The cybersecurity watchdog said users were being targeted through fake messages that claim to contain festive offers, but this ultimately leads users to suspicious websites that can potentially steal sensitive data like bank account details, passwords and One-Time Passwords.