It’s expected that 70 percent of Americans will shop online this holiday season.
While technology might be convenient for them, it’s an opportunity for scammers as well.
Cyber Scrooges will be working overtime and online shoppers face new threats on their mobile devices, email and the Internet itself, according to McAfee, the technology security company. It warns consumers to be wary of the most common “12 Scams of Christmas.”
“Using multiple devices provides the bad guys with more ways to access your valuable digital assets, such as personal information and files, especially if the devices are under-protected,” Paula Greve, director at McAfee Labs, said in a statement. “One of the best ways for consumers to protect themselves is to learn about the criminals’ tricks, so they can avoid them. Beyond that they should have the latest updates of the applications on their devices in order to enjoy a safe online buying or other experience. We don’t want consumers to be haunted by the scams of holidays past, present and future – they can’t afford to leave the door open to cyber Grinches during the busy holiday season.”
The company’s 2012 Holiday Shopping Study surveyed the online habits and behaviors of Americans, including those who indicate that they will engage with the Internet and mobile devices while shopping this holiday season. In light of these findings, McAfee lists Top 12 Scams of Christmas that criminals plan to use to rip off Americans as they shop online this holiday season.
While Americans have become accustomed to shopping online, and will do so in droves, they are also using their mobile phones for more of their everyday activities.
As 70 percent of those surveyed plan to shop online this holiday season, a surprising 1 in 4 (24 percent) of them plan to use their mobile devices. While aware of the risks, they’re willing to give away their personal information if they can get something they value in return.
Despite the fact that 87 percent of smartphone or tablet owners surveyed are at least somewhat concerned that their personal information could be stolen while using an app on a smartphone or tablet, nearly nine in ten of them are willing to provide some level of personal information in order to receive an offer that is of value to them.
Among those Americans planning on using smartphones and/or tablets to purchase gifts this holiday season, more than half (54 percent) are specifically planning to use apps for shopping and/or banking during the holiday season; as such, mobile devices have proven irresistible to cybercriminals, and now they are targeting mobile users through malicious applications.
With roughly three in ten (28 percent) American smartphone and/or tablet owners admitting they do not pay attention at all to app permissions and 36 percent paying attention but specifying they do not always do so, Cyber-Scrooge criminals are ready to pounce.
‘Tis the season for consumers to spend more time online – shopping for gifts. 88 percent of those Americans who plan on shopping online during the 2012 holiday season plan on using a personal computer to do so, and 34 percent will use a tablet (21 percent) and/or smartphone (19 percent).
With nearly half (48 percent) of Americans planning to shop online on Cyber Monday for sales (45 percent using a computer, 10 percent using a mobile device), here are the “12 Scams of Christmas,” the dozen most dangerous online scams to watch out for this holiday season, revealed today by McAfee.
1) Social media scams— Cybercriminals know social media networks are a good place to catch people off guard because we’re all “friends,” right? Scammers use channels, like Facebook and Twitter, just like email and websites to scam consumers during the holidays. Be careful when clicking or liking posts, while taking advantage of raffle contests and fan page deals from “friends” that advertise the hottest Holiday gifts, installing apps to receive discounts and friends’ accounts being hacked and sending out fake alerts. Twitter ads and special discounts utilize blind, shortened links, many of which could easily be malicious.
2) Malicious Mobile Apps—As smartphone users we are app crazy, downloading over 25 billion apps1 for Android devices alone! But as the popularity of applications has grown, so have the chances that someone could download a malicious application designed to steal your information or even send out premium-rate text messages without your knowledge.
3) Travel Scams—Before booking a flight or hotel to for the holidays, keep in mind that the scammers are looking to hook consumers with too-good-to-be-true deals. Phony travel webpages, sometimes using your preferred company, with beautiful pictures and rock-bottom prices are used to get people to hand over their financial details.
4) Holiday Spam/Phishing—Soon many of these spam emails will take on holiday themes. Cheap Rolex watches and pharmaceuticals may be advertised as the “perfect gift” for that special someone.
5) iPhone 5, iPad Mini and other hot holiday gift scams—The kind of excitement and buzz surrounding Apple’s new iPhone 5 or iPad Mini is just what cybercrooks dream of when they plot their scams. They will mention must-have holiday gifts in dangerous links, phony contests (example: “Free iPad”) and phishing emails as a way to grab computer users’ attention to get you to reveal personal information or click on a dangerous link that could download malware onto a computer.
6) Skype Message Scare—People around the world will use Skype to connect with loved ones this holiday season, but they should be aware of a new Skype message scam that attempts to infect their machine, and even hold their files for ransom.
7) Bogus gift cards—Cybercriminals can’t help but want to get in on the action by offering bogus gift cards online. Be wary of buying gift cards from third parties; just imagine how embarrassing it would be to find out that the gift was fraudulent.
8) Holiday SMiShing—“SMiSishing” is phishing via text message. Just like with email phishing, the scammer tries to lure consumers into revealing information or performing an action they normally wouldn’t do by pretending to be a legitimate organization.
9) Phony E-tailers– Phony e-commerce sites, that appear real, try to people you into typing in their credit card number and other personal details, often by promoting great deals. After obtaining money and information consumers never receive the merchandise and their personal information is put at risk.
10) Fake charities—This is one of the biggest scams of every holiday season. As we open up our hearts and wallets, the bad guys hope to get in on the giving by sending spam emails advertising fake charities.
11) Dangerous e-cards—E-Cards are a popular way to send a quick “thank you” or holiday greeting, but some are malicious and may contain spyware or viruses that download onto a computer once a user clicks on the link to view the greeting.
12) Phony classifieds—Online classified sites may be a great place to look for holiday gifts and part-time jobs, but beware of phony offers that ask for too much personal information or ask the consumer to wire funds via Western Union, since these are most likely scams.
According to a global study commissioned by MSI International and McAfee, consumers place an average value of $37,438 on the “digital assets” they own across multiple digital devices, yet more than a third lack protection across all of those devices.
“For the millions of consumers who plan to go online this holiday season to shop for the best deals, finalize travel plans and update their social channels, it’s important that they enjoy those activities safely by checking their security protection on their computers and mobile devices first,” Gary Davis, vice president of McAfee Global Consumer Marketing, said in a statement. “To keep their personal and financial information secure, it’s also important to be wary of offers that are too good to be true, not click on links or open attachments from people they don’t know or companies’ emails or sites that look suspect, and go directly to websites by typing their name in web address bar.”
