Avast Blog Threat Reseach: Fake Nike deal spreading on Facebook

[harlan4096]

Learn how to spot online scams like the ridiculous $26 Air Jordans.

Social media networks are a great way for people to connect, keep in touch, update friends and family, but also a great place to spread fraudulent offers. Cybercriminals continuously take advantage of social media networks, like Facebook, to make money by spreading fake shopping deals. The latest fake deals we have come across are fake Nike websites being shared on social networks.

Creating the perfect scam

The purpose of this particular Nike scam is for cybercriminals to make money. The way they do this is by spreading fake sites selling popular products at extremely low prices on social media networks, like Facebook. In this case, Nike is being used to lure people onto the fake site, which “sells” popular shoes, like Air Jordans, at ridiculously low prices. Once a customer makes a purchase, the cybercriminals charge their credit card for products that will never arrive at their doorstep.

You might be asking yourself why anyone would fall for a cheap scam like this. You most likely have a few favorite online stores and are probably cautious when purchasing products elsewhere, which is why cybercriminals choose to spread scams like this on Facebook — to reach a new target audience they otherwise wouldn’t. People are also likely to be more susceptible to phishing attempts when they are in an environment they know very well and is shared by their friends and relatives. Why wouldn't you trust a friend sending you a link to an online store having huge sales? Especially when they’re selling your favorite sneakers at an 80% discount. Your friend's profile might have been hacked, though, and a bot probably sent the message. Also, with an average number of 338 friends per user, it's easy to lose track of everyone's activity. People may have stopped using the account or haven’t logged in for a long time and may not be aware that someone else gained access. A common problem is the reckless sharing of your personal data with careless third-party developers on a platform such as Facebook.

Pay close attention to detail

In addition to abusing people’s trust by using other people’s Facebook accounts to spread the fake website, the page is well-made with a responsive template and even displays a mobile- friendly version when people open the site on their smartphone. An important aspect, especially for fraudsters, is that they are targeting people from countries with low rates of personal computer ownership.

Continue Reading