Watch out for Cyber Monday Phishing Scams

22nd November 2019 | Blog, Sticky Watch out for Cyber Monday Phishing Scams

Who is most likely to fall victim to Cyber Monday phishing scams? People who don’t know about phishing scams, typosquatting, and fake look-alike websites.

Did you know there are 4 times as many fake retailer websites online as legitimate retailer websites. Hackers purchase a look-alike domain, called typosquatting. They love to use look alike letter combinations – an ‘i’ for an ‘L’ or an ‘r’ and ‘n’ which look like an ‘m’ when combined. Now Krnart can fool people because a quick glance allows the brain to connect the letters and register “Kmart” in your subconscious. The hacker doesn’t stop there. They will buy SSL Certificates for their fake site so it even shows a secure encrypted lock. What happens next?

Millions of unsuspecting shoppers will get phishing emails with tremendous sales. They will click links and try to purchase merchandise, that never comes. In other cases, they will enter sensitive information like their Amazon login credentials or credit card details into the fake sites giving their Amazon password or Credit card number to hackers. Credit cards will be charged and shoppers will have the hassle of challenging fraudulent Credit Card charges to secure refunds. What a painful experience!

What is one to do?

  1. Visit sales sites through bookmarks you’ve previously saved. This way you know you’re going to the right place.
  2. Alternatively, search Google for the real site and check the resulting search result URL very carefully before clicking and proceeding.
  3. Consider learning a Password Manager. A password manager will refuse to enter your Amazon, Google or Facebook credentials in look-alike websites. They do not fall victim to typosquatting websites ever.
  4. Watch this free CyberHoot video overview on Passwords, Passphrases and Password Managers.
  5. Above all else, be skeptical online and read articles like this one to educate yourself.

Visit CyberHoot.com now for free access to all our Cybersecurity Training videos. If you like what you learn, talk to your company about bringing CyberHoot to your employees.

Are you doing enough to protect your business?

Sign up with CyberHoot today and sleep better knowing your

employees are cyber trained and on guard!


Sign Up Today!

Latest Blogs

Stay sharp with the latest security insights

Discover and share the latest cybersecurity trends, tips and best practices – alongside new threats to watch out for.

Why Traditional Phishing Tests Fail — And How the Latest Research Proves It’s Time for a Change

Why Traditional Phishing Tests Fail — And How the Latest Research Proves It’s Time for a Change

For years, organizations have relied on fake email phishing simulations to measure employee resilience to...

Read more
Stopping Token Theft: How Microsoft’s Protections Prevent BEC Attacks

Stopping Token Theft: How Microsoft’s Protections Prevent BEC Attacks

Welcome to our two-part blog series on Microsoft’s new email security enhancement now included in Office 365 P1...

Read more
Why Hackers Love MSPs and What We’re Gonna Do About It

Why Hackers Love MSPs and What We’re Gonna Do About It

"Being an MSP today is like wearing a neon sign that says, ‘Hack me! I’m the gateway to 100...

Read more