Phishing at Temu, AliExpress, Wish & Co.
Fraud trap online marketplaceMore and more people are using non-European online marketplaces such as Temu, Wish and AliExpress because they offer both practical and economic advantages. However, in addition to problems such as longer shipping times and the risk of counterfeit or inferior products, the threat of cyberattacks in the form of spam, phishing and malware is constantly growing.
Why are these online stores so attractive to cyber criminals in the first place? And how do consumers protect themselves against phishing attacks and other threats via e-mail?
The challenge with Temu and AliExpress
Both Temu and AliExpress are huge online marketplaces with millions of registered users and countless transactions every day. This size and reach make them attractive for spam and phishing attacks. Fraudsters use the popularity and trust that these platforms enjoy to deceive potential victims.
How does the phishing problem manifest itself?
Spam emails claiming to be from Temu or AliExpress may ask you to click on suspicious links to be redirected to fake websites. These websites then try to intercept personal information or download malware onto the user’s computer.
Phishing attacks are often more subtle. For example, they contain fake order confirmations or delivery notifications designed to trick the user into clicking on links or opening attachments that are then used to steal sensitive information.
The State Criminal Police Office of Lower Saxony reported fake Temu delivery notifications as early as 2023: Fake Temu delivery notification – RATGEBER INTERNETKRIMINALITÄT (polizei-praevention.de)
Why are non-European online stores so attractive to cyber criminals?
Non-European online shopping platforms such as Temu and AliExpress are particularly attractive to cyber criminals for various reasons. We have summarized the most important ones for you.
Large user base
The platforms have an enormous number of users from all over the world, which makes them a potentially lucrative target for cybercriminals. The simple equation: with a large user base, the probability that a fraudulent attack will be successful also increases.
Variety of products
Temu and AliExpress offer a wide range of products from various categories, including electronics, clothing, jewelry, household goods and more. This makes them attractive to fraudsters who want to sell counterfeit or inferior products.
International transactions
As these platforms serve the global market, the majority of transactions are international, making it more difficult to track and combat fraudulent activity.
Anonymity
The relative anonymity offered by online platforms invites cybercriminals to engage in fraudulent activities, as they are difficult to identify and hold accountable.
Lack of regulation
Compared to some more established and strictly regulated e-commerce platforms, non-European platforms such as Temu and AliExpress may have less stringent security and monitoring mechanisms. This makes it easier for cybercriminals to carry out their activities without being detected.
Popular with bargain hunters
The often low prices on these platforms attract bargain hunters looking for good deals. Fraudsters exploit this by offering counterfeit or inferior products at attractive prices to lure in unknowing customers.
How can consumers protect themselves?
As a consumer, however, you are not defenceless against cyber attacks on AliExpress and Temu. Here are the most effective measures against fraudulent e-mails.
Be vigilant
If you are unsure whether an email or message is from Temu or AliExpress, go directly to the official website and check your account or orders there.
Use secure payment methods
Avoid passing on sensitive information via insecure channels and preferably use secure payment methods such as PayPal or credit cards with fraud protection.
Keep your software up to date
Make sure your computer or mobile device has the latest security updates to protect yourself from malware attacks.
Use a professional e-mail security solution
eXpurgate is a professional email security software that protects companies against all email-based threats. Dangers such as spam, phishing and malware are effectively warded off before they can infiltrate your mailboxes.
Conclusion
Overall, it is important to be aware of potential threats and take proactive measures to protect yourself. With proper attention, the use of good security practices and the help of efficient email security software, nothing stands in the way of a safe online shopping experience on platforms such as Temu and AliExpress.
More news
Social engineering – 6 tips on how companies can protect themselves
No matter how good the technical security precautions in companies are: The human factor is often the weakest link in the security chain. In social engineering, cyber criminals exploit this potential vulnerability by faking a personal relationship with the victim in order to carry out their criminal activities. How do you recognize social engineering and how can companies protect themselves and their employees?
Critical Outlook vulnerability discovered (February 2024)
In February 2024, security researchers discovered a vulnerability in Microsoft Outlook and classified it as critical. You can read everything you need to know as a user here.
Bitcoin Halving 2024 : Danger from phishing mails on the rise
More and more cases of crypto phishing! The reason is the high Bitcoin price and the upcoming Bitcoin Halving 2024.
Digital document management system – Find out everything you need to know about DMS.
The efficient management of digital documents is a necessity in the modern working world. A digital document management system (or “DMS” for short) is therefore becoming a must-have for companies – and not just for corporations, but also for SMEs. In this article, you will find out what a digital document management system actually is, what functions it fulfills and what advantages it can offer your company.
Managed IT services: Is it worth it for my company? Can I simply outsource my IT?
Managing and monitoring their IT poses challenges for many companies. There is a lack of resources to set up an in-house support team that is up to the task. Managed IT services offer one solution, with external specialists taking over individual IT sub-areas through to complete IT operations. Find out here what Managed IT Services actually are, what advantages they offer and whether the model is also worthwhile for you.