Researchers warn of a surge in malicious Amazon-themed domains exploiting the Prime Day shopping event, primarily through phishing emails and fake websites designed to steal consumer credentials and financial data. The threat leverages the high traffic and urgency of the sales period, with recent data showing a sharp increase in risky domain registrations. IT professionals should advise users to exercise extreme caution, verify URLs directly, and be wary of deals that appear too good to be true.
Phishing Amazon Prime Day fuels surge in malicious domains, researchers warn June 22, 2026 Share By SC Staff (Credit: Alexey Novikov – stock.adobe.com) As noted by Tech Radar, a significant increase in malicious Amazon-themed domains has been observed in the lead-up to the annual Prime Day sales event. This surge is attributed to cybercriminals seeking to exploit the high volume of shoppers and the urgency associated with limited-time deals. Check Point Research has identified 6,843 new Amazon-themed domains registered between December and May, with nearly 10% flagged as malicious or suspicious. The rate of risky domains increased in early June, with one in every 13 domains identified as potentially harmful. These domains are designed to mimic legitimate Amazon sites, employing tactics such as phishing emails, fake websites, and fraudulent offers to steal consumer data and financial information. Shoppers are advised to exercise extreme caution, verify URLs directly, avoid relying solely on search engine results, and be wary of deals that appear too good to be true. The researchers emphasize that major retail events create a "perfect storm" for cybercriminals by combining a trusted brand, time-sensitive urgency, and a large, motivated customer base. Source: Tech Radar SC Staff Related Phishing Malware campaign uses VirusTotal manipulation, legitimate news sites to gain reputation Laura French June 18, 2026 The clipboard hijacker campaign also uses “ghost networks” on social media to boost engagement. Phishing FBI warns of sophisticated Kali365 phishing service targeting Microsoft accounts SC Staff June 17, 2026 Coverage from Tech Radar indicates that a sophisticated phishing-as-a-service platform, known as Kali365, Octopi365, and Freedom365, is actively targeting Microsoft accounts. Phishing Summer vacation scams surge, targeting travel industry SC Staff June 17, 2026 Check Point Research reported that in May 2026, the hospitality, travel, and recreation sector faced an average of 2,291 weekly cyberattacks per organization, a 24% increase from the previous month and more than double the volume seen in May 2023. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds