Boulder, Colo., November 18, 2009
From phony emails to Facebook phishers, cybercriminals are casting a wide net to lure online shoppers this season. According to new research from Webroot, a leading provider of Internet security for consumers and businesses, certain infections designed to steal personal information rose in the months leading up to the shopping season. Simultaneously, in a survey of consumers, Webroot found the majority (68 percent) plan to buy at least half of their gifts online this year, presenting cybercriminals with a larger target on Cyber Monday and throughout the holidays.
Surveying over 1,600 individuals, Webroot found the number of consumers planning to buy gifts online this season increased 46 percent from two years ago. The survey also revealed a number of behaviors that may put shoppers’ personal and financial information at risk. Among the key findings:
"Cybercriminals appear to be gearing up for a lucrative holiday season,” said Mike Kronenberg, chief technology officer of Webroot’s Consumer business. “A particularly concerning trend is an increase in phishing Trojans – which can steal credit card numbers, passwords and other information -- in the months leading up to November, just as people begin thinking about buying gifts. Remember that hackers don’t take a holiday; be aware of how they operate and protect yourself."
Primary Methods for Stealing Information
The Webroot® Threat Research team has recorded a recent spike in certain phishing Trojans, including one which rose 73 percent since August. Called Trojan-Backdoor-Stinkbreath, it spreads via bogus emails bearing the names of shipping companies including FedEx, DHL, UPS and USPS – brands many shoppers expect to see this time of year.
Webroot has also detected a rise in attacks on social networks, which may pose a risk to consumers planning to use social media for researching gifts. Infections of the Koobface worm, which targets users of Facebook, Twitter and other networks, have jumped 15 percent since summer. Koobface is known to distribute fake security alerts and rogue antivirus products -- bogus malware infection warnings and malicious programs masquerading as legitimate security products – which trick victims into sharing information.
Webroot researchers also expect to see cybercriminals employ one of their most effective tactics – planting malicious links near the top of search engine results – to bait shoppers seeking hot deals on popular items. These malicious links also lead to fake alerts and rogue products, as well as other malicious payloads.
Finally, public wireless networks pose a risk to the 12 percent of survey respondents who plan to use them while shopping online for gifts. Data thieves can modify their own laptops to mimic wireless access points in places such as airports or cafes, and capture passwords and other information as victims unwittingly connect to their fraudulent networks.
Survey Finding: Convenience Outweighs Concerns
Results of the Webroot survey indicate online shoppers are willing to risk the consequences of the threat landscape for the convenience of buying gifts online:
Tips for Safe Online Shopping:
Webroot recommends individuals take the following actions before buying gifts online this season:
Webroot encourages online shoppers to use its free scan to search their computers for dormant security threats before shopping online this season.
For more information about Webroot’s award-winning antimalware protection for consumers, please visit http://www.webroot.com/En_US/consumer.html.
Copyright 2004 - 2013 Webroot Inc.