Some rose purchases come with thorns attached

09.02.2022 - Just a few days after the annual international Safer Internet Day on 8 February, lovers will be celebrating Valentine's Day. However, 14 February is also a red letter day for cybercriminals, and their intentions are rather less romantic. It is therefore worth remembering over the next few days that some rose purchases come with thorns attached!

firms observe an increase in phishing attacks. Cybercriminals often set up internet domains with some kind of connection to this date. These apparent Valentine's Day websites sell commonly bought gifts such as flowers, chocolates, romantic holidays, greetings cards or jewellery. The attackers use phishing emails with links to lure potential shoppers to the dodgy websites, where they are supposed to register and make a purchase with their credit card.

However, the buyers are being doubly duped: first, the purchased goods are never delivered; second, their credit card details are stolen. In addition, the attackers take advantage of the fact that many internet users still have the same login credentials for different online services. The perpetrators will use the information they obtain (email address, username and password) to access other online services, as well as the data stored there.

Tips:

  • Not every website advertising fantastic Valentine's Day offers can be trusted.
  • Do not trust special offers that look too good to be true.

    Search engine:
  • Use a search engine to access an official webshop.
  • However, be aware that "adverts" are shown above the first search results. These are always labelled as ads, and might have been posted by fraudsters.
  • Use customer feedback (reviews) to build a picture of the seller. You can find this feedback by searching the name of the webshop plus "reviews". Bear in mind that reviews can also be bogus.

    Emails/link:
  • Be careful with links in emails that you were not expecting.
  • Never enter a password on a website that you opened via a link in an email or text message.
  • As a matter of principle, be careful when you are urged to click on a link. It is better not to click on a link once than to just click away every time.
  • Check links before you click on them. Pay close attention to how the internet address behind the link is spelled; check the link by moving your mouse over it without actually clicking on it.
  • Do not open any attachments in emails from unknown or suspicious-looking senders.

    Report:
  • Report suspicious websites to www.ncsc.ch or antiphishing.ch.

  • Why not take your gift round to your beloved in person?
https://www.ncsc.admin.ch/content/ncsc/en/home/aktuell/im-fokus/2022/augen-auf-rosenkauf.html