Welcome to the First Column IT Tech Blog

HomeBlog
Black Friday and Cyber Monday Are Treasure Troves for Hackers

Black Friday and Cyber Monday Are Treasure Troves for Hackers

December 27, 2023

It should come as no surprise that one of the biggest online retail days of the year also incites a lot of scams and threats targeting not just consumers, but online businesses as well. Let’s go over some of the major statistics surrounding online retail scams and what you should know as you navigate the post-holiday chaos.

Black Friday is Not the Only Shopping Holiday

Historically, Black Friday—the Friday after Thanksgiving—has been the best day to get some great deals and to get a head start on your holiday shopping. As the years have gone by, though, this is less and less the case. This year, Cyber Monday’s traffic levels exceeded Black Friday’s sales by 42%, which is no small feat.

Retailers have tried to extend the shopping season, which is good news for attackers and online threats. The more sales, the more opportunities for people to spend their money online, and the more chances a hacker has to steal financial data.

Cyber Monday: 11 Days of Discounts

COVID-19 has led to many online retailers starting their sales the weekend just before Thanksgiving, thus providing shoppers with more chances to leverage discounts to their advantage. Hackers can take advantage of this extended time to scam people out of their hard-earned money. Cyber Monday is the culmination of these “Black Friday” sales, and it is the single most profitable day for online shopping, resulting in tens of billions of dollars across more than a billion transactions.

Phishing statistics related to Black Friday Week are nothing to scoff at. Multiple sources indicate that in the days leading up to November’s sales, phishing attacks skyrocketed to 300 percent of their normal levels. Combine this with the fact that security is a challenge for many people—especially those who are not technology-savvy—and you have a recipe for disaster.

Let’s go over some notable strategies to identify and prevent potential phishing attacks.

Be Careful of Emails and Messages

First, you’ll want to take the stance that any email that seems even remotely suspicious is a scammer. Make sure the email address is legitimate, and especially be wary if it looks like the message has been altered. Phishing emails tend to originate outside of the United States, so messages generally won’t have picture-perfect grammar and syntax.

Implement Multi-Factor Authentication

Another way to stay safe is to utilize multi-factor authentication, or MFA. It creates an additional layer of security for your accounts that can keep hackers from slipping in with a stolen password and username.

Don’t Let Your Guard Down

If you don’t want to suffer from a phishing attack, you’ll have to know what to do and what to avoid. Phishing attacks are known for evolving in various different ways, and you’ll have to be on the lookout for potential new methods and trends. Take the time to educate yourself and your team so that they know what to do about potential hacking attacks.

Verify the Sender

Communication can be a major reason for a successful phishing attack. Most phishing attacks will try to urge you into immediate action, so if you have reason to believe that any message you have is a bit too urgent or suspicious, think twice before doing what the email suggests. You can always contact the individual through alternative methods, especially if the email appears to be from someone in your office or a client/vendor.

We hope these tips help you remain vigilant against the threats posed by phishing and online shopping scams. To learn more, be sure to call First Column IT at (571) 470-5594.

Previous Post
February 25, 2026
3 Simple Cybersecurity Lessons for the Modern Business Environment
Sometimes the toughest lessons that hurt the most are the ones we need the most, as is the case with anything cybersecurity related. You don’t want to experience a data breach, regardless of how it’s caused, but preventing them is a bit more challenging than you might at first expect. If you want to avoid losing time, money, and reputation needlessly, then take these three cybersecurity lessons into consideration today.
February 23, 2026
What to Do Before (And After) a Data Breach
One of the biggest myths out there related to cybersecurity is that criminals only go after the big enterprises. Why should they care about your small operation, anyway? In reality, cybercriminals love to attack small businesses to take advantage of their weaker security infrastructures. If you’re not careful, this could lead to serious losses for your business stemming from a loss of trust, legal fees, and operational downtime.
February 20, 2026
You Need to Temperature-Proof Your Business, Starting with Its Infrastructure
The climate is a weird, weird thing… and when you introduce it to your critical business tech, things only get weirder. Extreme temperatures are harmful to technology at whichever end of the spectrum you’re talking about, hot or cold.

Have a project in mind?

Start with our free consultation. We will provide a detailed proposal and firm quote based on your specific IT support needs. All at a predictable monthly cost per seat.
Free Consultation - Sign Up Here