Black Friday & Cyber Monday Deals: Phishing and Site Skimmers

During the pre-Black Friday shopping season Zscaler ThreatLabZ observed an uptick in targeted phishing campaigns, MageCart site-skimming attacks that inject obfuscated JavaScript into e-commerce payment pages to harvest payment and personal information, and cryptojacking scripts that abuse visitors' browser CPU to mine cryptocurrency; the report illustrates these threats with fake Amazon pages, network captures, activity charts, and provides actionable defenses (URL verification, HTTPS, script-blockers, inline malware detection, 2FA, patching and backups).