According to the Carbon Black Threat Analysis Unit (TAU), the majority of these attempted holiday-related cyberattacks are the result of commodity malware, commonly delivered through spear-phishing campaigns.
In recent years attacks targeting major retailers (often through supply chain partners) have resulted in the loss of millions of customer records and credit card numbers as well as major breach costs for targeted organisations.