Home 9 Latest News 9 Beware these common ‘malvertising’ attacks

Beware these common ‘malvertising’ attacks

Think about the last online ad you clicked…

Did you just assume it was genuine?

If you said yes, you’re not alone – and this is exactly what scammers are counting on.

“Malvertising”, or malicious advertising, is where scammers use online ads to trick you into downloading malware (malicious software), sharing sensitive information like passwords, or even handing over money.

These attacks are becoming more sophisticated, and they’re a growing threat to businesses of all sizes. Worse yet, you don’t even need to click on these ads to become a victim; just loading the ad in an out of date browser can be enough to compromise your device.

The three most common malvertising techniques are known as scam malvertising, fake installer malvertising, and drive-by download malvertising. Here’s a little more about them:

  • Scam malvertising is where an ad claims that your computer is infected and urges you to call for support. Once you do, the scammers convince you to install software that gives them control over your system. Then they charge you to “fix” the fake issue.
  • Fake installer malvertising often uses ads that lead you to cloned websites of brands you trust. You download software, thinking it’s legit… but, instead, you’re downloading malware onto your device.
  • Drive-by download malvertising is where ads infect your computer without you even clicking on anything. This type of malvertising exploits outdated browsers and installs malicious files or extensions automatically.

Recognising these scams is the first step to keeping your business safe. If you see an ad claiming you’ve been hacked or urgently need to act, stop and think: How would this company even know anything about your computer?

Also, make sure you double-check links before you click. If the link isn’t sending you to a legitimate domain, steer clear. And most importantly, make sure you’re running the latest version of your browser, as updates patch vulnerabilities that malvertising often exploits.

Don’t forget to share this knowledge with your employees, too. They’re your first line of defence – and training them to spot suspicious ads can save your business from serious trouble.

Scammers want you to trust without thinking. But a healthy dose of scepticism can make all the difference. Next time you see an ad that feels wrong, trust your gut… and ask yourself if it’s safe before you click.

Want to train your team to protect your business from malvertising and other online scams? We can help, get in touch.

Recent Posts

Cyber Security Is Not Your Job. Understanding Business Risk Is.

Cyber Security Is Not Your Job. Understanding Business Risk Is.

Many business owners switch off the moment cyber security enters the conversation. They picture firewalls, software updates, security alerts and technical jargon. It feels like something that belongs firmly in the hands of IT professionals. The reality is very...

Cyber Confidence Guide and checklist.

Cyber Confidence Guide and checklist.

Welcome to the Cyber Confidence Guide Cyber security is no longer just an IT concern. It is a business priority. Whether your organisation has five employees or five hundred, protecting your systems, data and people is essential to maintaining trust, productivity and...

The 30-Minute IT Health Check Every Small Business Should Do

The 30-Minute IT Health Check Every Small Business Should Do

The 30-Minute IT Health Check Every Small Business Should Do Monthly Most IT problems don't appear out of nowhere. Backups quietly stop running, updates sit unfinished for weeks and old staff accounts stay active long after someone has left the business. A simple...

What Are Passkeys, and Should Your Business Use Them?

What Are Passkeys, and Should Your Business Use Them?

Cybersecurity made simple Passkeys: The Safer, Simpler Way to Sign In Without Passwords Passwords have been causing businesses problems for years. They get reused, forgotten, guessed, leaked, written down, shared, and typed into fake login pages by mistake. Passkeys...

How are cyber attacks effecting your insurance?

How are cyber attacks effecting your insurance?

Cyber Insurance Renewal: What’s Changed and How to Avoid Claim Denial If your cyber insurance renewal feels harder this year, you’re not alone. Right now, many businesses are facing longer forms, tougher questions, and more pressure to prove their security. As a...

Could Someone Send Emails Pretending To Be Your Business

Could Someone Send Emails Pretending To Be Your Business

Cyber Security Guide Could Someone Send Emails Pretending To Be Your Business? Email spoofing is one of the simplest ways scammers can damage trust in your business. The good news is that three DNS records — SPF, DKIM and DMARC — can make it much harder for criminals...

Continuous Digital Transformation Partnerships

Continuous Digital Transformation Partnerships

Continuous Digital Transformation Partnerships Why outsourcing is no longer about handing work off, but moving forward together For many organisations, change never really stops. You upgrade one system, and another starts to fall behind. You move to the cloud, and...

5 Microsoft 365 Settings You Should Check Today

5 Microsoft 365 Settings You Should Check Today

5 Microsoft 365 Settings You Should Check Today (Especially if Your Setup Is a Few Years Old) If your Microsoft 365 system was set up a few years ago, there’s a good chance it’s not as secure as you think. Microsoft has improved security defaults over time. But those...

Could a Cyber Criminal Send Emails Pretending to Be You?

Could a Cyber Criminal Send Emails Pretending to Be You?

Could a Cyber Criminal Send Emails Pretending to Be Your Company Today? Imagine one of your customers receives an email from what appears to be your accounts department. The branding looks correct. The signature looks genuine. The email address seems legitimate. The...