Raindrops on roses and whiskers on kittens. Yes, it’s a time of happy thoughts, a time for cheer, giving thanks, and of course…shopping! This year, it’s most certainly going to be different from years of yore, with more online shopping than ever. But regardless of how you choose to spend your holiday budget, it’s always good to keep tools in your back pocket so you can avoid becoming a victim of cybercrime.
What is malvertising?
Simply…malware advertising. You may see advertising on the sides of your browser or in popups, arriving in text messages, in apps, or just about everywhere they can be crammed these days. Malware is advertising that is laced with malware of some type. It could be something less ominous; for instance, it just bombards you with more popup ads. However, it could direct you to a fraudulent website or be ransomware too. Avoid clicking on those ads. Instead, type in the website name manually. If you don’t know the store, do some research first.
Even the well-known e-retailers can be used as bait in these scams and websites can be taken over by domain-jacking or typosquatting. Just because the ad is one you may recognize, doesn’t mean it’s safe.
Phishing still lures
This remains a big deal. It can even be combined with malvertising to make your holidays darker than that infamous shopping day. The cybercriminals can do many things to bait and hook you. They can send spam email to a mass list hoping someone will click a link or open an attachment that can get malware onto your device, or that can garner other information from you. That information could be additional personal details, but could also be information about your workplace. In addition to these spam messages, they may also be using information on your browsing habits to create targeted phishing emails, texts, or voice messages.
Remember that when you are browsing online, no matter what browser you’re using, like Roz from those whacky Monsters movies, someone is “always watching you.” Information from your browser is usually collected and may be used by someone to show you more targeted ads, for example. If you click an ad, someone gets that information and you might be sent more ads of similar products or of other retailers. If the criminals get that information, they can use it against you for targeted phishing.
You should not only avoid clicking the ads you aren’t certain about, but don’t click links or attachments you are not 100% confident in either. Never click them if you don’t know the sender or even more importantly, are not expecting them. Even if they appear to come from your financial institution. Instead, contact them using a phone number you already know or have looked up on their official website and ask about it. You can also log into your account directly and check any details there.
Stored payment cards and auto-fill convenience
You’re probably already on high alert about payment card fraud this during the holidays and you should be. But also consider whether or not you have payment card details stored in your favorite retailers’ websites. If you do, it’s better not to do that. If one of them experiences a data breach, that information is likely to be part of the stolen information.
And when your browser tries to auto-fill your payment information, don’t let it. Criminals have found ways to cause you grief using the auto-fill feature in browsers. Either shut off the auto-fill function or remember to always type in your payment details manually. And never save this in your browser, no matter how convenient.
Setting charge limits on your cards is a good idea too. Most financial institutions allow you to set these and if a charge over the designated amount is made, you’ll get a notification. Perhaps set them a little lower during the holidays. When your card number gets stolen, the criminals will often charge smaller amounts hoping you won’t notice right away.
Of course, always keep an eye on your charges, but try to be more diligent about it during the busy holidays. We often make even more charges than usual, so it can be tough to keep track of it all. However, it’s easy to look at your purchases with the online services offered by financial institutions or in the mobile apps which are becoming more and more convenient. If you can, check it every day. You’ll be better able to stay one step ahead of the thieves.