Watch out for these devious scams on Amazon Prime Day 2022
Keep your guard up while you’re hunting for the best deals on Amazon Prime Day.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Security researchers have warned of a sharp rise in fraud andidentity theftcampaigns targeting shoppers ahead ofAmazon Prime Day 2022, which kicks off on July 12.
The latest data from security firm Check Point shows the volume ofAmazon-related phishing emails has spiked by 37% month-on-month, with further increases likely as the event draws near.
The company’s threat intelligence team has also identified 1,900 newdomainslinked in some regard to theecommercegiant, at least 9.5% of which have been deemed “risky”.
Amazon Prime Day scams
Amazon Prime Day is among the biggest events of the year for online shoppers, perhaps second only to the Black Friday and Cyber Monday weekend.
Inevitably, an event of this scale attracts the attention of all manner of cybercriminals, who look to capitalize on the hunt for deals to lure victims into exposing theirpasswords, personal data and credit card details.
In one example provided by Check Point researchers, scammers masqueraded as a member of the Amazon Customer Support Team, supposedly getting in touch to inform the victim of a canceled order.
The message invited the individual to open an email attachment, which was dressed up as an invoice, but in fact contained droppermalwarecapable of setting the stage for a number of secondary attacks.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Dangerous new malware dances past 50 antivirus services>Set strong credentials with the best password generators out there>Simple supply chain attack compromises hundreds of websites
In another email campaign, recipients were prompted to update their Amazon payment information. The link provided led to a page that closely resembles the legitimate Amazon website, but is built to harvest any information entered by the victim.
The advice for shoppers hoping to avoid these kinds of scams over Amazon Prime Day is to protect their devices with leadingantivirussoftware and to pay close attention to oddities in the emails they receive (e.g. spelling and grammar mistakes, abnormal sender address etc.) that might betray a scam.
Another sensible precaution would be to navigate directly to known Amazon domains when making purchases, account changes and the like, even if an email message looks entirely legitimate.
Joel Khalili is the News and Features Editor at TechRadar Pro, covering cybersecurity, data privacy, cloud, AI, blockchain, internet infrastructure, 5G, data storage and computing. He’s responsible for curating our news content, as well as commissioning and producing features on the technologies that are transforming the way the world does business.
A new form of macOS malware is being used by devious North Korean hackers
Scammers are using fake copyright infringement claims to hack businesses
Philips Hue vs Govee: choose the right smart lights for you