Don't let the Grinch Steal Your Passwords this Holiday Season by Lucie Cardiet

This advisory outlines common holiday-season cyber threats, including lookalike domains (typosquatting, combosquatting, homographs, soundsquatting), Google Ads abuse, and SEO poisoning, which lead to credential theft, malware delivery, and credential stuffing. It recommends practical defenses—shop via trusted URLs, avoid unsolicited links, use password managers and unique credentials, enable MFA, and monitor for breaches with services like Have I Been Pwned—and notes that organizations can leverage tools like the Vectra AI Platform for detecting credential misuse and anomalous behavior.