A silent digital pickpocket is targeting Amazon shoppers. This time, the threat isn’t package thieves on your porch. It’s a highly targeted malware campaign lurking inside compromised web browsers, quietly siphoning off money before victims even realize they’ve been hit.
Claim Free Amazon Gift Card here
Security researchers recently discovered a new class of malicious software engineered to drain Amazon gift card balances. Unlike typical cyberattacks that aim for bank accounts or credit card numbers, this malware operates entirely within the Amazon ecosystem. It targets the small, often-forgotten pool of cash sitting in digital wallets.
The Micro-Transaction Loophole
Most hackers go for big, flashy scores. They buy expensive electronics or high-end gift cards, which immediately trigger fraud prevention systems. This new malware takes a far more patient approach. Security analysts have dubbed the technique “balance-siphoning.”
Once the malware gains access to an active Amazon session, it doesn’t buy a new television. Instead, it initiates a series of rapid, automated micro-transactions. It purchases cheap digital goods like e-books, digital music, or low-cost in-game currency. Each transaction usually ranges from $0.99 to $2.99. Because these purchases are tiny, they bypass standard fraud detection algorithms.
These digital purchases are not random. The malware directs the funds to specific seller accounts controlled by the cybercriminals. In essence, they are using Amazon’s digital marketplace to launder the stolen gift balances directly into cash.
How the Malware Infects Devices
The attack begins long before Amazon is even opened. Cybersecurity firm Vanguard Cyber Security first spotted the threat, identifying that it primarily spreads through compromised browser extensions. Users often download these extensions thinking they are helpful shopping assistants, ad-blockers, or coupon finders.
Once installed, the malicious code waits. It does not steal passwords. Instead, it steals session cookies. When a user logs into Amazon, the malware hijacks that authenticated session, allowing the attackers to act as the user without needing to bypass two-factor authentication.
“It is incredibly sneaky,” said Sarah Jenkins, a lead threat researcher who analyzed the malware. “The victim has already completed the security handshake. The malware simply hitches a ride on their active session. To Amazon’s servers, the micro-transactions look like the actual user buying a cheap e-book.”
Why It Is Hard to Detect
Most consumers rarely monitor their Amazon gift card balance. They load a gift card, spend most of it, and leave a small remainder sitting in their account. Because the malware only steals these leftover balances, and does so in tiny increments, the theft often goes unnoticed for months.
Furthermore, because no credit cards or bank accounts are directly charged during these transactions, users do not receive fraud alerts from their banks. The only paper trail is a series of digital order confirmations sent via email. Many users simply mistake these notifications for spam or overlook them entirely.
Protecting Your Amazon Account
Securing your digital wallet requires a few shifts in your online habits. Security experts recommend taking several immediate steps to lock down your accounts:
- Audit your browser extensions: Regularly review and remove any browser extensions you do not recognize or no longer use. Stick to well-known developers.
- Check digital order history: Do not just look at your main Amazon order history. Manually check the “Digital Orders” tab to ensure no unauthorized e-books or software have been purchased.
- Clear active sessions: Log out of your Amazon account periodically. This destroys active session cookies, forcing a fresh login and cutting off hijacked sessions.
- Set up login notifications: Enable real-time alerts for any new device login attempts on your Amazon account.
As the holiday shopping season approaches, security teams warn that these quiet campaigns are likely to scale up. Keeping a close eye on your digital change purse might be the only way to keep these silent thieves at bay.