A Holiday Retail Dilemma

This briefing outlines rising phishing threats against the retail sector — covering sophisticated email phishing, SMS-based smishing, QR-code “quishing”, helpdesk/support scams, and supply-chain phishing — and highlights concrete incidents (a Pepco BEC causing over €15M loss and an FBI-reported STORM-0539 campaign that bypassed MFA to produce fraudulent gift cards), stressing the need to secure employee accounts, vendor integrations, and customer support channels.