IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Phishing attacks surge ahead of Black Friday and Cyber Monday

Some common email phishing campaigns saw an 80% increase in early November

Some websites have not been designed to operate with a finger press

Security researchers have observed a sharp increase in the number of phishing exploits in the run-up to Black Friday and Cyber Monday.

According to a new Check Point Software report, phishing emails have increased by over 13 times in the last six weeks. Currently, one in every 826 emails delivered is a phishing attempt, compared to less than one in 11,000 at the start of October.

Researchers at Check Point said ongoing COVID-19-related restrictions that limit shoppers’ access to physical stores is driving the spike in phishing attempts as hackers look to capitalize on the expected record numbers of people shopping online. 

There were 80% more sale- or special-related email phishing campaigns in the first two weeks of November than the weekly average throughout October. These emails used terms like “special,” “offer,” “sale,” “cheap” and “% off.”  And on November 9 and 10 alone, the number of “special offer” phishing campaigns exceeded the whole of the first week of October.

Researchers highlighted one email phishing campaign where threat actors imitated Pandora, the jewelry store. In this campaign, the sender’s email address was from an Amazon domain, but there was no mention of Amazon in the email or its links. Further investigation revealed it was a spoofed Amazon email address.

Related Resource

The State of Email Security 2020

Email security insights at your email perimeter, inside your organisation, and beyond

Email security insights at your email perimeter, inside your organisation, and beyondDownload now

The links within the email initially led to the website www[.]wellpand[.]com, but a few days later, they led to www[.]wpdsale[.]com. These websites were registered at the end of October and beginning of November, right before the hackers sent the phishing emails -- a strong indication of a scam. Further investigation showed both websites were Pandora spoofs. 

Check Point manager of data intelligence Omer Dembinsky said COVID-19 restrictions will inevitably drive more online shopping traffic, fueling hacking efforts.

“Consequently, we expect record-breaking hacker activity targeting online shoppers this upcoming holiday season, especially around Black Friday and Cyber Monday.  We’re noticing an unusual and determined focus by hackers on ‘special offers’ this month of November,” he said.

“These phishing campaigns can be extraordinarily deceptive, and online shoppers could easily mistake them for real offers. We’re living in an age where every email in our inboxes must be treated with caution. I strongly urge every online shopper to think twice when looking at a “special offer” from their favorite brand.”

Featured Resources

Accelerating AI modernisation with data infrastructure

Generate business value from your AI initiatives

Free Download

Recommendations for managing AI risks

Integrate your external AI tool findings into your broader security programs

Free Download

Modernise your legacy databases in the cloud

An introduction to cloud databases

Free Download

Powering through to innovation

IT agility drive digital transformation

Free Download

Recommended

LockBit 2.0 ransomware disguised as PDFs distributed in email attacks
Security

LockBit 2.0 ransomware disguised as PDFs distributed in email attacks

27 Jun 2022
Best free malware removal tools 2022
Security

Best free malware removal tools 2022

22 Jun 2022
A guide to cyber security certification and training
Careers & training

A guide to cyber security certification and training

16 Jun 2022
What is shoulder surfing?
social engineering

What is shoulder surfing?

10 Jun 2022

Most Popular

Actively exploited server backdoor remains undetected in most organisations' networks
cyber attacks

Actively exploited server backdoor remains undetected in most organisations' networks

1 Jul 2022
Former Uber security chief to face fraud charges over hack coverup
data breaches

Former Uber security chief to face fraud charges over hack coverup

29 Jun 2022
Why India wants to become a chipmaking powerhouse
components

Why India wants to become a chipmaking powerhouse

28 Jun 2022