Cybercriminals are intensifying their malicious activities in anticipation of the holiday season and increased online shopping, and are turning to the darknet to find services and tools that allow exploitation of e-commerce platforms and consumers.
A report by FortiGuard Labs (Understanding Threat Actor Readiness for the Comcoming Holiday Season) revealed how these underground networks are equipping cybercriminals with increasingly sophisticated means to launch attacks and scams during the Christmas season.
See also: Black Friday 2024: 77% of spam emails are scams
The Role of Darknet Marketplaces
Darknet platforms allow even attackers with little knowledge and skills to access powerful resources at affordable prices. According to the report, phishing kits, which mimic legitimate websites or emails, sell for between $100 and $1,000, depending on customization. These kits often include templates that mimic major retailers like Amazon, Walmart, and other reputable companies.
Also, in darknet markets, cybercriminals can find sniffers to intercept sensitive payment dataduring transactions, and brute-forcing utilities that help attackers compromise accounts.
Of course, there are also buying and selling of stolen personal and banking data, which can be used to steal money and conduct targeted phishing attacks.
See also: Microsoft 365 Admin Portal Abused for Sextortion Scams
Targeting e-commerce platforms
According to FortiGuard Labs, cybercriminals are also exploiting vulnerabilities in popular platforms like Adobe Commerce, Shopify, and WooCommerce to compromise e-commerce sites.
Once compromised, these platforms can serve as gateways for further fraud or data theft.
FortiGuard has confirmed that thousands of new holiday-themed domain registrations, aiming to lure users into fake offers, often using AI technology.
“powered phishing AI- uses machine learning to create highly personalized baits that appear legitimate,” explained Stephen Kowski, Field CTO at SlashNext.
Impact on businesses and buyers
As cybercriminals increasingly turn to the darknet for tools to aid their attacks, both consumers and businesses are at increased risk. Compromised websites can lead to data breaches and damage to companies’ reputations, while unsuspecting shoppers can fall victim to information or money theft.
See also: UK – online shopping: Last Christmas £11.5 million was lost to fraud
"Seasonal scams continue to exist because they are successful for hackers. Cybersecurity leaders should take steps to increase defenses during the holidays, when there is increased email activity," said Hoxhunt CEO Mika Aalto.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
«Many employees use the same devices for work and personal use, so opening a malicious link in a seemingly personal message could have devastating consequences for the organization».
FortiGuard Labs stressed the need for vigilance, especially during this period. Businesses are advised to secure admin panels, update plugins and monitor for fraudulent domain registrations. Consumers, meanwhile, should closely check website URLs, avoid public Wi-Fi for shopping and enable multi-factor authentication (MFA). They should also be cautious when clicking on links or attachments in emails from unknown senders. They should watch out for suspicious signs such as spelling mistakes, unusual payment methods or limited contact details on websites and use safe and reliable payment methods when making online purchases. Finally, it is essential to avoid providing personal and banking details and monitor their accounts regularly .
Source: www.infosecurity-magazine.com
