BeyondTrust
  • Products
    Privileged Password Management
    Discover, manage, audit, and monitor privileged accounts
    Password Safe DevOps Secrets Safe
    Endpoint Privilege Management
    Manage privileges on Windows, Mac, Linux, and Unix endpoints
    Windows and Mac Unix and Linux Active Directory Bridge
    Secure Remote Access
    Centrally manage and secure remote access for service desks and vendors
    Remote Support Privileged Remote Access
    Use Cases and Industries
    See All Products
  • Resources

    Universal Privilege Management

    Our innovative Universal Privilege Management approach secures every user, asset, and session across your entire enterprise.

    Watch Video

    Learn

    Case Studies
    Competitor Comparisons
    Datasheets
    Glossary
    Product Demos
    Whitepapers

    Attend

    Events
    Go Beyond
    Training
    Webinars

    Support

    Changelog
    Professional Services
    Technical Documentation
  • Blog
  • Partners
  • Contact
  • Support
  • Services
  • Training
  • Events
  • Company

Cyber Monday: Dos and Don’ts for Merchants and Consumers

November 18, 2016

  • Blog
  • Archive
Cyber Monday The Friday after Thanksgiving in the United States is referred to as Black Friday. It is the second busiest shopping day of the year, the unofficial beginning of the holiday season, and the day that marks when most retail businesses become financially profitable for the year. Since the early 2000s, the following Monday has been referred to as Cyber Monday. It marks the peak of online sales for the holiday season and recently surpassed brick-and-mortar as the busiest shopping day of the season. Cyber Monday also represents a shift in our next generation digital economy and also another method for thieves to take advantage of unsuspecting buyers and retailers. Hackers and cyber criminals thrive on digital information to propagate their malicious activities, and Cyber Monday has plenty of opportunity to capitalize on unsuspecting buyers. For merchants and consumers, here are a few things to look out for:

DO: Use Unique Passwords for all Online Accounts

When shopping online, and the website requires you to create an account, use a unique password for every site, and do not use the same password as banks, social media, or other retailers. If one location is breached by a cyberattack, then the password cannot be re-used at another location to propagate a crime. Understandably it is difficult to remember all the passwords and users should consider a password manager like Apple’s iCloud Keychain to help create random passwords and remember them automatically.

DO: Examine all “Too Good to be True” Email Offers

The most common attack vector for hackers today is phishing emails. Be aware of fake emails from popular websites with incredible deals. They are probably just a scam linking you to a fake website that looks like the real thing, just to steal your credentials (password) and possibly your credit card too. Always check the URL (link) in the email and make sure it goes to the correct site before clicking on it. You can easily see it by hovering over the picture or right clicking and selecting copy link. Then you can paste it into a browser and verify it is real verses clicking on the link in the email.

DO: Look for Secure Website Encryption

When visiting a web site for a purchase, make sure that when you click on the cart and check out, the website is encrypting the traffic using HTTPS. This ensures no one can snoop on the data you are transmitting or receiving. Checking to make sure the site’s communications are encrypted is as simple as looking for a “pad lock” in the URL browser address field or seeing if HTTP or HTTPS is present with a red hash. If you see the later, avoid purchasing any items since the vendor is not protecting your transactions electronically with encryption. This typically happens with smaller merchants or fake websites designed to steal your information.

DO: Update all Security Patches Before Shopping

Before surfing the web for the best deals, make sure your computer, laptop, tablet, and even cell phone are up to date with the latest security patches and operating system versions. Using search engines to find deals can unfortunately display malicious sites that can take advantage of operating system, browser, and application vulnerabilities like Adobe Flash and Oracle Java. Surfing to the wrong page with an exploit can cause havoc for your system; keeping up to date on patches helps ensure that a fake deal does not compromise your device.

DO: Beware of Fake Shopping Apps

Beware of fake shopping applications for use on your phones and tablets. Both Google and Apple are removing fake shopping applications that attempt to steal information and present fake advertisements from their app stores. These applications can be difficult to spot but here are a few clues:
  • If it is an application from a major retailer and has little to no reviews, it is probably a fake. Most major retailers have applications that have been downloaded thousands of times. New fake ones just do not have the credibility in terms of reviews documented and are a simple clue.
  • The developer’s name is in a foreign language or is listed by an individual and not a company.
  • The application requests permission to access information on your device like photos, text messages or contacts that it really should not have.
  • The application logo uses different colors or is not quite the same as the vendor you are looking for. For example, a Starbucks logo is always green and white. Variations would indicate a fake application trying to mimic the real deal.

DO NOT: Store Your Credit Card on Websites

If a website asks if you would like to store your credit card for future purchases, decline the setting. If a breach occurs into their credit card environment, then your card could be re-used by a cyber thief. Some websites like Apple, Amazon, and Microsoft require you to store your card credit in order to purchase products since re-occurring charges can occur for applications or music. Unfortunately, this is a risk we must accept in order to use their services, but in general, if there is no need to store your credit card, then don’t do it. Cyber Monday can offer some huge savings for consumers during the holiday season, and also presents an opportunity for merchants to deliver on customer service. Simple steps can protect you as a consumer and a merchant from the modern threats we face in this next generation digital economy. If you are a merchant and want to better understand the status of your application vulnerabilities or the state of your enterprise passwords, contact us today for a health check!
Photograph of Morey J. Haber

Morey J. Haber, Chief Technology Officer and Chief Information Security Officer at BeyondTrust

Morey J. Haber is Chief Technology Officer and Chief Information Security Officer at BeyondTrust. He has more than 25 years of IT industry experience and has authored four Apress books: Privileged Attack Vectors (2 Editions), Asset Attack Vectors, and Identity Attack Vectors. In 2018, Bomgar acquired BeyondTrust and retained the BeyondTrust name. He originally joined BeyondTrust in 2012 as a part of the eEye Digital Security acquisition. Morey currently oversees BeyondTrust strategy for privileged access management and remote access solutions. In 2004, he joined eEye as Director of Security Engineering and was responsible for strategic business discussions and vulnerability management architectures in Fortune 500 clients. Prior to eEye, he was Development Manager for Computer Associates, Inc. (CA), responsible for new product beta cycles and named customer accounts. He began his career as Reliability and Maintainability Engineer for a government contractor building flight and training simulators. He earned a Bachelor of Science degree in Electrical Engineering from the State University of New York at Stony Brook.

Stay Up To Date

Get the latest news, ideas, and tactics from BeyondTrust. You may unsubscribe at any time.

I agree to receive product related communications from BeyondTrust as detailed in the Privacy Policy, and I may manage my preferences or withdraw my consent at any time.

You May Also Be Interested In:

Whitepapers

Mapping BeyondTrust Capabilities to NIST SP 800-207

Whitepapers

Mapping BeyondTrust Solutions to the Identity, Credential, and Access Management (ICAM) Architecture

Whitepapers

Four Key Ways Governments Can Prepare for the Growing Ransomware Threat

BeyondTrust Logo
  • Facebook
  • Twitter
  • LinkedIn

Keep up with BeyondTrust

I agree to receive product related communications from BeyondTrust as detailed in the Privacy Policy, and I may manage my preferences or withdraw my consent at any time.

Customer Support
Contact Sales

Products

  • Endpoint Privilege Management
  • Password Management
  • Privileged Remote Access
  • DevOps Secrets Safe
  • Remote Support

Resources

  • Blog
  • Case Studies
  • Competitor Comparisons
  • Datasheets
  • Glossary
  • Videos
  • Webcasts
  • Whitepapers

About

  • Company
  • Careers
  • Contact
  • Events
  • Leadership Team
  • Partner Program
  • Press

Languages

  • English
  • German
  • French
  • Spanish
  • Korean
  • Portuguese
  • Japanese
  • Privacy
  • Security
  • Manage Cookies
  • WEEE Compliance

Copyright © 1999 — 2020 BeyondTrust Corporation. All rights reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust Corporation is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.