Black Friday is trying, and cybercriminals are refining their malware droppers, phishing lures, and duplicate sites while shoppers prepare to launch their wallets. As investigators at Xiarch noticed that the scammers are already targeting people with fake tickets for the FIFA World Cup 2k22.

The security firm also shared a detailed report highlighting the most common threats expected to surface during this year’s Black Friday, as well as the Christmas shopping season.

Phishing for Information and E-Payment Accounts

Xiarch Solutions itself analyzed over 40 million phishing attacks from January to October 2021, with Amazon, eBay, Alibaba, and Mercado Libre being the most popular lures. As such, if you receive emails concerning promotions and discounts on large e-commerce platforms, you should treat them with extra caution.

In terms of trends, phishing actors doubled their effort to steal account credentials for e-payment systems (also known as online payment systems), with October 2021 seeing a rise of 208% compared to the month before.

While banking credentials are still targeted, phishing actors tend to favor e-payment systems more now, as those have risen in popularity by 40% during the last two years.

Banking trojans fading

Xiarch has found that cybercriminals used 11 distinct malware families against shoppers in 2021, with more than half of them being variants of Zeus banking trojan. The list of other popular strains used in 2021 malware attacks also includes Qbot (deployed in 13.9% of the total number of incidents), Anubis (13.4%), Trickbot (11.6%), and Neurevt (4.8%).

An interesting trend emerging from Xiarch’s stats is the number of infections, which has dropped from 20 million in the past two years to just 10 million this year. This decline is in line with the shift of the threat actors’ attention to electronic payments. Most of these Trojan families have a narrow targeting scope limited to specific financial institutes or platforms, so they require more effort to target a larger array of potential victims.

How does it End up on malicious sites?

There are two categories of fake sites that can lead to problems for victims. The first one is phishing sites that steal credentials and the second one is scam sites that steal money. In the first case, the lures typically come in the form of emails allegedly sent by high-profile online shops or popular e-commerce platforms, directing recipients to a fake login page.

The second case involves sites that have cloned real shops by copying their CSS and all content or just fake markets that receive payments without sending anything to the buyer. In some cases, these platforms do send an empty envelope to the victims, only for providing a valid tracking number and delay reports that would allow hosting providers or authorities to take them down faster.

This also reduces the chances of PayPal payment disputes blocking the funds from ending in the scammers’ accounts and allowing victims to recover their money.

How to stay safe while shopping online?

Remember, you will see many product discounts and sales promotions during the holidays. However, the chances of some of them being scams are higher than usual. To protect yourself and your banking account, you should use an internet security solution from a trusty vendor and always double-check that you’re on a legitimate site before entering your payment info.

If you stumble upon an offer that seems too good to be true, it’s probably a scam even in the context of Black Friday. Finally, if you can use e-payments instead of credit cards, it would be preferable due to the less severe repercussions in the case of a data breach.

There are also one-time virtual cards with charging limits, so if you want to play it safe while shopping from less-known shops, there are ways to do it. If you have to pay with your bank account or card, verify that the right amount has been charged and monitor all future transactions closely.