Tech support scams becoming the top phishing threat to consumers
NortonLifeLock published a report detailing the top consumer cybersecurity insights and takeaways from July to September 2021. The latest findings show tech support scams, which often arrive as a pop-up alert convincingly disguised using the names and branding of major tech companies, have become the top phishing threat to consumers.
Tech support scams are expected to proliferate in the upcoming holiday season, as well as shopping and charity-related phishing attacks.
More than 12.3 million tech support URLs were blocked, which topped the list of phishing threats for 13 consecutive weeks between July and September. The effectiveness of this type of scam has escalated during the pandemic due to consumers’ increased reliance on their devices to manage hybrid work schedules and family activities.
“Tech support scams are effective because they prey on consumers’ fear, uncertainty and doubt to trick recipients into believing they face a dire cybersecurity threat,” says Darren Shou, head of technology, NortonLifeLock.
“Awareness is the best defense against these targeted attacks. Never call a number listed on a tech support pop-up, and instead reach out to the company directly through their official website to validate the situation and next steps.”
Virtual gaming goods have real value
Rare, in-game items are highly sought after and can be traded on real-world marketplaces. For example, a multiplayer online role-playing game touts a virtual blue “Party Hat,” which was most recently valued at approximately $6,700.
A new phishing campaign was caught specifically designed to obtain players’ login credentials and two-factor authentication information with the intent to steal and sell such high value virtual items.
Fraudulent online banking pages are convincing
Researchers identified a punycode phishing campaign targeting bank customers with a near carbon copy of the real banking homepage to trick them into entering their credentials.
Stolen gift cards are (almost) as good as cash
Especially as the holidays near, consumers should be aware that gift cards are a prime target for attackers because they typically have lower security than credit cards and aren’t tied to a specific person’s name.
Further, many gift cards are made by the same company with a 19-digit number and 4-digit PIN. Attackers use websites intended to check a gift card’s balance to uncover valid card number and pin combinations, giving them full access to the funds.
Hackers continue to target the Roman Catholic Church and the Vatican
The research shows hackers, potentially operating out of China, have been targeting the Roman Catholic Church and the Vatican. In one case, researchers found targeted malware in files that appear to be legitimate Vatican-related documents but infect the devices of users who access the documents. In a second instance, computers located in the Vatican were found to have malware installed.
While this type of targeted attack is usually associated with large organizations, people belonging to special interest groups, dissidents or individuals with influential jobs may also be subject to similar attacks, and general consumers should stay vigilant against phishing campaigns and infected webpages.