spot_img

Date:

Share:

Kaspersky reports 6.4 million shopping phishing attempts and over 20 million gaming attacks detected in 2025

Kaspersky reports that in 2025, cybercriminals continued to use seasonal shopping periods to distribute phishing pages and fraudulent promotions aimed at collecting personal and payment information. Gaming platforms also remained a prominent target throughout the year.

Kaspersky Security Network (KSN) shows that from January through October 2025, the company blocked 6,394,854 phishing attempts impersonating online stores, banks, and payment systems, with 48.2% targeting online shoppers. Over the same period, Kaspersky identified more than 20 million attempted attacks on gaming platforms, including 18.56 million abusing Discord.

Black Friday-related promotional campaigns continued to play a major role. In the first two weeks of November, Kaspersky detected 146,535 spam emails referencing seasonal sales, including 2,572 tied to Single’s Day promotions. Many campaigns reused templates observed in previous years, imitating well-known retailers such as Amazon, Walmart and Alibaba, offering early-access discounts that direct users to fraudulent pages. An extensive phishing activity abusing entertainment platforms was also detected, with 801,148 Netflix-themed and 576,873 Spotify-related attempts recorded in 2025.

Threat activity extended well beyond e-commerce. In 2025, Kaspersky detected 2,054,336 phishing attempts impersonating gaming platforms such as Steam, PlayStation, and Xbox. Malware disguised as gaming software saw significant activity as well: 20,188,897attempted infections were recorded, with Discord accounting for 18,556,566 detections, more than 14 times higher than in 2024.

Kaspersky reports 6.4 million shopping phishing attempts and over 20 million gaming attacks detected in 2025

The number of attempted attacks on platforms beloved by gamers. 

“This year’s data shows that attackers increasingly operate across the full digital ecosystem,” said Olga Altukhova, Senior Web Content Analyst at Kaspersky. “They follow user activity across shopping platforms, gaming services, streaming apps, and communication tools, adapting their methods to blend into familiar environments. For consumers, this makes consistent vigilance and basic security hygiene essential, especially during periods of heightened online activity.”

While looking for the best offers it’s highly important to stay truly protected, so that shopping brings positive emotions and benefits, not financial losses and data leaks. Kaspersky Premium protects users from fraudulent online stores through advanced detection technology that analyses website characteristics and URLs to identify suspicious patterns. For its outstanding fake shops detection capabilities and excellent performance in AV-Comparatives Fake Shops Detection certification Kaspersky Premium was awarded an “Approved” certificate, making it the perfect choice for confident online shopping during the sales.

For more details see the article on Securelist.com.

To enjoy the best that Black Friday has to offer this year, be sure to follow a few safety recommendations:

  • Do not trust any links or attachments received by mail, double-check the sender before opening anything.
  • Double-check e-shop websites before filling out any information: is the URL correct? Are there any spelling errors or design bugs?
  • If you want to buy something from an unknown company, check reviews before making any decision.
  • Despite taking as many precautions as possible, you probably won’t know something is amiss until you see your bank or credit card statement. So, if you’re still getting paper statements, don’t wait until they hit your mailbox. Log in online to see if all of the charges look legitimate – if not, contact your bank or credit card company immediately to fix the situation.
spot_img
spot_img

━ More like this

Prevention alone won’t suffice for South African businesses; cyber resilience is the real defence

South Africa is no longer a bystander in the global cybercrime landscape but a primary target. A major ransomware attack earlier this year, in which a...

The accelerated 2029 quantum computing deadline turns current encryption into a looming crisis

The cybersecurity industry has long treated Q-Day – the point at which quantum computing shatters current encryption standards – as a distant, theoretical problem....

Adaptive Deepfake Detection Revolutionises Digital Fraud Prevention

Sumsub launches its upgraded deepfake detection solution with instant online self-learning updates, setting a new standard in catching sophisticated fraud online Sumsub, a leading full-cycle verification...

Commentary: Strengthening digital defences ahead of World Password Day

With World Password Day approaching on 7 May, ManageEngine South Africa is highlighting the importance of stronger password practises as cyber risks continue to...

Phishing in the age of AI – why the human firewall matters more than ever

Cybersecurity has long been a game of cat and mouse, with attackers innovating just as quickly as defenders can adapt. But in recent years,...
spot_img