Executive Guardian

Your organization’s leadership is 12 times more likely to be the target of a security incident and nine times more likely to be the target of a data breach than they were last year. Find out how they can be protected.

Gift Cardsharks: The Massive Threat Campaigns Circling Beneath the Surface

Learn about the attack group primarily targeting gift card retailers and the monetization techniques they use.

Get the Report

Threat Hunting Workshop Series

Join one of our security threat hunting workshops to get hands-on experience investigating and remediating threats.

Attend an Upcoming Workshop

RiskIQ’s 2019 Black Friday E-commerce Blacklist Report

Critical Threat and Consumer Intel for This Year’s Black Friday and Cyber Monday

Last year, consumers stuffed e-commerce cash registers with a record $6.2 billion in online sales over Thanksgiving weekend—a 23% percent increase over 2017. With that number expected to set another record this year, cyber threat actors are looking to impersonate the most trafficked e-commerce sites, taking advantage of unsafe online consumer habits to get their piece of the pie.

To analyze the methods these cybercriminals will employ this Black Friday and Cyber Monday, and where they’re targeting their malicious efforts, RiskIQ ran a keyword query of our Global Blacklist and mobile app database focusing on the ten most trafficked sites during Black Friday* and five of the leading e-tailers in the UK. We also conducted a survey of 1,000 consumers about their attitudes and habits regarding safe online shopping.

The results show that Black Friday can be a feast for cyber threat actors.

Report findings include:

Percent increase in total blacklisted apps observed by RiskIQ.
Total number of malicious apps that can be found by searching for terms related to Black Friday, Cyber Monday, Christmas, and Boxing Day.
Total number of malicious URLs related to Black Friday, Cyber Monday, Christmas, and Boxing Day.
Total number of blacklisted apps for the top-five ‘Elite’ Retailers in the UK.
Amount of incidents of domain infringement across the top-10 most trafficked sites on Black Friday weekend.

Consumer findings include:

Percentage of consumers that have downloaded an app outside of the Google Play and Apple App stores.
Percentage of consumers that read the permissions and the developer before downloading an app.
Percentage of consumers that would download a shopping-related app, even if it was potentially unsafe.
Percentage of consumers that would purchase with a retailer they’ve never shopped with before if they offered a steep discount.

*based on 2017 site traffic over Thanksgiving Weekend