scams)

Scammers frequently copy well-known companies such as The North Face, Amazon, Rolex, eBay, Temu, Target, and others. They build fake websites with massive discounts to lure naive customers. Once a purchase is made, the scammers steal the victim's personal information and payment, leaving them empty-handed.

Additions: These fake domains are frequently sophisticated enough to resemble the legitimate sites, replete with convincing branding and user interfaces, making it impossible for even the most cautious visitors to tell the difference.

‍

‍

‍

In addition to these there were multiple fake pages under the same domain:

‍

‍

‍

Other fake domains impersonating different brands :

‍

‍

‍

Adverts (Malicious advertising)

Malicious advertising is another tool in the scammers' arsenal. These advertisements promote fraudulent websites on social media, search engines, and even real advertisement networks. Their goal is to generate traffic to fraudulent websites, increasing the likelihood of defrauding consumers.

Fake adverts on social media frequently show certain telltale indications that can help you detect them. Offers that appear too good to be true, such as huge discounts or free gifts, are classic warning flags. 

Always inspect the page or account for verification badges and a credible history; bogus accounts frequently have little followers or engagement. 

Be wary of strange URLs, particularly those with misspelt domain names or unusual extensions. Low-quality graphics, grammatical problems, and forceful language such as "Act Now" or "Limited Time Offer" might all indicate a hoax. 

Examine the comments for warnings or extremely generic reviews, which could be false. Genuine firms provide contact information, and their promotions are usually listed on their official websites, so double-check any claims. 

Ads requesting unconventional payment methods, like gift cards or cryptocurrency, or asking for sensitive personal information, should be avoided. If unsure, reverse-search the product images to ensure they're not stolen. Being vigilant about these signs can help you steer clear of fraudulent ads.

‍

Credit Card Skimmers

The menace of fraudulent payment portals that imitate authentic gateways like PayPal has grown significantly. When customers enter their information, these bogus portals are made to steal their credit and debit card information.

‍

Additions: To add even more dishonesty, these phoney portals are occasionally even integrated into websites that appear authentic.

‍

‍

Similar domains:

‍

‍

The InfoStealer Malware Logs

Stealer logs have turned into a scammer's treasure trove. These records, which frequently get stolen via malware infestations, include session cookies from e-commerce sites along with usernames and passwords. Equipped with this information, scammers are able to log into personal accounts without authorisation, which allows them to place fraudulent orders or steal additional data.

‍

Additions: To make matters more serious, scammers usually target accounts that have linked bank accounts or recorded payment methods. To counter this trend, e-commerce platforms need to improve their security protocols.

‍

Keyword Tracking: The Scammer's Method

Holiday-related keywords are used by scammers to sway search engine results, harmful advertisements, and phishing campaigns. Terms such as:

"Black Friday,"  "Black Friday + sale," "Black Friday + deal," "Black Friday + discount," "Black Friday + gift," "Black Friday + coupon"

"Cyber Monday," "Cyber Monday + sale," "Cyber Monday + deal," "Cyber Monday + discount," "Cyber Monday + gift," "Cyber Monday + coupon"

These keywords entice customers with promises of unique discounts in social media postings, email marketing, and scam domains.

To increase their exposure in search results, a lot of scammers include these keywords in their domain names or URLs.

The usage of social media platforms is growing, and fraud is getting more common with hashtags like #BlackFridayDeals and #CyberMondaySavings.

Advice for Consumers: Verify URLs at all times, especially if they contain questionable terms. And use browser extensions or tools to detect potentially harmful links before clicking.

‍

‍

Other domains using the same tactics:

‍

‍

‍

We can clearly see these domains are recently created. In addition to fake domains and scams, fake postal alerts spike over the holidays, capitalising on the increase in internet purchasing. Victims receive fraudulent emails or texts alleging that their item has been delayed or held. To fix the issue, users are required to either submit personal information or pay a nominal "release fee."

Our research turned up multiple counterfeit domains mimicking major courier organisations such as DHL, FedEx and USPS. These websites frequently appear shockingly legitimate, including with logos and professional designs.

‍

‍

‍

Tips for the shoppers : Confirm delivery difficulties with the legitimate courier service using their verified website or app. And avoid clicking links in unsolicited emails or texts.

Some other domains that do the same are :

‍

‍

‍

Belated Holiday E-Cards.

Late holiday gift cards are as prevalent in January as tangled Christmas lights. However, many of the e-cards that arrive in your inbox following the holidays could be the work of scammers. These bogus virtual greetings are frequently laced with malware, which may infect your device if you click on a link embedded in the email.

Don't assume that every belated Christmas e-card you receive is real, even if it appears to be sent by a friend. An valid e-card will offer a confirmation code that you can copy and paste into the related website. If you receive a late e-card without this code, do not open it. Delete and designate the email as spam.

‍

‍

Tips to Stay Safe from Holiday Scams

1. Verify Website Authenticitysome text
   • Check the URL for typos or slight misspellings (e.g., "amaz0n.com" instead of "amazon.com").
   • Look for "HTTPS" and the padlock symbol in the address bar, but remember that even these can be faked.
   • Use tools like Whois Lookup to check domain registration details for suspicious websites.
2. Avoid Clicking on Unsolicited Linkssome text
   • Refrain from clicking links in unsolicited emails, texts, or social media ads promising unbelievable deals.
   • Instead, type the retailer’s website directly into your browser.
3. Be Skeptical of Unrealistic Discountssome text
   • If a deal seems too good to be true, it likely is.
   • Compare prices across trusted platforms to determine if the offer is legitimate.
4. Stick to Trusted Payment Methodssome text
   • Use secure payment methods like credit cards or digital wallets (e.g., PayPal) that offer fraud protection.
   • Avoid direct bank transfers or using debit cards for online purchases.
5. Enable Two-Factor Authentication (2FA)some text
   • Protect your accounts with 2FA, which adds an extra layer of security beyond just a password.
6. Check Reviews and Ratingssome text
   • Research sellers or websites you’re unfamiliar with by reading reviews on trusted platforms like Trustpilot or Better Business Bureau.
   • Avoid websites with few or no reviews.
7. Use Security Tools and Extensionssome text
   • Install browser extensions like HTTPS Everywhere or ad blockers to reduce exposure to malicious ads and fake websites.
   • Use antivirus software with phishing and malware protection.
8. Monitor Keywords in Emails and Adssome text
   • Be cautious of keywords like “exclusive offer,” “limited-time deal,” and holiday-themed terms paired with “free” or “gift.”
9. Inspect Payment Gatewayssome text
   • Before entering card details, verify the payment gateway's authenticity. Look for recognizable logos like Visa, Mastercard, or PayPal, but double-check their legitimacy.
10. Stay Vigilant with Delivery Notificationssome text
    • Cross-check any "delivery problem" emails or texts with the courier's official site or app. Avoid providing personal information through unsolicited messages.
11. Enable Account Alertssome text
    • Set up alerts for unusual account activity, including new logins or transactions.
12. Report Suspicious Activitysome text
    • Report phishing emails or fake websites to organizations like the Federal Trade Commission (FTC) or anti-phishing agencies.
    • Notify your bank immediately if you suspect payment fraud.
13. Use Disposable Email Addressessome text
    • For shopping deals or sign-ups, use temporary or secondary email addresses to reduce exposure to phishing attacks.
14. Educate Yourself and Family Memberssome text
    • Share awareness about common holiday scams with friends and family to ensure they stay protected as well.