- NordVPN’s researchers saw more than 100,000 malicious sites with an Amazon theme
- Besides phishing for credentials, crook people fools to make fake purchases
- Consumers are advised of caution during first -class day
Hackers have created thousands of fake sites by using them to steal login -credentials, fool people to download malware, or make fake purchases ahead of this year’s Amazon Prime Day.
A new report from NordVPN’s threat protection project has called on consumers to be extra vigilant, claiming to have observed more than 120,000 malware, phishing and scam -sites supported in the last two months, with falsified Amazon.
Of this number, there were 92,000 phishing sites, 21,000 malware -distribution sites and 11,000 fake goods.
Perfect storms
“Larger shopping events such as Prime Day create perfect storms for cyber criminals. Scammers know that shopping’s excitement and urgent character about limited offerings makes them more susceptible to clicking on malicious links or sharing personal information without proper verification,” said Marijus Biedis, NordVPN’s CTO.
“People need to maintain good cyber hygiene, even when looking for the best deals.”
While stealing login credentials remains a key target for many scammers, one thing is growing increasingly popular – and fooling people to make unauthorized payments. Apparently this rose from 28% in April to 38% today and is “the highest reported target.”
Events like Amazon Prime Day, Black Friday or Cyber Monday remain key datos when cyber criminals increase their activity.
Amazon Prime Day is an important annual shopping event where Retail Behemoth only offers exclusive offers and discounts for Prime members. It typically runs for two days, but this year it will be four days long.
While this may be good for consumers, it is even better for scammers who will definitely look to take advantage of the change, the researchers warned.
During Amazon’s Big Spring Sale Week, which took place between March 31 and April 7, 2025, malicious activity was “exploded”, Nordvpn said, comparing the data with the week before.
“Malware -Webares rose by 1,661%, phishing -sites increased by 1,294%, and scams Skyrocket by 8,325%,” it was said.
Seeing a fake site can sometimes be difficult, but often there are gifts – especially keep an eye on obvious spelling mistakes in URLs or headlines – “Amazom.com” for example. And remember, a good rule of thumb is always that if a deal looks good to be true, there is a decent chance that it is.
If you are worried, you may have been caught by a fake place, don’t worry – there are a number of methods to find out. Do i have? is probably the best resource only to check if your details have been affected, offering a wear and tear of any major cyber event in the last few years.
You also need to make sure your devices have the best antivirus tools offered to keep you protected, along with the best firewall and best final point protective software.



