November is usually the beginning of the Christmas rush. It can feel like the holiday seasons are no longer separate but run from Halloween right through Thanksgiving to Christmas. Maybe that's why we all feel rushed.
But don't let that rush get you into trouble. This is also the prime phishing season for cyber criminals. They know you are stressed and hurried and want you to let your guard down so they can squeeze a quick buck out of you.
Look for those attacks that play on your emotions:
- Fear - if you don't act, something bad will happen to you.
- Urgency - you must do something right away or face negative consequences.
- Authority - the supposed sender has the power to do that bad thing to you.
But also look for other tactics:
- Vagueness - the attacker gives you just enough information to entice you into clicking something.
- Confusion - the attacker plays on your confusion from the rush or larger number of purchases.
You may see these emotional states brought together in:
- Fake shipping failed delivery notices
- Fake storefronts for retailers that don't exist
- Too good to be true offers
- Fake notices from your bank or credit card
- Fake invitations to parties or events
They'll also play to our charitable side. Beware of unsolicited requests for donations. We tend to be a very caring and giving culture and cyber criminals will play that to the very end. Don't let your generosity go to the wrong recipient.
And finally in our work lives, watch out for those enticiing emails touting bonuses, or new policies, or holiday party RSVPs. These may come via trusted sources such as DocuSign or SharePoint links, but verify before you open anything.
References:
https://www.securitymagazine.com/articles/101228-phishing-attacks-rose-by-more-than-600-in-the-buildup-to-black-friday
https://www.techradar.com/vpn/vpn-privacy-security/fake-tiktok-shops-now-fuel-one-in-five-phishing-blocks-and-black-friday-could-make-it-worse
https://www.techrepublic.com/article/news-fbi-holiday-scams-multichannel-warning
