Cyber Criminals Are Banking On Black Friday

With the Coronavirus pandemic keeping many people away from the high street, bargain-hunters will be relying even more on online shopping and with more businesses looking to move their business online during Black Friday and Christmas this year. In the absence of footfall in their shops, thousands of retailers will be working hard to take their offers online and give customers the opportunity to make their purchases digitally.

There will be a surge in online transactions over the next month and this will also mean a surge in attacks from hackers and other cyber criminals. 

With a total anticipated spend of around £6 billion, this sale period will be crucial for many retailers who have faced significant financial and logistical challenges throughout 2020 due to the Coronavirus pandemic. But it’s important for e-commerce businesses and consumers to be aware that they aren’t the only ones making preparations for a big November. 

Cyber criminals will also be aiming to profit from this period and looking to seize potentially lucrative opportunities at a time when they know that payment card data and personal details will be flowing through digital databases at a faster rate than ever.

In the US, Black Friday has become the biggest shopping day of the year, as the day after the Thanksgiving holiday retailers mark down their prices to kick-start the gift-buying season and get consumers spending. In the last decade, to boost online retail equally, Cyber Monday has been introduced the first Monday after Thanksgiving making US consumers go online for the best bargains.

In previous years, phishing attacks alone have seen an increase of 300% around Black Friday, putting consumers at greater risk of text, email and social media scams. Add malware, ransomware, viruses and distributed denial of service (DDoS) attacks into the mix and all of a sudden trading online can feel like a dangerous place to be.

Yet with the right preparation and attention to detail, you can have a profitable and productive Black Friday period.

What Can Be Done To Minimise The Risk Of A Cyber Attack?

If your business is trading online this November, it is important to take steps now, rather than simply ignoring the risk and hoping for the best. By putting the right measures in place, you can not only reduce the likelihood of a breach but also enhance your reputation and help customers to safeguard themselves. Communication is key and letting your customers know you are vigilant in cyber security will actually build customer confidence in the process. Alert them to your security and privacy procedures and tell them what you are doing to safeguard them. 

If you discover that scammers are using your brand to target customers, issue a prompt warning and urge them to check that any links used to your website are legitimate. If you find and isolate those scams before your customers do, then all the better. For that you will need professional help.

With time running short a good step to take is to scan your digital assets for vulnerabilities now and test your defences so you know where you need to improve. 

This is known in cyber security as Penetration Testing. Using real world experience of all types of attack, highly qualified professionals can put your website through its paces to ensure that it’s fit for purpose. By mimicking the type of attacks carried out by potential hackers, a penetration tester can explore and recommend necessary improvements before an attacker finds them.

There is no doubt that businesses around the globe will be more dependent on e-commerce than ever before this Black Friday. Given the events of the last few months we all hope that it’s a successful one for businesses that have struggled to trade through the uncertainty of 2020. 

BDaily:        Mirror:       Finance Digest:      Guardian:

If you have any concerns about the resilience of your online presence against the threat of a cyber attack, now would certainly be the time to consult an expert you can trust. Check out our free access Cyber Security Service Supplier Directory to find the right expertise in your location: 

Directory Listings: Pentesting & Security Assessments

You Might Also Read: 

Cybercrime In Britain Does Serious Harm:

 

 

« Trump Fires National Cyber Security Chief
CYRIN Cyber Alert - Test-Drive The CYRIN Cyber Range »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Assure Technical

Assure Technical

Assure Technical offers a holistic approach to Technical Security. Our expertise and services span across the Physical, Cyber and Counter Surveillance domains.

Allgress

Allgress

Allgress solutions converge disparate risk silos across enterprise networks and automate governance, risk and compliance management processes.

Materna Virtual Solution

Materna Virtual Solution

Materna Virtual Solution security solutions enable user-friendly, secure mobile working environments.

Advisen

Advisen

Advisen is the leading provider of data, media, and technology solutions for the commercial property and casualty insurance market including cyber risk.

BehavioSec

BehavioSec

BehavioSec uses the way your customers type, swipe, and hold their devices, and enables them to authenticate themselves through their own behavior patterns.

Lumen Technologies

Lumen Technologies

Lumen is an enterprise technology platform that enables companies to capitalize on emerging applications and power the 4th Industrial Revolution (4IR).

CRI4DATA

CRI4DATA

CRI4DATA's mission is to help organizations build their resilience to cyber risk.

Dual Layer IT Solutions

Dual Layer IT Solutions

Dual Layer offer a full range of IT Services and Solutions for businesses from IT infrastructure design to cloud/hosted solutions, cybersecurity, disaster recovery and IT training.

Aspisec

Aspisec

Aspisec is a cybersecurity company specialized in Firmware Security and Critical Infrastructure Protection.

Technology Ireland ICT Skillnet

Technology Ireland ICT Skillnet

Technology Ireland ICT Skillnet is a network of companies who collaborate to address skills needs within the technology sector.

Isovalent

Isovalent

Isovalent deliver the most advanced Kubernetes networking & security capabilities to the most demanding of enterprise users.

Everbridge

Everbridge

Everbridge provides enterprise software applications that automate and accelerate organizations’ operational response to critical events in order to keep people safe and businesses running.

Fulcrum IT Partners

Fulcrum IT Partners

Fulcrum IT Partners is the parent company of an expanding portfolio of established IT solution companies around the world with proven expertise in cyber security, cloud, and managed services.

Opal Security

Opal Security

Opal is an identity and access management platform that offers a consolidated view and control of your whole ecosystem from on-prem to cloud and SaaS.

GAM Tech

GAM Tech

GAM Tech is a Managed IT Service Provider that serves small and medium sized businesses in Alberta, British Columbia, Ontario and Quebec.

NSI Global

NSI Global

NSI Global is a specialist Global Risk and Intelligence Advisory Firm. We specialise in Risk Consulting, Security Intelligence, Geopolitical Intelligence, Cyber Security, Digital Forensics, and TSCM.