Piece of news of the day

ADVANCED SECURITY EUROPA

EOOD

10 Digital Phishing Traps: Uncovering AliExpress-themed Cyber Threats

25 September 2026

Security researchers identified potential malicious .cyou domains weeks before they were registered and monitored them as they became entry points to a phishing site impersonating AliExpress.
The domains followed a specific format and were linked to a site promoting a fake shopping assistant browser extension.
The site had been flagged as malicious by security services prior to the domains going live.
Visitors were at risk of phishing attacks, credential theft, and exposure of personal information.
EfficientIP recommended blocking the domains and IPs, resetting credentials, and removing the extension for users who interacted with the site.
The .cyou domain itself does not guarantee a site is dangerous, but caution is advised.