As the final crush is on for Christmas shopping, keep in mind that online retailers and financial sites are still the most popular targets for phishing, according to recent analysis by the Cyren security lab.
To learn which brands were the most frequently targeted by phishers, Cyren analysts extracted about a million URLs recently classified as phishing. There were very few surprises and the top 20 contained almost all the same brands as our previous report, in which we used data from Q1 of 2018. There was one very conspicuous change — IRS.gov does not feature, because clearly tax fraud is only a valid activity in Q1, tax season.
This selection of online brands by phishers provides a useful indicator of phishing motivation:
- Financial sites are clearly targets because stolen credentials provide criminals with direct access to money and/or bitcoins, in addition to login credentials that could be resold on the black market.
- Online services, such as Apple, Google, and Microsoft serve as an ‘Attack Platform’ for cybercriminals; stolen credentials from a list of Gmail or Apple subscribers can be resold or possibly used to hack other websites, since many people use the same credentials (user names & passwords) for login on multiple sites. Additionally, email or social media logins can be used to target contacts of the victim.
- Shopping or commerce websites, such as Amazon and Alibaba offer criminals both credential information and the possibility of online shopping sprees or financial data if the victim stores credit card or banking information with the online services.
Cyren can help you understand the size of your phishing problem. Click here to find out how.