Cyber Criminals Are Banking On Black Friday

With the Coronavirus pandemic keeping many people away from the high street, bargain-hunters will be relying even more on online shopping and with more businesses looking to move their business online during Black Friday and Christmas this year. In the absence of footfall in their shops, thousands of retailers will be working hard to take their offers online and give customers the opportunity to make their purchases digitally.

There will be a surge in online transactions over the next month and this will also mean a surge in attacks from hackers and other cyber criminals. 

With a total anticipated spend of around £6 billion, this sale period will be crucial for many retailers who have faced significant financial and logistical challenges throughout 2020 due to the Coronavirus pandemic. But it’s important for e-commerce businesses and consumers to be aware that they aren’t the only ones making preparations for a big November. 

Cyber criminals will also be aiming to profit from this period and looking to seize potentially lucrative opportunities at a time when they know that payment card data and personal details will be flowing through digital databases at a faster rate than ever.

In the US, Black Friday has become the biggest shopping day of the year, as the day after the Thanksgiving holiday retailers mark down their prices to kick-start the gift-buying season and get consumers spending. In the last decade, to boost online retail equally, Cyber Monday has been introduced the first Monday after Thanksgiving making US consumers go online for the best bargains.

In previous years, phishing attacks alone have seen an increase of 300% around Black Friday, putting consumers at greater risk of text, email and social media scams. Add malware, ransomware, viruses and distributed denial of service (DDoS) attacks into the mix and all of a sudden trading online can feel like a dangerous place to be.

Yet with the right preparation and attention to detail, you can have a profitable and productive Black Friday period.

What Can Be Done To Minimise The Risk Of A Cyber Attack?

If your business is trading online this November, it is important to take steps now, rather than simply ignoring the risk and hoping for the best. By putting the right measures in place, you can not only reduce the likelihood of a breach but also enhance your reputation and help customers to safeguard themselves. Communication is key and letting your customers know you are vigilant in cyber security will actually build customer confidence in the process. Alert them to your security and privacy procedures and tell them what you are doing to safeguard them. 

If you discover that scammers are using your brand to target customers, issue a prompt warning and urge them to check that any links used to your website are legitimate. If you find and isolate those scams before your customers do, then all the better. For that you will need professional help.

With time running short a good step to take is to scan your digital assets for vulnerabilities now and test your defences so you know where you need to improve. 

This is known in cyber security as Penetration Testing. Using real world experience of all types of attack, highly qualified professionals can put your website through its paces to ensure that it’s fit for purpose. By mimicking the type of attacks carried out by potential hackers, a penetration tester can explore and recommend necessary improvements before an attacker finds them.

There is no doubt that businesses around the globe will be more dependent on e-commerce than ever before this Black Friday. Given the events of the last few months we all hope that it’s a successful one for businesses that have struggled to trade through the uncertainty of 2020. 

BDaily:        Mirror:       Finance Digest:      Guardian:

If you have any concerns about the resilience of your online presence against the threat of a cyber attack, now would certainly be the time to consult an expert you can trust. Check out our free access Cyber Security Service Supplier Directory to find the right expertise in your location: 

Directory Listings: Pentesting & Security Assessments

You Might Also Read: 

Cybercrime In Britain Does Serious Harm:

 

 

« Trump Fires National Cyber Security Chief
CYRIN Cyber Alert - Test-Drive The CYRIN Cyber Range »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Akin Gump Strauss Hauer & Feld

Akin Gump Strauss Hauer & Feld

Akin is a leading global law firm providing innovative legal services and business solutions to individuals and institutions. Practice areas include Cybersecurity, Privacy and Data Protection.

Kount

Kount

Kount's “decision engine” platform is ideal for managing fraud in online/telephone channels that process payments and onboard new customers.

CloudMask

CloudMask

CloudMask patent technology provides Dynamic Data Masking (DDM) that masks sensitive data, structured or non-structured, in real-time.

Micro Strategies Inc.

Micro Strategies Inc.

Micro Strategies provides IT solutions that help businesses tackle digital transformation in style.

European Healthcare Fraud & Corruption Network (EHFCN)

European Healthcare Fraud & Corruption Network (EHFCN)

EHFCN is the only organisation dedicated to combating fraud, corruption and waste in the healthcare sector across Europe.

The Cyber AB

The Cyber AB

The Cyber AB is the official accreditation body of the Cybersecurity Maturity Model Certification (CMMC) Ecosystem.

N8 Identity

N8 Identity

N8 Identity helps organizations realize the vision of Autonomous Identity Governance™ with AI-driven Identity solutions.

EVOKE

EVOKE

EVOKE is an award-winning Digital Transformation company that partners with its clients to build digital workplace solutions for organizational challenges.

apiiro

apiiro

apiiro invented the industry-first Code Risk Platform™ that uses developers and code behavior analysis to accelerate delivery and automatically remediate product risk.

Enso Security

Enso Security

Enso is the first Application Security Posture Management (ASPM) solution, helping security teams everywhere eliminate their AppSec chaos with application discovery, classification and management.

Arcturus Security

Arcturus Security

Arcturus is a CREST-approved cyber security consultancy created by experts in the field.

International College For Security Studies (ICSS)

International College For Security Studies (ICSS)

ICSS India offers technical education to students, clients and partners in IT Industry by our well qualified, certified and experienced trainers.

Larsen & Toubro Infotech (LTI)

Larsen & Toubro Infotech (LTI)

LTI is a global technology consulting and digital solutions company with operations in 33 countries.

Maxxsure

Maxxsure

Maxxsure provides a platform for executive management, leveraging proprietary technology that identifies, measures, and scores a company’s cyber risks.

InterSec Inc.

InterSec Inc.

InterSec Inc. is a cybersecurity company that offers a variety of services to small and medium-sized businesses including CMMC Compliance, Program Management, Governance, & Cybersecurity.

Datapac

Datapac

Datapac is one of Ireland’s largest and most successful ICT solutions and services providers. We have been at the forefront of technology innovation in Ireland for the past three decades.