With the start of the new year, the long-awaited January sales attract millions of consumers looking for deals. However, this period of intense commercial activity also becomes fertile ground for cybercriminals, who take advantage of the discount fever to launch targeted attacks against unsuspecting buyers. ESET highlights the importance of taking preventive measures to ensure a safe shopping experience during this season.
Josep Albors, director of research and awareness at ESET Spain, points out that during the January sales there is an increase in fraud attempts that affect both individual consumers and e-commerce platforms. “Cybercriminals are using more sophisticated techniques, such as attacks targeting payment systems and spoofing campaigns that exploit user trust in brands,” explains Albors.
Main Cyber Threats
Attack methods have evolved from generic tactics to more targeted and difficult to detect approaches. Among the most notable techniques are:
- Phishing and Fraudulent Emails: Messages that impersonate big brands, offering promotions that redirect to fake sites to steal personal and banking data.
- Fake Websites: Fraudulent online stores that imitate official stores and deceive consumers with extremely low prices.
- Risks in Public Wi-Fi Networks: Insecure connections that can be used by cybercriminals to intercept sensitive data.
- Malicious Applications: Tools that promise exclusive discounts, but install malware on users’ devices.
The success of many scams lies in manipulating the buyer’s emotions. Strategies such as a sense of urgency (“Last hours of discount”) or exclusivity (“Just for you”) are designed to drive impulsive decisions. Recognizing these tactics and acting calmly is essential to avoid falling into the trap.
Cybercriminals take advantage of sales to launch sophisticated attacks, such as phishing emails, spoofed websites and malware in smartphone applications, targeting both consumers and e-commerce businesses.
Tips for safe discounts
To protect your data and your wallet during this sales season, ESET offers seven essential tips:
- Verify the Authenticity of the Website: Look for the official URL and avoid suspicious links in emails or social networks.
- Use Unique and Strong Passwords: Tools like password managers will help you keep your accounts secure.
- Opt for Secure Payment Methods: Use virtual cards or recognized payment platforms that offer additional protection against fraud.
- Avoid Public Wi-Fi Networks: Make your purchases on private networks or, if unavoidable, connect using a VPN.
- Update your Devices: Keep your operating system, browser and applications up to date to reduce the risk of vulnerabilities.
- Be wary of offers that are too good to be true: Disproportionate discounts are often a trap.
- Activate Banking Security Alerts: Set up notifications for transactions, which will allow you to quickly detect suspicious movements.
Albors also highlights that security does not fall solely on the consumer. «Online businesses have a responsibility to implement advanced security measures, such as data encryption, suspicious activity review and two-step authentication. Banking entities, for their part, must strengthen their fraud detection systems to protect transactions in real time,” he concludes.
