Welcome to the First Column IT Tech Blog

HomeBlog
Black Friday and Cyber Monday Are Treasure Troves for Hackers

Black Friday and Cyber Monday Are Treasure Troves for Hackers

December 27, 2023

It should come as no surprise that one of the biggest online retail days of the year also incites a lot of scams and threats targeting not just consumers, but online businesses as well. Let’s go over some of the major statistics surrounding online retail scams and what you should know as you navigate the post-holiday chaos.

Black Friday is Not the Only Shopping Holiday

Historically, Black Friday—the Friday after Thanksgiving—has been the best day to get some great deals and to get a head start on your holiday shopping. As the years have gone by, though, this is less and less the case. This year, Cyber Monday’s traffic levels exceeded Black Friday’s sales by 42%, which is no small feat.

Retailers have tried to extend the shopping season, which is good news for attackers and online threats. The more sales, the more opportunities for people to spend their money online, and the more chances a hacker has to steal financial data.

Cyber Monday: 11 Days of Discounts

COVID-19 has led to many online retailers starting their sales the weekend just before Thanksgiving, thus providing shoppers with more chances to leverage discounts to their advantage. Hackers can take advantage of this extended time to scam people out of their hard-earned money. Cyber Monday is the culmination of these “Black Friday” sales, and it is the single most profitable day for online shopping, resulting in tens of billions of dollars across more than a billion transactions.

Phishing statistics related to Black Friday Week are nothing to scoff at. Multiple sources indicate that in the days leading up to November’s sales, phishing attacks skyrocketed to 300 percent of their normal levels. Combine this with the fact that security is a challenge for many people—especially those who are not technology-savvy—and you have a recipe for disaster.

Let’s go over some notable strategies to identify and prevent potential phishing attacks.

Be Careful of Emails and Messages

First, you’ll want to take the stance that any email that seems even remotely suspicious is a scammer. Make sure the email address is legitimate, and especially be wary if it looks like the message has been altered. Phishing emails tend to originate outside of the United States, so messages generally won’t have picture-perfect grammar and syntax.

Implement Multi-Factor Authentication

Another way to stay safe is to utilize multi-factor authentication, or MFA. It creates an additional layer of security for your accounts that can keep hackers from slipping in with a stolen password and username.

Don’t Let Your Guard Down

If you don’t want to suffer from a phishing attack, you’ll have to know what to do and what to avoid. Phishing attacks are known for evolving in various different ways, and you’ll have to be on the lookout for potential new methods and trends. Take the time to educate yourself and your team so that they know what to do about potential hacking attacks.

Verify the Sender

Communication can be a major reason for a successful phishing attack. Most phishing attacks will try to urge you into immediate action, so if you have reason to believe that any message you have is a bit too urgent or suspicious, think twice before doing what the email suggests. You can always contact the individual through alternative methods, especially if the email appears to be from someone in your office or a client/vendor.

We hope these tips help you remain vigilant against the threats posed by phishing and online shopping scams. To learn more, be sure to call First Column IT at (571) 470-5594.

Previous Post
May 2, 2025
Dark Web Monitoring Shouldn’t Be an Afterthought
There are a lot of sketchy parts of the Internet, but the sketchiest of all might be the Dark Web. Located on a part of the Internet that search engines don’t index and inaccessible to most web browsers, the Dark Web is a place where cybercriminals thrive. It’s a place where stolen data is put up for sale, and if you’re not careful, your business could be next.
April 30, 2025
How to Break the “Who Cares” Mindset
More often than not, you have an employee on staff who rolls their eyes whenever you have to send out another cybersecurity email or reminder. This “who cares” mindset is dangerous and can infect your business in a profoundly disturbing way. Today, we want to get into why this “who cares” mindset is so dangerous and what’s really at stake when you have an employee who can’t get on board with your security policies.
April 28, 2025
Learn How Resilience is Reshaping the Cybersecurity Landscape
While the goal of cybersecurity is always to prevent threats from taking advantage of your infrastructure, this is becoming more and more challenging as time wears on and threats evolve to changes in cybersecurity discourse. A recent podcast episode from Illumio, “Trust & Resilience: The New Frontlines of Cybersecurity,” explores how trust has become a vulnerability that attackers exploit in new and creative ways. How can cybersecurity as an industry pivot in response to this trend?

Have a project in mind?

Start with our free consultation. We will provide a detailed proposal and firm quote based on your specific IT support needs. All at a predictable monthly cost per seat.
Free Consultation - Sign Up Here