On the run to take advantage of an offer on sexta-feira Negra, it is common to forget or ignore some good safety habits. The fact that most of them are already bald to know, but it is worth remembering: avoid stores that are not recommended, insecure websites, be wary of incredible promotions (valid only by email or social networks)… The list of tips keeps growing , but we did a practical summary of what to do (or not) online.
THE Black Friday 2020 happens this Friday, November 27th. And, like any major event, it attracts the attention of millions of people. The date is a treasure hunt period for cybercriminals who take advantage of our flaws and habits.
What not to do on Black Friday?
1. DO NOT buy from stores with URLs without HTTPS
Trusted sites have an “S” in their URL address. This “S” certifies that the connection between your device and the website is secure. This means that your personal, credit card and bank details will not be intercepted in the purchase process. It is common for https: // sites to show a closed padlock on the page’s URL and the address in green.
The tip is valid not only for store websites but also for pages of banks, credit unions and other financial institutions – which you will probably access to make payments – which are the main targets of phishing attacks.
O https, however, it does not guarantee that the site is secure. Scammers can acquire certificates like these on phishing sites. So follow the next tips.
2. DO NOT buy from stores that appear on the Procon list
In addition to checking the security of the store’s website, avoid buying from companies that appear on the Procon-RJ list. The institution maintains the list since 2012 and updates the names periodically. It brings together online stores that have had complaints, been notified but have not responded or that their parents have not been found.
There are more than 200 stores (some are already down); check the list here: Avoid these Sites.
3. AVOID promotions valid only for shortened links
It is very common to see e-mail messages, via WhatsApp, SMS or Facebook and Instagram, distributing infected links with websites that, in fact, are copies of large stores. The goal is to trick the inattentive who end up including data on a fake website. Do not click directly on these links, go to the original website and check if the offer is valid.
4. DO NOT use public Wi-Fi networks for shopping
This tip is valid for the whole year. In particular, on Black Friday, the sense of urgency can make us make some mistakes. Avoid making online business transactions on public networks, insecure or without passwords, such as free Wi-Fi in malls, airports, bars and restaurants.
5. AVOID downloading unknown applications
The danger may also be in the app stores. With promises to offer coupons or warn lower prices, fake store apps and / or payments can be a bore. Download only apps indicated on the official website of the store you usually buy.
Bonus: DO NOT get carried away by the sense of urgency
The sense of urgency to complete an online purchase is not always real. Be careful with ads with countdown minutes and / or messages like “click now”. These are common ways to make you act without thinking and make purchases on fake websites, whose visual identity is almost identical to cause confusion.
What to do on Black Friday?
1. Be wary of everything
Newsletters, emails, messages with generic greetings and any unsolicited communication can be a sign of a phishing scam. Ignore tickets for products or services you didn’t request or gifts and promotions you didn’t sign up for.
2. Review the URL of websites and emails
Check carefully the URL you will buy and the sender of the emails you receive. In homographic attacks, scammers who take advantage of famous names and the combination of unusual characters. Instead of “m”, they use “rn” (RN) to, in a “glance”, make “rnercadolivre” look like “mercadolivre”. Or “arnericanas”, with “americana”. There are examples with characters from other alphabets as well.
3. Use a VPN
Even if you’re shopping at home or at work, using a VPN never hurts. Your communication with the internet will be encrypted and protected from interception, preventing your data from being visible to unauthorized persons. You will be shopping and banking and should not risk losing money.
4. Update your antivirus
Some antiviruses use the Procon-SP list and other black lists to block access to fake, malicious websites that have already been reported as phishing scams. Check if yours is up to date with this information and update with the latest vaccines.
5. Check basic store information
In any situation (with or without Black Friday), check store information such as Corporate Name, CNPJ and address. The absence of data on the site may indicate a problem.