{"id":44146,"date":"2021-11-26T13:29:00","date_gmt":"2021-11-26T13:29:00","guid":{"rendered":"http:\/\/f5405dd1-fac7-43a8-b2c3-7f8a36984af0"},"modified":"2021-11-26T13:29:00","modified_gmt":"2021-11-26T13:29:00","slug":"how-to-identify-and-avoid-security-threats-while-shopping-online","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/how-to-identify-and-avoid-security-threats-while-shopping-online\/","title":{"rendered":"How to identify (and avoid) security threats while shopping online"},"content":{"rendered":"
<\/div>\n

Although you want to grab the best deals this holiday weekend<\/a>, remember that this is the perfect time for scammers to take advantage of you online. <\/p>\n

Phishing emails — claiming to be from a store, bank, credit card company, etc. — will entice you to click links that go to copies of legitimate websites. From there, they will try to extract your passwords or credit card information. <\/p>\n

As your inbox fills up with Black Friday and Cyber Monday deals, remember that not all is as it seems. Lamar Bailey, director of security research and development at Tripwire<\/a>, warns, “Not all of the emails will be legit, as attackers will take valid emails and change the links to point you to malicious sites that may look like the real things.”<\/p>\n

Sam Curry, Chief Security Officer at Cybereason<\/a>, advises that people with balances on multiple credit cards might “receive an email pretending to be from the credit card company saying their account is overdue and is subject to being shut down unless they make a minimum monthly payment. The unsuspecting consumer gives away their credit card information and other personable identifiable information.”<\/p>\n

Javvad Malik, security advocate at AlienVault (now AT&T Cybersecurity)<\/a>, confirms this, advising you to “regularly monitor your credit, debit, and ATM card activity for fraudulent transactions and immediately report anything suspicious.”<\/p>\n

Phishing scams are also rife this weekend. Curry warns against opening “any attachments or [clicking] on links appearing to be from trusted vendors” and advises going to the trusted website from your web browser instead. He also notes that ransomware attacks, which allow hackers to make money from you if ransomware hits your computer, are prevalent during the holiday season. <\/p>\n

In short, do not click on links from unsolicited emails warns Paul Bischoff, privacy advocate at Comparitech<\/a>. He insists that you should always check that you have a “valid HTTPS before entering any information into a website.”<\/p>\n

<\/section>\n

Other scams occur when you buy something and the item does not arrive. Bischoff notes that the scammer will claim “there is some problem with Amazon or Ebay’s payment system.”<\/p>\n

“They will try to contact you and extract payment through some other means,” says Bischoff. “Don’t interact with merchants outside of the marketplace’s official channels.” Also make sure you do not fall victim to porch pirates like a third of Americans do<\/a>.<\/p>\n

If you are keen to shop online, make sure that your experience does not come at the cost of your security warns Todd Peterson, IAM specialist at One Identity<\/a>. He explains, “Having non-essential websites store [your] passwords or credit card details or using the same password across all online stores is ill-advised.”<\/p>\n

One particular industry to cautiously shop from? Gaming. Beware of fake game codes or large discount from game companies says Jack Baylor, Security Threat Researcher at Cylance<\/a>. <\/p>\n

“People often put up fake game codes claiming large discounts compared to buying directly from the game manufacturer or the likes of reputable markets such as Steam, Microsoft Store (Xbox1), or PlayStation Store (PS4),” he says. “Often consumers are left out of pocket with nothing more than a nonsense string of letters and numbers to show for it.”<\/p>\n

How can you reduce security risks when you shop online?<\/strong><\/h3>\n