Cybercriminals Target Online Shoppers During Holiday Season
By Anna Johnson on November 29th, 2009Internet security firm, Webroot, is calling on online shoppers to be vigilant as cybercriminals target them during the holiday shopping period.
Already, the company has noticed a spike in the spread of malicious software designed to steal people’s personal and financial information.
Specifically, Webroot has noticed a recent increase in the incidence of certain phishing Trojans, including one called ‘ Trojan-Backdoor-Stinkbreath’ that has risen 73 percent since August. This particular Trojan spreads via bogus emails bearing the names of shipping companies including FedEx, DHL, UPS and USPS.
Webroot has also noticed more attacks on social networks. For example, infections of the Koobface worm, which targets users of Facebook, Twitter and other networks, have jumped 15 percent since summer. Koobface distributes fake security alerts and rogue anti-virus products in order trick people into sharing their information.
Another insidious tactic used by cybercriminals is to plant malicious links near the top of search engine results in order to bait shoppers seeking hot deals on popular items. Such malicious links can also lead to fake alerts and rogue products, as well as other malicious payloads.
Webroot also notes the risks of people using public wireless networks, where thieves can modify their own laptops to mimic wireless access points in places such as airports or cafes, and capture passwords and other information as victims unwittingly connect to their fraudulent networks.
To combat the threat of online fraud, Webroot provides the following tips for safe online shopping:
- Search and click wisely – never click links to unfamiliar websites. If you use a search engine to find gifts, treat every result with caution, especially those promising a link to an unbelievable deal.
- Install and activate anti-virus and antispyware protection on your computer – implement an Internet security suite that includes anti-virus, antispyware, and firewall technologies.
- Always install updates – any anti-malware software is only so good as the latest malware it can detect and combat so be sure to install updates which include the latest malware definitions; do the same with updates to your operating system.
- Be extra careful when using public wireless networks – in particular think twice before using free networks in airports, coffee shops and other locations where your Internet session could be hijacked.
- Use a credit card, not a debit card, online and monitor your credit card activity – if you are a victim of fraud or cybercrime, most credit card agreements limit your liability for the charges. Also, keep abreast of your credit report and/or credit status on a regular basis to quickly spot anything unusual.
Webroot also offers a free scanning tool that enables people to search their computers for dormant security threats. For more information visit Webroot.

