The growth of phishing attacks mimicking e-payment pages was spotted in the run-up to the Black Friday period. The total number of financial phishing attacks disguised as e-payment systems more than doubled from September (627,560) to October 2021 (1,935,905), indicating a 208% increase.
This was disclosed by the latest findings from Kaspersky’s ‘Black Friday 2021: How to Have a Scam-Free Shopping Day’ report.
The sales season attracts the attention of shoppers and retailers; however, it is also a favorite of cybercriminals who do not hesitate to cash in on online shoppers by creating fake pages mimicking the biggest retail platforms and e-payment systems.
During the first ten months of 2021, Kaspersky products detected more than 40 million phishing attacks targeting e-commerce and e-shopping platforms, as well as banking institutions. While stores rebounded in 2021 after a difficult 18 months and shoppers returned to offline shopping, Kaspersky researchers didn’t observe the typical seasonal trends for phishing related to online shopping such as significant influx of phishing pages with too good to be true sale offers or growth of retail-related scam.
However, there is one notable exception. In 2021, the total number of financial phishing attempts targeting e-payment systems more than doubled from September (627,560) to October (1,935,905) — a 208% increase. Indeed, this year we have seen introduction of new payment systems in various countries due to their unmatched convenience. As consumer adoption has skyrocketed, fraudsters started to actively exploit such systems as a lure to spread malicious activity.
There also has been a rise in the number of spam letters detected by Kaspersky’s products. An active spread of spam emails with 221 745 emails containing the words ‘Black Friday’ was spotted during the month amid the sales season, from October 27 to November 19.
Kaspersky researchers have also analysed which popular platforms were used as bait to spread phishing pages. The results showed that Amazon was consistently the most popular lure used, when looking at the total number of phishing attempts using its name. For the majority of 2021, the second most popular was eBay, followed by Alibaba and Mercado Libre.