Zscaler ThreatLabZ documents a seasonal increase in malicious activity coinciding with Black Friday/Cyber Monday shopping, including domain squatting on the '.blackfriday' TLD to impersonate Google and distribute the Fareit and Loki infostealers, browser-based cryptocurrency mining scripts embedded in shopping-themed sites, fraudulent e-commerce storefronts, and spear-phishing documents using holiday bonus/gift card lures to deliver embedded malicious applications. The techniques primarily rely on social engineering and typosquatted infrastructure rather than software exploitation.
Fareit
1 post
Black Friday Deals: Trojans, Phishing, Crypto Coin Mining