Deloitte expects holiday e-commerce sales to amount to $182 billion to $196 billion this year, increasing by 25% to 35%, compared with year-over-year growth online of 14.7% in 2019. With this surge in online holiday shopping due to COVID-19, malicious actors will be looking to capitalize.
RiskIQ now detects one phishing domain and at least five domain infringement events every minute, with those numbers expected to increase for e-commerce brands as the holiday shopping season continues to ramp up. In response, RiskIQ announced its new Holiday Shopping Microsite, a free, one-stop cybersecurity resource center that tracks and reports new web hosts and domains that leverage holiday shopping events, including Black Friday, Cyber Monday, and Cyber Week.
The site will serve as an authoritative source of intelligence that security practitioners can use to block and investigate holiday shopping scams as they increase on an unprecedented scale. Already, RiskIQ’s systems have observed 10,727 instances of new holiday shopping infrastructure stood up in advance of Black Friday and Cyber Week since November 1.
Attack surface defenders can track and investigate new domains related to holiday shopping events as they are stood up
Our goal is to help the security community work together to respond to the influx of criminal activity and serve as a powerful resource for keeping organizations safe during the holiday season. The Microsite will help empower the cybersecurity community to continue to battle a massive spike in cyber threats related to COVID-19 compounded with the holiday season.
Visit the RiskIQ Holiday Shopping Internet Intelligence Microsite here. If you'd like to investigate the infrastructure mentioned within this website, sign-up for a free RiskIQ Community account. Go direct to candidate infrastructure by searching for "holiday shopping," "black friday," "cyber monday," or "shopping2020" directly from the home page.
Also, be sure to download the RiskIQ Chrome Extension, allowing users to submit suspect URLs, hostnames, or domains to RiskIQ to be crawled by our global systems.
