Proofpoint alerts to the five most common online Christmas scams

Proofpoint has compiled the most common threats consumers will face this Christmas marked by a large increase in online commerce from previous years due to the pandemic. Many consumers will centralize their gift purchases and deliveries to loved ones online, and cyber criminals will not be far behind. According to data from Salesforce, 30% of all Christmas purchases will be made through digital channels, compared to 23% registered during the same period of the previous year.

Since cybercriminals are always on the trail of money, the cybersecurity company Proofpoint, has drawn up a list of the five most common scams that users can find in the coming weeks.

With the increase in online purchases, it is vital to protect the data of the credit card so that they are not compromised.

• Avoid storing the data payment when you buy items online. While it may reduce the convenience of shopping, it also reduces the chances that a threat actor could steal your data if the site is compromised. 
• Activate the mobile alerts service in real time to receive a text message every time you use your credit card. These alerts will reduce the time that passes between the theft of credit card information and its fraudulent use.
• Finally, watch out for phishing emails and incoming calls related to your credit card transactions. Never contact your financial institution by email. Instead, call your bank or credit card company directly. 

It’s important to be careful with email and text delivery notifications. Threat authors use shipping lures year-round to try and steal user credentials. But at this time of year consumers are at even greater risk from the increased number of packages they receive.

If something seems too good to be true, it probably is. And the same goes for the great deals during these weeks. Be on the lookout for “phishing” emails that promise big discounts and ask you to act urgently. 

Cybercriminals have actively taken advantage of the new digital reality with a barrage of SMS phishing attacks (‘smishing») Which, supposedly, come from companies known to the user. In fact, according to reports available to Proofpoint, SMS phishing messages increased 328% in Q3 2020 compared to Q2 2020. Overall, the top brands impersonated in Q3 2020 included large financial institutions, technology companies, and major e-commerce brands.

The fourth quarter of 2020 is also seeing a significant increase in false messages related to microloans and consumer finance, as well as the Christmas campaign, as seen in the following examples. It is crucial to be very careful with links included in text messages that you do not expect.

As more and more users are likely to be staying home over the holidays, it is important to warn consumers to be on the lookout for “phishing” attempts related to content “streaming” services, including the use of fake login pages.

It is important never directly access the login page from any email communication. Instead, it is advisable to log in directly to the service provider’s site for any request for data updates or re-session via email.