RiskIQ Releases 2020 Holiday Shopping E-commerce Blacklist Threat Report
RiskIQ, the global leader in attack surface intelligence, released its annual Holiday Shopping E-commerce Blacklist threat report. The report unveils how cyber attackers are leveraging popular brands, weaknesses of the global pandemic, and unsafe consumer shopping habits to victimize consumers.
Recommended AI News: Geoverse Launches Network as a Service to Power Private Cellular Networks Via CBRS
This year’s report dives into RiskIQ’s Internet Intelligence Graph, repositories of correlated threat data compiled over ten years of crawling the web, to expose the e-commerce threat landscape during the busiest shopping period of the year and how threat actors target top-ten most trafficked e-commerce sites in the U.S. and U.K.
This year’s critical data includes:
- Of all apps that can be found by searching “Black Friday,” “Cyber Monday,” “Boxing Day,” or “Christmas,” 466 are blacklisted (unsafe to use) as malicious
- The top-10 most trafficked sites on Thanksgiving weekend have a combined total of 1,654 blacklisted apps that contain their branded terms in the title or description, totaling 82.7 per brand
- 7 domain infringement events across the top-10 most trafficked sites
- The average length of a Magecart breach is 22 Days
- RiskIQ detects a Magecart attack every 16 minutes
- Looking at five of the top-10 most trafficked sites in the U.S and U.K, we found 18,891 blacklisted URLs containing their branded terms or 945 per brand
“This year’s bad holiday actors will capitalize by using the brand names of leading e-tailers, as well as the poor security habits of consumers,” said RiskIQ CEO Lou Manousos. “They’ll fool shoppers looking for shopping deals, sales, and coupons by creating fake mobile apps and landing pages.”