Scamming and Smishing while Shopping

Executive summary: This ThreatLabZ report details a surge in shopper-focused cybercrime around the holiday season — phishing campaigns (email and SMS/smishing), fake Amazon/PayPal pages, Emotet distribution via malicious DOC/PDF with PowerShell payloads, and Magecart site skimmers targeting e-commerce checkout pages — noting large scale activity (a >400% phishing increase and a smishing bit.ly link with ~500,000 clicks in 24 hours) and providing mitigation guidance (HTTPS checks, 2FA, avoiding unknown links, patching, etc.).