The retail sector is under threat from… Gmail, WhatsApp and Google Drive?

Woman holding credit card and phone
(Image credit: Shutterstock)

Multiple malware and phishing scams are running rampant through apps such as WhatsApp, Gmail and Google Drive, affecting businnesses across the retail sector as the Black Friday/Cyber Monday shopping period approaches, new research has claimed.

In terms of malware downloads per industry, the retail sector topped the list for the amount downloaded through Gmail and Google Drive, edging out cloud storage giant Microsoft OneDrive which saw the most use in other sectors.

The most common mechanism to deliver malicious software through these apps are trojans which trick users into downloading further malware.

The report from Netskope Threat Labs examined how the retail sector compared to other industries in terms of cloud app adoption, cloud app abuse, and the types and quantity of malware delivery. 

It found that Google Drive, Gmail, and WhatsApp are among the top five most popular apps within the retail sector, with OneDrive claiming the top spot across all industries.

WhatsApp, designed for personal messaging, is being used by those in the retail section as a collaboration tool, posing huge risks to enterprises in terms of data leakage due to the ability for WhatsApp messages to be forwarded outside of an organization.

WhatsApp also sees the greatest delivery of malware and phishing attacks to those in the retail sector, with the app being downloaded three times more than other apps within the retail sector.

With the retail sector handling sensitive financial information, many of the malware delivered to those in the sector is aimed at stealing credit card information, banking details and personal information.

Overall Google Drive, Gmail and WhatsApp are used significantly more within the retail sector compared to other industries. Google Drive sees a usage of 34% within retail, compared to just 19% in other industries. The statistics are similar for Gmail, with 21% usage in retail compared to 13% in other industries.

WhatsApp’s usage within retail is 17%, with the usage in other industries sitting at just 5.9%. Peak trading times see malware downloads increase significantly within the retail sector, with attacks increasing towards the end of the year.

“Attackers abuse cloud apps to fly under the radar and evade traditional security controls that do not inspect cloud traffic,” advises Ray Canzanese, Director of Netskope Threat Labs. 

“As the holiday shopping season approaches, retail employees and consumers must both be extra vigilant, as phishing, credential theft, and malware activity related to retail tends to increase at the end of the year.”

More from TechRadar Pro

Benedict Collins
Staff Writer (Security)

Benedict has been writing about security issues for over 7 years, first focusing on geopolitics and international relations while at the University of Buckingham. During this time he studied BA Politics with Journalism, for which he received a second-class honours (upper division), then continuing his studies at a postgraduate level, achieving a distinction in MA Security, Intelligence and Diplomacy. Upon joining TechRadar Pro as a Staff Writer, Benedict transitioned his focus towards cybersecurity, exploring state-sponsored threat actors, malware, social engineering, and national security. Benedict is also an expert on B2B security products, including firewalls, antivirus, endpoint security, and password management.

Read more
NordVPN
US hit with over 1.9 billion malware threats last year - here's how to stay safe
Malware worm
Coordinated global mobile malware campaign targets banking apps and cryptocurrency platforms
An iPhone sitting on a wooden table
Millions at risk as malicious PDF files designed to steal your data are flooding SMS inboxes - how to stay safe
Concept art representing cybersecurity principles
Cybercriminals cashing in on holiday sales rush
A close-up photo of an iPhone, with the App Store icon prominent in the center of the image.
App stores are increasingly becoming a major security worry
Fraud
Hackers are tricking victims into scam-yourself attacks with fake tutorials, CAPTCHAs, and updates
Latest in Pro
Finger Presses Orange Button Domain Name Registration on Black Keyboard Background. Closeup View
I visited the world’s first registered .com domain – and you won’t believe what it’s offering today
Racks of servers inside a data center.
Modernizing data centers: an efficient path forward
Dr. Peter Zhou, President of Huawei Data Storage Product Line
Why AI commonization is so important for business intelligent transformation and what Huawei’s data storage has to offer
Wix automation
The world's leading website builder aims to save businesses time with new tool
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Latest in News
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 16 (game #1147)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Sunday, March 16 (game #378)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Sunday, March 16 (game #644)
Three iPhone 16 handsets on show
Apple could launch an iPhone 17 Ultra this year – but we've heard these rumors before
Super Mario Odyssey
ChatGPT is the ultimate gaming tool - here's 4 ways you can use AI to help with your next playthrough