Beware these common ‘malvertising’ attacks

Beware these common ‘malvertising’ attacks

Think about the last online ad you clicked…

Did you just assume it was genuine?

If you said yes, you’re not alone – and this is exactly what scammers are counting on.

“Malvertising”, or malicious advertising, is where scammers use online ads to trick you into downloading malware (malicious software), sharing sensitive information like passwords, or even handing over money.

These attacks are becoming more sophisticated, and they’re a growing threat to businesses of all sizes. Worse yet, you don’t even need to click on these ads to become a victim; just loading the ad in an out of date browser can be enough to compromise your device.

The three most common malvertising techniques are known as scam malvertising, fake installer malvertising, and drive-by download malvertising. Here’s a little more about them:

  • Scam malvertising is where an ad claims that your computer is infected and urges you to call for support. Once you do, the scammers convince you to install software that gives them control over your system. Then they charge you to “fix” the fake issue.
  • Fake installer malvertising often uses ads that lead you to cloned websites of brands you trust. You download software, thinking it’s legit… but, instead, you’re downloading malware onto your device.
  • Drive-by download malvertising is where ads infect your computer without you even clicking on anything. This type of malvertising exploits outdated browsers and installs malicious files or extensions automatically.

Recognising these scams is the first step to keeping your business safe. If you see an ad claiming you’ve been hacked or urgently need to act, stop and think: How would this company even know anything about your computer?

Also, make sure you double-check links before you click. If the link isn’t sending you to a legitimate domain, steer clear. And most importantly, make sure you’re running the latest version of your browser, as updates patch vulnerabilities that malvertising often exploits.

Don’t forget to share this knowledge with your employees, too. They’re your first line of defence – and training them to spot suspicious ads can save your business from serious trouble.

Scammers want you to trust without thinking. But a healthy dose of scepticism can make all the difference. Next time you see an ad that feels wrong, trust your gut… and ask yourself if it’s safe before you click.

Want to train your team to protect your business from malvertising and other online scams? We can help, get in touch.

How to create secure passwords

How to create secure passwords

Weak passwords are one of the biggest security risks to your business.

Why?

Because cyber criminals are getting smarter than ever before. If they manage to crack just one password, they could gain access to your sensitive business data, financial information, or even gain control of your entire system.

Cyber criminals use automated tools to guess passwords, allowing them to try out millions of combinations in seconds. So, if you’re using something like “Password123” or “CompanyName2025”, you’re practically handing them the keys to your business.

A compromised password can lead to big issues, such as:

  • Data breaches
  • Financial losses
  • Identity theft
  • Reputation damage

But how do you create strong passwords without driving yourself (and your team) mad?

Think of your password like a secret recipe, where only you should know the ingredients. It should:

  • Be at least 14 characters long (the longer, the better)
  • Include a mix of uppercase and lowercase letters
  • Contain a few numbers and symbols (like @, $, %, or &)
  • Not contain any common words or easily guessable information (like birthdays, names, or the word “password”)

Instead of using a single word, you could try a passphrase – a short, random sentence that only you would understand. For example, instead of “Sailing2025”, try something like “Coffee&CloudsAreGreat9!”. This is much harder to crack, yet still easy to remember.

You should also steer clear of these common mistakes:

  • Using personal info (your name, birthday, business name, etc.)
  • Reusing the same passwords across multiple accounts
  • Using simple sequences (“123456” or “abcdef”)
  • Storing passwords in an easily accessible place (like a sticky note on your desk)

If remembering unique passwords for every account sounds impossible, there is another option: Password managers. These generate strong passwords, store them securely and autofill them for you.

With a password manager, you only need to remember one strong master password for the manager app itself. The rest are encrypted and stored safely, reducing the risk of data breaches.

Even the strongest password isn’t foolproof, which is why multi-factor authentication (MFA) is also important. MFA requires a second form of verification, like a one-time code sent to your phone or generated from an authentication app.

If you have employees accessing your business systems, it’s a good idea to have a password policy in place to explain your rules and why they’re important. This should include:

  • Unique passwords for each system and account
  • Regular security training on password best practices
  • Business-wide use of MFA for critical systems
  • Scanning for compromised passwords regularly

By making password security a priority, you can reduce the chances of a cyber attack creating a nightmare for your business.

And if you need help making your business more secure, get in touch.

Businesses are taking too long to fix vulnerabilities

Businesses are taking too long to fix vulnerabilities

Imagine you’re watching the news and see that a criminal is targeting houses in your area.

Would you leave your front door unlocked tonight?

I wouldn’t think so.

Yet this is essentially what many businesses do when they put off fixing vulnerabilities in their systems. And it happens a lot, with over two-thirds of businesses taking more than 24 hours to address serious security issues.

This is a worrying statistic. Because the longer vulnerabilities remain open, the greater the risk of cyber attacks, data breaches, and major disruptions.

So, what exactly is a vulnerability?

In simple terms, it’s a weakness in your system (like outdated software or misconfigured security settings) that cyber criminals can use to gain access to your business data. These weaknesses are often flagged by security tools. But responding to them fast enough is where many businesses fall short.

Many businesses have IT staff. But they can get bogged down by manual processes, wasting hours trying to make sense of incomplete data or juggling multiple tools that don’t talk to each other. This slows down response times and increases costs… while your business remains exposed.

The problem is this: Every hour a vulnerability is left unaddressed is another hour cyber criminals have to exploit it.

Luckily, there’s an easy solution. Partnering with a reliable IT support provider can make things easier. Instead of your team scrambling to identify and patch vulnerabilities, an expert technology partner (like us) can step in with smarter tools and faster processes. We combine automation and expertise to identify risks, prioritise what needs fixing, and respond quickly to make sure your systems are secure.

Cyber criminals are always looking for ways to exploit weaknesses. Don’t give them the chance.

If keeping on top of vulnerabilities feels overwhelming, let us make it simple for you. Get in touch.

Employees are falling for 3x more phishing scams

Employees are falling for 3x more phishing scams

Have you ever stopped to wonder how many phishing scams your employees encounter each day? The answer might come as a nasty surprise.

Last year, the number of employees clicking on phishing links TRIPLED – and businesses everywhere are paying the price.

Before we dive into this situation a little more, let’s rewind a bit.

Phishing is where scammers try to steal sensitive information (like passwords or payment details) by pretending to be a trusted source.

Maybe your employee gets an email that looks like it’s from Microsoft, with a link to a login page. Once your employee enters their details, that information falls right into the hands of criminals… and from this, they get the keys to your business.

Here’s the really worrying part: Phishing attacks aren’t just happening more often, they’re getting harder to spot, too.

Email phishing is still a big issue, but scammers are branching out; planting fake links in search engines, social media, online ads, and website comments. Scammers know that employees are taught to be cautious about emails, so they’re finding new ways to slip through the cracks.

So, why are more people falling for these scams?

Part of the problem is fatigue. Employees see so many phishing attempts in their inboxes, it’s difficult to keep their guard up every minute of the day. Scammers are also getting more creative, using fake websites and emails that are almost impossible to tell apart from the real thing.

And they’re now targeting trusted platforms like Microsoft 365, which hold a goldmine of business data.

Your people can either be your greatest defence or your biggest vulnerability. A well-trained, alert team can spot phishing attempts before any damage is done. But if they’re unaware or unprepared, a single click can open the door to financial losses, stolen data, and a whole world of trouble for your business.

So, what’s the solution?

Start with education. Make sure your team knows what phishing looks like, not just in emails but across the web. Teach them to question unexpected requests for their login details, double-check links, and report anything suspicious. And don’t rely on memory alone; regular training sessions can keep the risk of phishing scams fresh in your employees’ minds.

At the same time, don’t leave all the responsibility on your team’s shoulders. Tools like multi-factor authentication (MFA) add an extra layer of security, so even if a password does get stolen, attackers can’t get in. Combine this with up-to-date software and a strong cyber security plan, and you’ve got a much better chance of keeping your business safe.

Phishing scams aren’t going away any time soon, but with the right approach, you can stop your business from becoming another statistic.

Need help protecting your business data? We can help – get in touch.

Warning: Don’t ignore hardware requirements for Windows 11

Warning: Don’t ignore hardware requirements for Windows 11

So, you’ve gone ahead and upgraded to Windows 11. You’re ready to explore the fresh design and all the new features. But instead of smooth sailing, your computer slows to a crawl… random errors start popping up… and you can’t install any security updates…

That’s the nightmare faced by businesses that try to run Windows 11 on unsupported hardware.

Hardware requirements are a checklist you should use to make sure your business devices can handle an upgrade.

Think of it like a recipe: If you’re missing a key ingredient, the dish won’t turn out quite right. And while you might like to improvise in the kitchen, it’s better not to risk it with your business tech.

Windows 11 brings a leap forward in both performance and security. If you want to make that jump, you need a solid foundation in the form of modern hardware that can support its advanced features.

One of the key requirements for Windows 11 is something called TPM 2.0. This is a small chip that acts like a security vault for your PC, locking away passwords, encryption keys, and other sensitive data. TPM 2.0 is also essential for preventing certain types of cyber attacks. Without it, your system is more vulnerable.

Other requirements – like enough memory (RAM), sufficient storage, and a compatible processor – help to make sure your device can run Windows 11 smoothly.

Microsoft has warned that forcing Windows 11 onto unsupported hardware is a risky move. Sure, you can do it – but you’ll be on your own if things go wrong. Your device won’t receive updates, including critical security patches that keep your systems safe from cyber attacks and other threats. Without updates, your business’s devices become an easy target.

So, you might be thinking – why not just stick with Windows 10?

Here’s the thing: Microsoft is ending free support for Windows 10 in October this year. After that…

  • No more updates
  • No more fixes
  • And no more free security patches.

There is an option to pay for extended security updates, but it’s not a permanent solution. Upgrading to Windows 11 helps to make sure your systems stay secure for the long haul, without extra costs and headaches down the line. And beyond the security benefits, Windows 11 comes with loads of productivity tools designed to make your business run more smoothly.

If upgrading your hardware feels like an unnecessary expense, think of it as an investment. Modern devices don’t just meet Windows 11’s requirements; they run faster, last longer, and reduce the risk of downtime.

The bottom line is that hardware requirements aren’t just suggestions – they’re there to protect your business and give your team the tools they need to succeed.

If your devices don’t meet Windows 11’s requirements, now is the time to plan your next steps. Don’t wait until Windows 10 support ends or your systems become a security risk for your business.

We can help you upgrade without the stress. Get in touch.

5 Things to Think About When Planning an Office Move

5 things to think about - office move

Relocating your business can be an exciting step forward, but it also comes with a lot of logistical challenges. A well-planned office move ensures minimal disruption and a smooth transition for your team. Here are five key things to consider:

  1. Plan Early
    An office move is a significant project that requires careful planning. Set a clear timeline, allocate responsibilities, and factor in unexpected delays to avoid last-minute stress.
  2. Budget Smartly
    Moving costs can add up quickly. Consider expenses such as removal services, IT and telecoms setup, office redesign, and potential downtime. Budgeting effectively will help prevent unexpected costs.
  3. Inform People it Effects
    Keep employees, clients, suppliers, and service providers informed well in advance. Ensure they are aware of key dates and how the move may impact business operations.
  4.  IT and Telecoms Infrastructure
    A seamless transition of IT and telecoms is crucial for business continuity. Work with professionals like Bluebox-i to ensure systems are migrated securely and efficiently.
  5. Test Before You Move
    Before fully relocating, test essential systems such as internet connectivity, phone lines, and IT networks at the new site. This helps identify and resolve potential issues before they disrupt operations.

A smooth office move is all about preparation. With the right plan in place, you can transition seamlessly into your new space with minimal disruption. For expert IT and telecoms support, Bluebox-i is here to help. You can call us on 01204 221101 or book a no-obligation chat with our communications expert, Martin Fletcher, today.

Bluebox-i provides IT and telecoms support to over 600 businesses across the North West. Our flexible 30-day contracts gives you the flexibility to up or downscale according to your organisation’s needs – an ideal solution if your business is going through a period of transition, such as moving premises.