One and a half million fake websites and listings, scammers who can already see what you type in real time, and exploiting the family names of the kidnapped: 2016 was characterized by the expansion of the phishing phenomenon and the increasing sophistication of cyber scammers.
Data from Israeli cyber company BrandShield reveals the scope of the phenomenon - and the new fraud schemes that are being operated using AI.
The company's data presents a worrying picture: throughout the year, the company detected over a million and a half fraudulent domains, including 10,395 fake listings related to El Al and 1,165 listings for selling products while impersonating the headquarters of the kidnapped families.
More than 10,000 fake domains and websites related to FIFA were also found worldwide in preparation for the 2026 World Cup, as well as 4,800 registrations impersonating Elon Musk.
Big brands have also become a major target: 5,878 fake or suspicious domains were detected around Omega, alongside 5,134 related to Nike, 4,987 to Labubu, and 4,041 to iPhone.
""Attackers go where the public trust is," says Yoav Keren, CEO of BrandShield. "It could be a government agency, an airline, a well-known brand or a famous person. The more well-known the name, the easier it is to make the victim believe that the appeal is genuine.".
At the same time, the fraud methods have also become more sophisticated. For example, in a campaign that pretended to be the 'Israel Traffic Authority', SMS messages were sent about a debt of 100 shekels for a traffic fine. The system behind the site allowed the attackers to see in real time the details that the victim was typing, even before he clicked 'send', and to track his actions during the fraud.
A test conducted by BrandShield found that using AI tools and website builders, it is possible to set up a fake business that looks real in about five minutes - with a name, logo, staff, recommendations, photos, and a phone number.
This way, you can quickly create websites in any field, from banks and government companies to plumbers and locksmiths, and use them to collect personal information or charge for a service that will not be provided.
"""AI mainly changes the scale," says Keren. "What used to require knowledge, time and money can now be produced in minutes and replicated over and over again.".
During the year, BrandShield also uncovered a network operating out of Hong Kong and operating websites selling counterfeit medicines around the world while impersonating health authorities. According to Keren, the combination of AI, rapid website development, and systems that allow for real-time fraud management is expected to make tackling the phenomenon even more complex in the coming year.
