During the 2012 holidays, PayPal's website was the most phished, with it receiving nine times more phishing sites than the next closest site. According to data by Trend Micro, PayPal had 18,947 phishing sites created during December 2012. Wells Fargo, the second place site, only had 2049, a far cry from PayPal.
Trend Micro says shopping online, while more convenient, puts you at a much greater risk of having your personal information stolen. Often, these phishing sites install malware onto the unlucky user's system. This year's malware for the PayPal sites was TROJ_QHOST.EQ, while Citibank sites infected users with WORM_CRIDEX.CTS.