Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

Hacking Black Friday: using LLMs to save on the “sale of the year” | Kaspersky official blog

0
Medium
Vulnerability
Published: Wed Nov 19 2025 (11/19/2025, 13:00:51 UTC)
Source: Kaspersky Security Blog

Description

This blog post from Kaspersky discusses how large language models (LLMs) like ChatGPT can be used by consumers to detect deceptive pricing tactics during Black Friday sales, such as artificial price inflation followed by misleading discounts. It highlights how AI can analyze price histories, compare alternatives, and vet sellers to avoid scams. The post is educational and advisory, focusing on consumer protection rather than describing a direct cybersecurity threat or vulnerability. It does not describe an exploit or vulnerability affecting systems or networks, nor does it present a threat actor or attack vector. Instead, it promotes the use of AI tools to mitigate risks associated with fraudulent online retail practices during sales events.

AI-Powered Analysis

AILast updated: 11/19/2025, 13:06:56 UTC

Technical Analysis

The provided content is a detailed Kaspersky blog article explaining how consumers can leverage AI-powered large language models (LLMs) to navigate Black Friday sales more safely and effectively. It outlines common deceptive retail tactics, such as artificially inflating prices before sales to create the illusion of large discounts, which can mislead buyers. The article describes step-by-step methods to use LLMs for creating shopping lists, tracking price histories with third-party tools, analyzing price dynamics to detect manipulation, finding alternative products, and vetting sellers for legitimacy. It also provides tailored prompts for different LLMs (ChatGPT, Claude, Gemini) to maximize their utility in shopping decisions. The blog emphasizes that while AI can help consumers avoid scams and make rational purchasing decisions, users should still maintain cybersecurity hygiene to avoid phishing and malware risks. Importantly, the article does not describe a technical vulnerability or exploit affecting software or hardware systems, but rather focuses on consumer fraud and the use of AI as a defensive tool against it.

Potential Impact

Since this content does not describe a direct cybersecurity vulnerability or threat to IT infrastructure, the impact on European organizations is minimal from a technical security perspective. However, the underlying issue of deceptive pricing and fraudulent online stores during major sales events like Black Friday can lead to financial losses and reputational damage for European consumers and businesses. Retailers engaging in misleading pricing tactics risk regulatory penalties under EU consumer protection laws such as the Omnibus Directive. Additionally, the rise in fake online stores during sales periods increases the risk of phishing, fraud, and potential malware infections for consumers, which could indirectly affect organizations if employees fall victim. The advisory nature of the content encourages better consumer awareness and use of AI tools to reduce financial fraud risks, which can benefit European markets by promoting safer e-commerce practices.

Mitigation Recommendations

While the blog primarily targets consumers, European organizations can adopt several practical measures to mitigate risks related to fraudulent online sales and deceptive pricing: 1) Educate employees and customers about common retail scams and the use of AI tools to verify genuine discounts and seller legitimacy. 2) Encourage the use of reputable price-tracking services (e.g., CamelCamelCamel, Keepa) and AI assistants to analyze price histories before purchases. 3) Implement internal policies to avoid impulse buying during sales and promote critical evaluation of offers. 4) Monitor and report suspicious online stores to regulatory authorities to help enforce consumer protection laws. 5) Deploy advanced endpoint security solutions to detect phishing and malware that may be delivered via scam websites or emails during sales events. 6) For retailers, ensure compliance with EU pricing transparency regulations and maintain clear, honest pricing to build consumer trust. 7) Leverage AI internally to monitor e-commerce platforms for fraudulent sellers or suspicious pricing patterns. These steps go beyond generic advice by integrating AI-assisted verification and regulatory compliance focus.

Need more detailed analysis?Get Pro

Technical Details

Article Source
{"url":"https://www.kaspersky.com/blog/black-friday-ai-assistance/54798/","fetched":true,"fetchedAt":"2025-11-19T13:06:45.233Z","wordCount":2227}

Threat ID: 691dc0e50d9a5150f8c7142d

Added to database: 11/19/2025, 1:06:45 PM

Last enriched: 11/19/2025, 1:06:56 PM

Last updated: 11/19/2025, 2:25:57 PM

Views: 4

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need enhanced features?

Contact root@offseq.com for Pro access with improved analysis and higher rate limits.

Latest Threats