1 reactions
Holiday Cybercrime Surge – Top Tips to Avoid Being a Victim
As the holiday shopping frenzy kicks off with Black Friday and Cyber Monday, remember that consumers aren’t the only ones hunting for opportunities. This is the prime hunting season for cybercriminals to conduct scams, fraud, impersonation, and theft at massive scale.
- 1 in 3 U.S. adults report experiencing an online shopping scam ( Pew research )
- 300 million users are being targeted by cybercriminals for their sensitive and financial information ( Amazon )
- 250% increase in fake shopping websites ahead of Black Friday and 232% jump in impersonation sites of Amazon ( NordVPN )
- 45% surge in luxury brand counterfeit storefronts, such as Coach, Dior, Ralph Lauren, Rolex, and Gucci. ( McAfee ).
- McAfee also reports email scams are exploding, up ~50% in retail and ~85% in tech with trusted tech brands being impersonated, with Apple, Nintendo, Samsung, Disney, and Stream listed at the top 5.
AI is providing a massive advantage to attackers by automating the creation of realistic fake e-commerce sites and phishing email campaigns for the singular purpose of obtaining your sensitive data and assets. They may target your financial accounts to siphon money, credit card information to sell or make fraudulent purchases, and even access to home and work systems as part of extortion schemes.
Be wary. This season, the cybercriminals have an advantage and they will use it for their benefit and your detriment! They are faster, highly automated, and more deceptive than ever.
Trust nothing (email messages, links, etc.) and follow good cybersecurity practices.
Here are some tips:
1. Never click a link in an email or message. Always navigate to the site yourself.
2. Never enter in your login credentials unless you are absolutely sure the site is trustworthy.
3. Pay attention to the sender of messages to validate a legitimate domain.
4. Use 2-factor or Multi-Factor Authentication when possible.
5. Don’t store your credit card details on new e-commerce sites.
6. Purchase items with a credit card instead of a debt card, as you are likely to have fraudulent credit card purchases reimbursed.
7. Set alerts for charges on your cards, so you know when charges have occurred.
8. Be very wary of new or unfamiliar online retailers.
9. Don’t be pressured with countdown timers, limited time sales, or urgency tactics that exploit cognitive vulnerabilities to drive poor decisions.
10. Don’t share your personal information when it is not obviously needed for the transaction. Nobody should be asking your date-of-birth, employer’s name, family member contact information, or account balances.
11. Use security tools to verify sites, trust levels, and conduct secure e-commerce
12. Don’t install any merchant or helper apps, as they may be malicious or trojanized. Same goes for tech support calls asking you to download software, sign-in, or provide permissions to your device.
13. If ever in doubt, ask a security professional.
Cybercriminals will be out in force, preying on distracted consumers. Stay sharp, protect what is important to you, and share these tips with friends and family. A little awareness goes a long way in protecting your valuables and not being easy prey.
#cybersecurity #cybercrime #fraud #finance
As the holiday shopping frenzy kicks off with Black Friday and Cyber Monday, remember that consumers aren’t the only ones hunting for opportunities. This is the prime hunting season for cybercriminals to conduct scams, fraud, impersonation, and theft at massive scale.
- 1 in 3 U.S. adults report experiencing an online shopping scam ( Pew research )
- 300 million users are being targeted by cybercriminals for their sensitive and financial information ( Amazon )
- 250% increase in fake shopping websites ahead of Black Friday and 232% jump in impersonation sites of Amazon ( NordVPN )
- 45% surge in luxury brand counterfeit storefronts, such as Coach, Dior, Ralph Lauren, Rolex, and Gucci. ( McAfee ).
- McAfee also reports email scams are exploding, up ~50% in retail and ~85% in tech with trusted tech brands being impersonated, with Apple, Nintendo, Samsung, Disney, and Stream listed at the top 5.
AI is providing a massive advantage to attackers by automating the creation of realistic fake e-commerce sites and phishing email campaigns for the singular purpose of obtaining your sensitive data and assets. They may target your financial accounts to siphon money, credit card information to sell or make fraudulent purchases, and even access to home and work systems as part of extortion schemes.
Be wary. This season, the cybercriminals have an advantage and they will use it for their benefit and your detriment! They are faster, highly automated, and more deceptive than ever.
Trust nothing (email messages, links, etc.) and follow good cybersecurity practices.
Here are some tips:
1. Never click a link in an email or message. Always navigate to the site yourself.
2. Never enter in your login credentials unless you are absolutely sure the site is trustworthy.
3. Pay attention to the sender of messages to validate a legitimate domain.
4. Use 2-factor or Multi-Factor Authentication when possible.
5. Don’t store your credit card details on new e-commerce sites.
6. Purchase items with a credit card instead of a debt card, as you are likely to have fraudulent credit card purchases reimbursed.
7. Set alerts for charges on your cards, so you know when charges have occurred.
8. Be very wary of new or unfamiliar online retailers.
9. Don’t be pressured with countdown timers, limited time sales, or urgency tactics that exploit cognitive vulnerabilities to drive poor decisions.
10. Don’t share your personal information when it is not obviously needed for the transaction. Nobody should be asking your date-of-birth, employer’s name, family member contact information, or account balances.
11. Use security tools to verify sites, trust levels, and conduct secure e-commerce
12. Don’t install any merchant or helper apps, as they may be malicious or trojanized. Same goes for tech support calls asking you to download software, sign-in, or provide permissions to your device.
13. If ever in doubt, ask a security professional.
Cybercriminals will be out in force, preying on distracted consumers. Stay sharp, protect what is important to you, and share these tips with friends and family. A little awareness goes a long way in protecting your valuables and not being easy prey.
#cybersecurity #cybercrime #fraud #finance
1
2 reactions
I am excited to be speaking at the International Conference on Cyberlaw, Cybercrime & Cybersecurity (ICCC 2025) on November 19th at 8pm Pacific (9:30am IST – Mumbai India time).
The conference strives to examine and analyze the emerging Cyberlaw, Cybercrime and Cybersecurity trends of today’s times. It is an authoritative global event exclusively dedicated to cyberlaw, cybercrime , and cybersecurity which brings together an extraordinary assembly of jurists, senior judges, legislators, policymakers, law enforcement leaders, cybersecurity practitioners, corporate counsel, technology developers, digital-rights advocates, and academics representing more than 100 countries.
The panel: Digital Identity, Personal Privacy, Data Sovereignty & Protection Strategies will include Vinit Goenka, Atmaram Shelke, Devesh Vats, Raghav Tripathi, Mohd Ujaley, and myself!
I look forward to a great discussion.
Conference site: https://cyberlawcybercrime.com/iccc-2025/
#cybersecurity #cybercrime
The conference strives to examine and analyze the emerging Cyberlaw, Cybercrime and Cybersecurity trends of today’s times. It is an authoritative global event exclusively dedicated to cyberlaw, cybercrime , and cybersecurity which brings together an extraordinary assembly of jurists, senior judges, legislators, policymakers, law enforcement leaders, cybersecurity practitioners, corporate counsel, technology developers, digital-rights advocates, and academics representing more than 100 countries.
The panel: Digital Identity, Personal Privacy, Data Sovereignty & Protection Strategies will include Vinit Goenka, Atmaram Shelke, Devesh Vats, Raghav Tripathi, Mohd Ujaley, and myself!
I look forward to a great discussion.
Conference site: https://cyberlawcybercrime.com/iccc-2025/
#cybersecurity #cybercrime
2
5 reactions
AI Slop will fuel the next wave of social engineering cybercrime attacks.
Simple Math: Rise of AI Slop (rapid ability to generate believable content) x Cybercriminals seeking to commit fraud = Enormous Rise in Social Engineering Victimization
The ease, speed, and affordability of creating hyper-realistic media which can be used to compel vast numbers of people to click malicious links, install dangerous software, provide sensitive data/credentials, or send money to fraudulent campaigns, will skyrocket because people lack the cognitive tools to detect and resist such entertaining and compelling engagements.
This rising problem will require a combination of better tools to filter, processes to vet, and human mental capabilities to avoid. Unfortunately, those controls move far slower than the innovation and motivation of malicious entities behind the next generation of powerful media-enriched social engineering tactics.
John Oliver’s Last Week Tonight’s episode on AI Slop, provides an entertaining backdrop to what I fear will be foundational to another epic rise in cyber social engineering victimization.
#cybercrime #socialengineering #cognitivesecurity #AIslop #GenAI
Simple Math: Rise of AI Slop (rapid ability to generate believable content) x Cybercriminals seeking to commit fraud = Enormous Rise in Social Engineering Victimization
The ease, speed, and affordability of creating hyper-realistic media which can be used to compel vast numbers of people to click malicious links, install dangerous software, provide sensitive data/credentials, or send money to fraudulent campaigns, will skyrocket because people lack the cognitive tools to detect and resist such entertaining and compelling engagements.
This rising problem will require a combination of better tools to filter, processes to vet, and human mental capabilities to avoid. Unfortunately, those controls move far slower than the innovation and motivation of malicious entities behind the next generation of powerful media-enriched social engineering tactics.
John Oliver’s Last Week Tonight’s episode on AI Slop, provides an entertaining backdrop to what I fear will be foundational to another epic rise in cyber social engineering victimization.
#cybercrime #socialengineering #cognitivesecurity #AIslop #GenAI
4
1