Amazon Prime Day triggers surge in cybercriminal activity

Cybercriminals are significantly increasing activity ahead of Amazon’s Prime Big Deal Days. According to a report from Check Point Research, the number of newly registered domains linked to Amazon and Prime Day rose by 42 percent between July and September, reaching 1,284 registrations.

Approximately 6.5 percent of these new domains—roughly one in every 16—were classified as malicious or suspicious. These fraudulent sites often mimic Amazon Prime to steal login credentials, payment details, and personal information. Attackers are also utilizing phishing campaigns via email, using deceptive messages regarding gift cards or account locks to create a sense of urgency.

The use of generative AI has made these scams harder to detect, as attackers can now produce highly convincing, error-free websites and messages in multiple languages. Beyond individual consumers, the report notes an uptick in attacks targeting the financial sector and consumer goods companies that manage high transaction volumes during major shopping events.