{"id":602253,"date":"2025-11-29T23:42:16","date_gmt":"2025-11-29T23:42:16","guid":{"rendered":"https:\/\/www.europesays.com\/uk\/602253\/"},"modified":"2025-11-29T23:42:16","modified_gmt":"2025-11-29T23:42:16","slug":"amazon-customers-issued-48-hour-warning-attacks-have-started","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/uk\/602253\/","title":{"rendered":"Amazon Customers Issued 48 Hour Warning\u2014Attacks Have Started"},"content":{"rendered":"<p><img decoding=\"async\" class=\" top-image\" src=\"https:\/\/www.europesays.com\/uk\/wp-content\/uploads\/2025\/11\/1764459736_67_0x0.jpg\" alt=\"Amazon logo\" data-height=\"936\" data-width=\"1404\" fetchpriority=\"high\" style=\"position:absolute;top:0\"\/><\/p>\n<p>Look out for these messages on your phone<\/p>\n<p>AFP via Getty Images<\/p>\n<p>Updated Nov. 29 with Amazon\u2019s response to the raft of holiday season security warnings and additional advice for customers on how to stay safe from attacks.  <\/p>\n<p>Attacks targeting Amazon customers were \u201calready surging\u201d by Black Friday, with millions at risk. And \u201cthe threat has not yet peaked,\u201d increasing for another 48 hours through Cyber Monday. It\u2019s critical you look for messages and check your account.<\/p>\n<p>That warning comes courtesy of <a class=\"color-link\" href=\"https:\/\/www.darktrace.com\/news\/phishing-attempts-targeting-black-friday-shoppers-surge-620-in-the-weeks-leading-into-the-holiday-weekend\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.darktrace.com\/news\/phishing-attempts-targeting-black-friday-shoppers-surge-620-in-the-weeks-leading-into-the-holiday-weekend\" aria-label=\"Darktrace\">Darktrace<\/a>,. \u201cAmazon is the most mimicked brand, making up 80% of phishing attacks\u201d against major companies, it says. Attacks which have already spiked 620% in November and will surge another 20 to 30% by Nov. 29.<\/p>\n<p>According to Will Glazier from Cequence Security, \u201csocial engineering and phishing might just be two of the oldest professions in the cybersecurity space, and this report shows how criminals leverage vulnerabilities in our psyches, such as excitement over holiday gift tracking, every bit as much as they do in software.\u201d<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-4\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/29\/google-confirms-gmail-choice-2-billion-users-must-now-decide\/\" target=\"_blank\" aria-label=\"Google Confirms Gmail Choice\u20142 Billion Users Must Now Decide\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/29\/google-confirms-gmail-choice-2-billion-users-must-now-decide\/\" rel=\"noopener\">ForbesGoogle Confirms Gmail Choice\u20142 Billion Users Must Now DecideBy Zak Doffman<\/a><\/p>\n<p>The scale of this threat to holiday shoppers in general and Amazon customers in particular has been echoed by the latest research from <a class=\"color-link\" href=\"https:\/\/guard.io\/blog\/beware-of-black-friday-and-cyber-monday-scams-how-to-avoid-falling-victim\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/guard.io\/blog\/beware-of-black-friday-and-cyber-monday-scams-how-to-avoid-falling-victim\" aria-label=\"Guardio\">Guardio<\/a>. \u201cBlack Friday is no longer just a shopping day,\u201d it warns. \u201cIt has become a hunting ground for cybercriminals armed with artificial intelligence.\u201d<\/p>\n<p>Guardio points out that \u201cAmericans lost over $432 million to online shopping fraud in 2024, and experts predict 2025 will shatter that record as AI-powered attacks reach unprecedented sophistication.\u201d Amazon is highlighted again, alongside other major brands, including Walmart, Costco, Apple, AT&amp;T and Verizon.<\/p>\n<p>The latest wave of phishing attacks use AI as never before, \u201cwhich means perfect grammar, professional designs, and convincing copy that makes traditional \u2018red flags\u2019 obsolete. The old advice to \u2018look for spelling errors\u2019 or \u2018check for poor formatting.\u2019 That\u2019s ancient history. AI has eliminated those telltale signs.\u201d<\/p>\n<p>According to Guardio, &#8220;The most common trap is the urgent account alert. You receive a text claiming your Amazon account has been \u2018suspended due to suspicious activity\u2019 or your Verizon bill \u2018couldn\u2019t be processed\u2019 and you need to \u2018verify your information immediately\u2019 by clicking a link\u2019.&#8221;<\/p>\n<p>Amazon is working hard to combat the plague of impersonation scams that target attacks against its users, the objective being to steal user names and passwords and gain access to accounts. The answer, <a class=\"color-link\" href=\"https:\/\/www.amazon.co.uk\/gp\/help\/customer\/display.html?nodeId=G4YFYCCNUSENA23B\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.amazon.co.uk\/gp\/help\/customer\/display.html?nodeId=G4YFYCCNUSENA23B\" aria-label=\"Amazon says\">Amazon says<\/a>, is to add a passkey to your account.<\/p>\n<p>Sectigo CTO Nick France pushes the same security message, telling me \u201cas the holiday shopping season reaches its peak, consumers are eager to snag the best deals online, but this surge in activity also attracts cybercriminals looking to exploit vulnerabilities.\u201d <\/p>\n<p>France warns that \u201cultimately, security is a shared responsibility. Consumers can benefit by staying vigilant and shopping wisely, while businesses must maintain their security posture to promote trust and confidence. Together, these efforts help create a safer online shopping experience during the holiday season and beyond.\u201d<\/p>\n<p>Amazon is doing that. Its security advice is now front and center. \u201cTo securely sign in to your Amazon account you can enable a passkey to simply use your face, fingerprint, or the PIN that you use to unlock your device. Passkeys are a convenient and secure way to sign in to your Amazon account without using a password.\u201d <\/p>\n<p>And <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/08\/31\/amazon-confirms-320-million-users-now-have-upgraded-accounts\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/08\/31\/amazon-confirms-320-million-users-now-have-upgraded-accounts\/\" target=\"_self\" aria-label=\"hundreds of millions of Amazon customers\" rel=\"noopener\">hundreds of millions of Amazon customers<\/a> have already upgraded their security. Along with <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/11\/yes-google-warns-all-gmail-users-to-stop-using-passwords-act-now\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/11\/yes-google-warns-all-gmail-users-to-stop-using-passwords-act-now\/\" target=\"_self\" aria-label=\"Google\" rel=\"noopener\">Google<\/a>, Amazon is leading the way in passkey adoption. Add one to your account now, after which you don\u2019t have to worry about credential stealing attacks.<\/p>\n<p>\u201cThis year we\u2019re guaranteed to see ever more sophisticated scams, primarily fueled by AI,\u201d Keeper Security\u2019s Anne Cutler told me. \u201cBlack Friday doesn\u2019t need to be a hacker\u2019s payday. A few proactive steps, coupled with an identity-first mindset, can make the difference between a money-saving bargain and a costly breach.\u201d<\/p>\n<p>Amazon is issuing its own warnings to customers to beware these scams over the holiday period. \u201cThe company confirmed to <a class=\"color-link\" href=\"https:\/\/www.usatoday.com\/story\/tech\/2025\/11\/28\/amazon-alert-scams-holiday-shopping\/87508561007\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.usatoday.com\/story\/tech\/2025\/11\/28\/amazon-alert-scams-holiday-shopping\/87508561007\/\" aria-label=\"USA TODAY\">USA TODAY<\/a> on Friday, Nov. 28 that Amazon has been sending customers messages about avoiding such scams.\u201d<\/p>\n<p>These emails started hitting U.S. inboxes in early November, \u201cand customers in the United Kingdom this week.\u201d The messaging in the emails reinforced the company\u2019s focus on impersonation, and discerning real from fake Amazon reach-outs.<\/p>\n<p>But while multiple cyber security firms have issued warnings for Amazon users as attacks escalate, Amazon plays down the threat. \u201cWhen asked about the notices,\u201d USA TODAY reports, \u201cAmazon clarified the messages are not warnings or alerts as other outlets have reported, but \u2018educational efforts\u2019 to protect customers.\u201d<\/p>\n<p>There are some semantics at play here. Impersonation in itself is meaningless. It\u2019s not a different form of attack. It\u2019s just a lure. It doesn\u2019t matter whether it\u2019s a toll collection company, a parcel delivery company, the federal government or Amazon, the objective is the same. And the underlying platforms that power the scams are the same.<\/p>\n<p>The text to email will include a link to a fake website or a fake sign-in page. The lure will match the link and likely the domain as well. Thousands upon thousands of domains are registered monthly, designed to trick your eyes into thinking it\u2019s a legitimate URL.<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-5\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/29\/apple-ios-262-new-iphone-pin-codes-now-just-days-away\/\" target=\"_blank\" aria-label=\"Apple iOS 26.2\u2014New iPhone PIN Codes Now Just Days Away\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/29\/apple-ios-262-new-iphone-pin-codes-now-just-days-away\/\" rel=\"noopener\">ForbesApple iOS 26.2\u2014New iPhone PIN Codes Now Just Days AwayBy Zak Doffman<\/a><\/p>\n<p>If you fall for an Amazon refund or discount or account lure, the goal is to have you sign-in on an attacker\u2019s fake page and give away your credentials. These can then be used by the attacker to access your account. If the link directs to a fake website, the goal is to steal your personal and financial information, as you shop for non-existent goods, compelled by offers that look too good to be true \u2014 and are exactly that.<\/p>\n<p>Amazon is the most impersonated brand in retail phishing attacks simply because it\u2019s the biggest online retail brand. Attackers calculate that most of the email addresses or cell phone numbers they target will have an Amazon account, increasing their hit rate. <\/p>\n<p>\u201cThe psychology behind holiday scams is simple,\u201d Guardio says. \u201cDistraction plus urgency equals vulnerability. Cyber criminals exploit this decision fatigue. They\u2019re not just sending random attacks; they&#8217;re timing their scams to coincide with the exact moments when you&#8217;re most likely to click without thinking.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Look out for these messages on your phone AFP via Getty Images Updated Nov. 29 with Amazon\u2019s response&hellip;\n","protected":false},"author":2,"featured_media":598702,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[188066,188061,188063,188064,181708,188062,188065,51,16,15],"class_list":{"0":"post-602253","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-business","8":"tag-amazon-account","9":"tag-amazon-attack","10":"tag-amazon-black-friday","11":"tag-amazon-cyber-monday","12":"tag-amazon-discount","13":"tag-amazon-hacker","14":"tag-amazon-security","15":"tag-business","16":"tag-uk","17":"tag-united-kingdom"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@uk\/115635640997249946","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts\/602253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/comments?post=602253"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts\/602253\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/media\/598702"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/media?parent=602253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/categories?post=602253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/tags?post=602253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}