{"id":3681,"date":"2025-11-28T15:29:31","date_gmt":"2025-11-28T15:29:31","guid":{"rendered":"https:\/\/ft365.org\/index.php\/2025\/11\/28\/three-black-friday-scams-to-watch-out-for-this-year\/"},"modified":"2025-11-28T15:29:31","modified_gmt":"2025-11-28T15:29:31","slug":"three-black-friday-scams-to-watch-out-for-this-year","status":"publish","type":"post","link":"https:\/\/ft365.org\/index.php\/2025\/11\/28\/three-black-friday-scams-to-watch-out-for-this-year\/","title":{"rendered":"Three Black Friday Scams to Watch Out For This Year"},"content":{"rendered":"
\n
\n

Phishing attacks happen all year round but are especially prominent around the end of November, with Christmas approaching and many people making purchases around Black Friday and Cyber Monday.<\/p>\n

This year, UK cybersecurity firm Darktrace observed a 620% spike in Black Friday-themed phishing campaigns in the weeks leading up to both sales days.<\/p>\n<\/div>\n

The security firm also said it expects an additional 20% to 30% jump in phishing during the Black Friday week itself, which includes Thanksgiving and is followed by a holiday weekend in the US.<\/p>\n

In a report published on November 27, Darktrace warned consumers of three types of typical Black Friday phishing scam tactics: brand impersonation, fake marketing domains and generative AI-powered fake advertisements.<\/p>\n

Brand Impersonation Emails<\/strong><\/h2>\n

Brand impersonation was one of the techniques that stood out to Darktrace analysts in 2025, with 201% more phishing attempts mimicking US retailers during the week before Thanksgiving and Black Friday (November 15-21)\u00a0compared to the same week in October.<\/p>\n

Amazon was the most impersonated brand, making up 80% of phishing attempts\u00a0in Darktrace\u2019s analysis of global consumer brands, which also included Apple, Alibaba and Netflix. \u00a0<\/p>\n

Additionally, fake emails that look like they\u2019re from well-known US retailers like\u00a0Macy\u2019s, Walmart and Target were up by 54%\u00a0during the same reported week.<\/p>\n

Fake Marketing Domains<\/strong><\/h2>\n

Another prominent Black Friday phishing campaign observed by Darktrace used fake domains purporting to be from marketing sites like\u00a0\u2018Pal.PetPlatz.com\u2019\u00a0and\u00a0\u2018Epicbrandmarketing.com.\u2019<\/p>\n

Some of these malicious emails contain \u2018deals\u2019 for luxury items, such as Rolex watches or Louis Vuitton handbags, designed to tempt readers into clicking.<\/p>\n

Others promote a made-up brand called Deal Watchdogs tied to \u201ccan\u2019t-miss\u201d Amazon Black Friday offers\u202fdesigned to lure readers into acting fast to secure legitimate time-sensitive deals.<\/p>\n

Users who click on a link are redirected to a fake Amazon website where they are tricked into inputting sensitive data and payment details.<\/p>\n

GenAI-Powered Emails<\/strong><\/h2>\n

Finally, generative AI-powered phishing emails are \u201cthe biggest shift seen in phishing in recent years,\u201d said Darktrace, with 27% of phishing emails observed in 2024\u00a0containing over 1000 characters, suggesting LLM use in their creation.<\/p>\n

In one proof-of-concept (PoC) example, a Darktrace analyst with no technical background created an email that looks and feels like a genuine Black Friday offer with only two prompts given to a general purpose chatbot relying on a large language model (LLM).<\/p>\n

\u201cAnyone can now create convincing brand spoofs, and they can do it at scale. That makes it even more important for email users to pause, check the sender, and think before they click,\u201d the Darktrace blog noted.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Phishing attacks happen all year round but are especially prominent around the end of November, with Christmas approaching and many people making purchases around Black Friday and Cyber Monday. This year, UK cybersecurity firm Darktrace observed a 620% spike in Black Friday-themed phishing campaigns in the weeks leading up to both sales days. The security<\/p>\n","protected":false},"author":2,"featured_media":3682,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3681","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"featured_image_urls":{"full":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"thumbnail":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f-150x150.jpg",150,150,true],"medium":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"medium_large":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"large":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"1536x1536":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"2048x2048":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"morenews-featured":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"morenews-large":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"morenews-medium":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f.jpg",300,300,false],"crawlomatic_preview_image":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/11\/3681-5aad7e94-7171-4906-b0a4-f1982882746f-146x146.jpg",146,146,true]},"author_info":{"display_name":"henry","author_link":"https:\/\/ft365.org\/index.php\/author\/henry\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","_links":{"self":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/3681","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/comments?post=3681"}],"version-history":[{"count":0,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/3681\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media\/3682"}],"wp:attachment":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media?parent=3681"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/categories?post=3681"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/tags?post=3681"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}