Vulnerabilities / Threats

11/21/2017
10:30 AM
Dawn Kawamoto
Dawn Kawamoto
Slideshows
50%
50%

6 Real Black Friday Phishing Lures

As the mega-shopping day approaches, here's a look at six examples of phishing attacks - and ways to avoid taking the bait.
Previous
1 of 7
Next

Image Source: wk1003mike via Shutterstock

Image Source: wk1003mike via Shutterstock

Black Friday is expected to attract 115 million physical shoppers, making it the busiest holiday shopping day during the Thanksgiving Day weekend, according to a National Retail Federation report. And phishers are looking to get a cut of the action on Black Friday.

Last year, for example, Black Friday alone racked up approximately 770,000 financial phishing attack attempts, according to Kaspersky Lab's Beyond Black Friday Threat Report 2017. RiskIQ, meanwhile, discovered 19,219 URLs with the words Black Friday directing users to another page with malicious content, according to its recently released 2017 Black Friday e-Commerce Blacklist report.

Black Friday phishing scams run the gamut of unethical merchants duping users into visiting bogus high-end retailing websites to sell them knock-off items at a "discount," to cyberthieves enticing users to visit malicious websites to steal their credit card and personally identifiable information.

“Cybercriminals use Black Friday to cover their attacks. They know that people are looking for a chance to buy expensive things at a much lower cost, so the phishers make sure they offer the best price, disguising themselves as well known and trusted brands," says Nadezhda Demidova, lead Web-content analyst at Kaspersky Lab.

Here are examples of six real Black Friday phishing campaigns launched in the past month and one from 2015, and how to avoid falling for these types of attacks.

 

Dawn Kawamoto is an Associate Editor for Dark Reading, where she covers cybersecurity news and trends. She is an award-winning journalist who has written and edited technology, management, leadership, career, finance, and innovation stories for such publications as CNET's ... View Full Bio

Previous
1 of 7
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Riffguitare
100%
0%
Riffguitare,
User Rank: Apprentice
11/22/2017 | 3:33:48 AM
Good
Thx for this really good article !
WebAuthn, FIDO2 Infuse Browsers, Platforms with Strong Authentication
John Fontana, Standards & Identity Analyst, Yubico,  9/19/2018
NSS Labs Files Antitrust Suit Against Symantec, CrowdStrike, ESET, AMTSO
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/19/2018
Turn the NIST Cybersecurity Framework into Reality: 5 Steps
Mukul Kumar & Anupam Sahai, CISO & VP of Cyber Practice and VP Product Management, Cavirin Systems,  9/20/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Are you sure this is how we get our data into the cloud?
Current Issue
Flash Poll
The Risk Management Struggle
The Risk Management Struggle
The majority of organizations are struggling to implement a risk-based approach to security even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-14633
PUBLISHED: 2018-09-25
A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The at...
CVE-2018-14647
PUBLISHED: 2018-09-25
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming larg...
CVE-2018-10502
PUBLISHED: 2018-09-24
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 4.2.18.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exist...
CVE-2018-11614
PUBLISHED: 2018-09-24
This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists wit...
CVE-2018-14318
PUBLISHED: 2018-09-24
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling of ...