Black Friday and Cyber Monday: High Deals, Higher Cyber Risks

As the excitement of Black Friday and Cyber Monday draws shoppers in with unbeatable deals and discounts, it’s important to remember that the online shopping frenzy also brings increased cybersecurity risks. While consumers race to snag the best bargains, cybercriminals are equally eager to exploit vulnerabilities, using tactics such as phishing scams, fake websites, and open Wi-Fi and vulnerable devices. This heightened risk requires vigilance from both shoppers and businesses to ensure that the only thing being stolen this season is the savings.

Summary – Zooming In

Here’s what you need to know and stay safe while hunting for discounts.

1. Beware of Phishing Scams: Phishing attacks are one of the most common methods cybercriminals use to target online shoppers. During the shopping frenzy, you may receive emails or text messages that seem like legitimate offers from trusted brands. These messages often contain links that lead to fake websites designed to steal your personal and payment information.
   • Tip: Always verify the sender’s email address and look for any signs of inconsistency, such as poor grammar or suspicious URLs. Avoid clicking on links directly from emails. Instead, visit the retailer’s website by typing the URL into your browser.
2. Fake Websites and “Too-Good-to-Be-True” Deals: Cybercriminals set up fake websites that mirror popular retail stores, offering “exclusive” deals. These sites may look convincing, but they’re designed to steal your money or personal data.
   • Tip: Always check the website’s URL to ensure it’s the official retailer’s site. Look for “https” in the address bar and a padlock symbol, which indicates a secure connection. If a deal seems too good to be true, it probably is.
3. Protect Your Devices and Networks: Cybercriminals may also exploit vulnerabilities in your devices or network to access your personal data. Public Wi-Fi networks, often used during shopping trips, are particularly risky, as they can be a target for hackers to intercept information.
   • Tip: Avoid shopping on public Wi-Fi, or use a reliable VPN service to secure your connection. Ensure your devices have up-to-date antivirus software and strong passwords for extra protection.
4. Monitor Your Accounts: After making purchases, it’s crucial to keep an eye on your bank and credit card statements for any unauthorized transactions. Promptly reporting suspicious activity can help minimize damage if your information is compromised.
   • Tip: Set up alerts on your bank or credit card accounts to receive notifications of any unusual transactions in real-time.

Final Thoughts

While Black Friday and Cyber Monday offer amazing deals, they also present significant cybersecurity risks. By staying vigilant and following these tips, you can enjoy the discounts without falling victim to fraud. Remember, the best protection against cyber threats is awareness and proactive caution. Happy shopping, and stay safe!

DefenseStorm Recommendations 

Continuous research is being conducted for all newly discovered or recurring malware and ransomware. As always, DefenseStorm recommends the following practices to help secure your environment:

• Continued internal training for phishing campaigns
• Block threat indicators at their respective controls
• Keep all systems and software updated to the latest patched versions to best protect against all known security vulnerabilities
• Maintain a strong password policy
• Enable multi-factor authentication
• Regularly back up data, air gap, and password backup copies offline
• Implement a recovery plan to maintain and retain multiple copies of sensitive or proprietary data and servers in a physically separate, secure location
• Use app hardening
• Restrict administrative access