Cybercriminals target holiday shoppers with malicious Black Friday apps

As Black Friday approaches, a new study has revealed that there are hundreds of potentially malicious Black Friday apps online targeting unsuspecting consumers.

RiskIQ's found that cybercriminals are taking advantage of these well-known brands to exploit the popularity of Black Friday and Cyber Monday shopping on the web and on mobile, as out of the 4,331 apps that show up after searching for “Black Friday”, more than five per cent were blacklisted as malicious.

Cybercriminals also appear to have focused their attention on the top five leading e-commerce brands and have created a combined total of 6,600 blacklisted apps containing the names of the brands in either their title or description.

Fake apps and websites

The company's 2018 Black Friday E-commerce Blacklist was compiled by analysing the results of keyword queries of its Global Blacklist and mobile app database for the most trafficked e-commerce brands during the Thanksgiving holiday. 

RiskIQ decided to release its report as an increasing number of consumers embrace the Thanksgiving tradition of searching for Black Friday bargains online. 

In 2017, online shoppers spent $19.6bn over Black Friday and Cyber Monday according to the Adobe Digital Index. Cybercriminals and fraudsters are looking to exploit this trend by setting up fake mobile apps and landing pages with fraudulent branding that they will use to lure consumers into downloading malicious apps and visiting other fraudulent or malicious sites.

Additionally, RiskIQ detected an average of 89,837 monthly instances of the digital credit card-skimmer magecart between August and October of this year.

Black Friday and Cyber Monday are an excellent opportunity to save while doing your holiday shopping but we recommend consumers do so carefully and securely by visiting known sites and using trusted apps.

Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Latest in Security
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple H3C Magic routers hit by critical severity remote command injection, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
Lock on Laptop Screen
Medusa ransomware is able to disable anti-malware tools, so be on your guard
Latest in News
An Apple Music pink/pixellated poster advertising DJ with Apple Music
DJ with Apple Music lands, allowing subscribers to build and mix DJ sets directly from its +100 million-song catalog
The Meta Quest 3 and controllers on their charging station which is itself on a wooden desk next to a lamp
Forget Android XR, I've got my eyes on Vivo's new Meta Quest 3 competitor as it could be the most important VR headset of 2025
Samsung Galaxy S25 from the front
The Now Bar on Samsung One UI 7 is about to get a lot more useful – and could soon match Live Activities on iOS
Marvel Rivals
Marvel Rivals will get two new hero skins for Moon Knight and Black Panther this week meaning I'll now need to farm even more Units
An iPhone running iOS 18 on a purple and blue background
iOS 18.4 could launch soon with a major upgrade to your iPhone’s notifications
Netflix Ads
Netflix adds HDR10+ support – great news for Samsung TV owners, but don't expect LG and Sony to do the same any time soon