Home 9 Latest News 9 Beware these common ‘malvertising’ attacks

Beware these common ‘malvertising’ attacks

Think about the last online ad you clicked…

Did you just assume it was genuine?

If you said yes, you’re not alone – and this is exactly what scammers are counting on.

“Malvertising”, or malicious advertising, is where scammers use online ads to trick you into downloading malware (malicious software), sharing sensitive information like passwords, or even handing over money.

These attacks are becoming more sophisticated, and they’re a growing threat to businesses of all sizes. Worse yet, you don’t even need to click on these ads to become a victim; just loading the ad in an out of date browser can be enough to compromise your device.

The three most common malvertising techniques are known as scam malvertising, fake installer malvertising, and drive-by download malvertising. Here’s a little more about them:

  • Scam malvertising is where an ad claims that your computer is infected and urges you to call for support. Once you do, the scammers convince you to install software that gives them control over your system. Then they charge you to “fix” the fake issue.
  • Fake installer malvertising often uses ads that lead you to cloned websites of brands you trust. You download software, thinking it’s legit… but, instead, you’re downloading malware onto your device.
  • Drive-by download malvertising is where ads infect your computer without you even clicking on anything. This type of malvertising exploits outdated browsers and installs malicious files or extensions automatically.

Recognising these scams is the first step to keeping your business safe. If you see an ad claiming you’ve been hacked or urgently need to act, stop and think: How would this company even know anything about your computer?

Also, make sure you double-check links before you click. If the link isn’t sending you to a legitimate domain, steer clear. And most importantly, make sure you’re running the latest version of your browser, as updates patch vulnerabilities that malvertising often exploits.

Don’t forget to share this knowledge with your employees, too. They’re your first line of defence – and training them to spot suspicious ads can save your business from serious trouble.

Scammers want you to trust without thinking. But a healthy dose of scepticism can make all the difference. Next time you see an ad that feels wrong, trust your gut… and ask yourself if it’s safe before you click.

Want to train your team to protect your business from malvertising and other online scams? We can help, get in touch.

Recent Posts

Messaging app scams are rising.

Messaging app scams are rising.

Messaging app scams are rising. Here’s what businesses need to know. Messaging app scams are becoming a growing risk for businesses of all sizes. Tools like WhatsApp, Microsoft Teams, Signal, and SMS are used every day to keep work moving, but criminals are now using...

Why Passwords Are Still Letting Businesses Down

Why Passwords Are Still Letting Businesses Down

Why Passwords Are Still Letting Businesses Down Most businesses still rely on passwords to protect their systems. However, that approach no longer fits the way people work. Some passwords are strong. Many aren’t. Worse still, people reuse most of them somewhere else....

The hidden cyber risk in everyday web habits

The hidden cyber risk in everyday web habits

The hidden cyber risk in everyday web habits Most cyber attacks don’t start with advanced hacking. They start with everyday behaviour that feels harmless at the time. When work and personal life share the same devices, browsers, and logins, small habits can quietly...

AI at Work: Why People Still Matter More Than Ever

AI at Work: Why People Still Matter More Than Ever

AI at Work: Why People Still Matter More Than Ever   The problem many businesses are feeling   Right now, a lot of people feel uneasy about AI at work. Some worry it might replace jobs. Others feel pressure to keep up with tools they do not fully understand....

Why Multi Factor Authentication isn’t enough!

Why Multi Factor Authentication isn’t enough!

Adversary‑in‑the‑Middle Attacks: Why MFA Alone Isn’t Enough You click a link, sign in, approve the MFA prompt, and get on with your day. Completely unaware that someone else just logged into your account at the same moment. That scenario surprises many organisations,...

AI in IT Operations and Automation

AI in IT Operations and Automation

AI in IT Operations and Automation: What’s Real and What’s Just Hype AI is everywhere right now. Every tool claims to be “AI‑powered”. Every vendor promises faster fixes, fewer issues, and smarter IT. It can all start to sound impressive and confusing at the same...

Why “break‑fix IT” costs more than managed support

Why “break‑fix IT” costs more than managed support

Why “break‑fix IT” costs more than managed support When something breaks, you call IT. When it’s fixed, you pay the bill. On the surface, break‑fix IT feels sensible. You only pay when you need help. No monthly commitment. No long contracts. It can feel like the...