Researchers observed an increase in fraudulent websites using local events and occasions, such as Amazon Prime Day, and the presidential election to lure the victims.In Q3, there has been a significant change in the sectors targeted by cybercriminal activity. The attackers have become more focused on e-commerce services (accounting for 34.70% of domains), followed by IT and telecom (22.20%), and product and mining (13.90%).According to Bolster, approximately 4,000 new phishing and fraudulent websites are created every month using the top 10 brands including Microsoft, Apple, and PayPal, among others.
It's fairly easy to setup a phishing website if you have someone's IP or ISP, you can forward the data they send on the real website to you. There is a lot of other ways to do phishing attacks on websites and people.