InfoSecBulletin Cybersecurity for mankind
Hacker specially target on the 2025 holiday season and that has seen a surge in cyber threats, as attackers utilize advanced infrastructure to take advantage of increased online shopping. This year, criminals are using automated tools to expand their deceptive digital operations across various merchant categories.
These campaigns mainly use fake websites that imitate real retailers to collect sensitive consumer information during busy shopping times. Over 18,000 holiday-themed domains have been registered in the last three months, highlighting a major sign of the pre-holiday push.
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
Targeting high-traffic keywords such as “Christmas,” “Black Friday,” and “Flash Sale,” these domains serve as the backbone for phishing schemes and fraudulent storefronts.
Many of these sites resemble well-known brands with small URL changes, making them hard to tell apart for busy shoppers. Many of these domains are inactive to avoid detection, but hundreds are already used for gift card scams and payment theft.
Fortinet analysts discovered a vast network of malicious infrastructure that enables successful SEO poisoning. Attackers boost the rankings of harmful URLs to make their fake sites show up with real results during busy times.
Researchers reported a concerning increase in credential theft, with over 1.57 million login accounts from major e-commerce sites being sold on underground markets.
These “stealer logs” contain browser-stored passwords, cookies, and session tokens, enabling rapid account takeovers that bypass traditional login defenses .
