How to Shop Online Like a Security Pro
Summary: Krebs on Security's holiday shopping guide warns that fake e-commerce sites proliferate during the season and that even big-name marketplaces carry risk, citing the author's own loss of hundreds of dollars on a discounted Sonos speaker sold through a hacked Amazon merchant account. It reports that PhishLabs found over 80% of survey respondents believed the green padlock meant a site was legitimate or safe, and that roughly half of all phishing sites now carry the padlock.
Key Takeaway: The padlock only means traffic is encrypted, so a shopper - or an employee buying from a look-alike domain - gets no signal about who is on the other end; PhishLabs put a quarter of phishing sites using SSL certificates as far back as December 2017, and about half today.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026