Forest Global Training Partners

Cyber Risks · Cisco Talos

Best practices for staying safe online during the holiday shopping season

Summary: Cisco Talos researchers Jon Munshaw, Craig Williams and Matt Valites described holiday shopping attack vectors including fake websites, coupons, invoices and malicious ads designed to steal login, banking or personal information. Williams, Talos' director of outreach, described a "secret shopper" scam in which adversaries send a fake check or gift card, have the victim send money through Western Union or MoneyGram or buy gift cards and share photos of them, and the victim is left with a loss once the bank identifies the check as fake.

Bottom line: Williams said on the radio show that simply viewing a malicious page is enough to compromise a machine, and Valites cited typo-squatted retailer domains such as Niek[.]com that harvest credentials and card numbers from shoppers who don't notice the difference.

Read the original at Cisco Talos ↗

Topics
Malware
Related