Black Friday cyber warning for 4,000 card-skimming victims

Graham Wynn, director of consumer, competition and regulatory affairs at the British Retail Consortium (BRC), added: “Skimming and other cyber security breaches are a threat to all retailers. The British Retail Consortium strongly urges all retailers to follow the NCSC’s advice and check their preparedness for any cyber issues that could arise during the busy end-of-year period.”

The full NCSC guidelines on safely running a small business online can be found here. It also offers advice for consumers to better protect themselves while shopping virtually.

The holiday spike in online fraud and digitally enabled crime against retailers and their customers – which kicks off this week in earnest ahead of the US Thanksgiving holiday on Thursday 25 November – has now become as time-honoured a tradition in the cyber security community as the holidays themselves.

Kaspersky, for instance, has already observed increases in phishing attempts against users of online payment services, as well as multiple spam email campaigns using the Black Friday sales as a lure.

Check Point data group manager Omer Dembinsky said his systems were currently seeing more than 5,000 new malicious websites being established every week, an increase of nearly 200% compared with the 2021 average.

“Hackers are doubling down on the strategy to lure consumers into fraud through ‘too good to be true’ offers, promising large discounts such as 80% or 85% off. Their strategy is to capitalise on a consumer’s excitement after showing an eye-popping discount. I strongly urge consumers to beware of these ‘too good to be true’ offers as they shop online,” said Dembinsky.

“You can protect yourself by being attentive to lookalike domains, shopping from reliable sources and spotting password reset and other account-related notifications that show excessive urgency. Do not click these links, and if needed, go directly to the website and change details from your account.”