Chinese Threat Actor Targets Black Friday Shoppers With Phishing Campaign

Researchers warn that the financially motivated Chinese threat actor “SilkSpecter” is running a Black Friday phishing campaign across Europe and the US, luring victims with fake discounted products. The phishing sites complete genuine transactions through Stripe while covertly exfiltrating cardholder data and collecting phone numbers (for potential vishing/smishing), and attackers are likely distributing links via social media and SEO poisoning.