Black Friday Phishing Frenzy: How Scammers Are Bagging Your Bucks!
A phishing campaign, led by SilkSpecter, is targeting e-commerce shoppers with fake discounts on sites mimicking brands like IKEA and North Face. Using SEO poisoning and typosquatting, these sites harvest personal information during Black Friday. Victims may even face follow-up smishing and vishing attacks.

Hot Take:
Looks like the Grinch is going digital this year, targeting our holiday shopping sprees with a sleigh full of phishing scams. Who knew cybercriminals were such suckers for Black Friday deals? It’s a phishing frenzy out there, so hold on to your wallets and your personal information, folks!
Key Points:
- SilkSpecter is the name of the Chinese threat actor behind the phishing campaign.
- Fake e-commerce sites impersonate brands like IKEA and North Face.
- Phishing sites employ geolocation-based language changes and track user interactions.
- SEO poisoning and social media likely used to spread malicious URLs.
- Similar past fraud operations have abused digital payment providers.
Already a member? Log in here