Beware these common ‘malvertising' attacks

The Orbital10 Team • 11 March 2025

Think about the last online ad you clicked…

 

Did you just assume it was genuine?

 

If you said yes, you’re not alone – and this is exactly what scammers are counting on.

“Malvertising”, or malicious advertising, is where scammers use online ads to trick you into downloading malware (malicious software), sharing sensitive information like passwords, or even handing over money.

 

These attacks are becoming more sophisticated, and they’re a growing threat to businesses of all sizes. Worse yet, you don’t even need to click on these ads to become a victim; just loading the ad in an out of date browser can be enough to compromise your device.

 

The three most common malvertising techniques are known as scam malvertising, fake installer malvertising, and drive-by download malvertising. Here’s a little more about them:

 

·        Scam malvertising is where an ad claims that your computer is infected and urges you to call for support. Once you do, the scammers convince you to install software that gives them control over your system. Then they charge you to “fix” the fake issue.

 

·        Fake installer malvertising often uses ads that lead you to cloned websites of brands you trust. You download software, thinking it’s legit… but, instead, you’re downloading malware onto your device.

 

·        Drive-by download malvertising is where ads infect your computer without you even clicking on anything. This type of malvertising exploits outdated browsers and installs malicious files or extensions automatically.

 

Recognising these scams is the first step to keeping your business safe. If you see an ad claiming you’ve been hacked or urgently need to act, stop and think: How would this company even know anything about your computer?

 

Also, make sure you double-check links before you click. If the link isn’t sending you to a legitimate domain, steer clear. And most importantly, make sure you’re running the latest version of your browser, as updates patch vulnerabilities that malvertising often exploits.

 

Don’t forget to share this knowledge with your employees, too. They’re your first line of defence – and training them to spot suspicious ads can save your business from serious trouble.

 

Scammers want you to trust without thinking. But a healthy dose of scepticism can make all the difference. Next time you see an ad that feels wrong, trust your gut… and ask yourself if it’s safe before you click.

 

Want to train your team to protect your business from malvertising and other online scams? We can help, get in touch >

Some typing on a laptop with backup clouds dotted around
by The Orbital10 Team 11 June 2025
Ransomware is evolving — and it’s coming for your backups. With attacks at an all-time high, your last line of defence needs to be bulletproof. Discover how immutable backup storage can keep your business protected, even when attackers get in.
A post it note with 'password qwerty' written on it
by The Orbital10 Team 11 June 2025
Weak passwords are still one of the biggest risks to your business – and attackers know it. From “123456” to reused logins, poor password practices make it easy for cyber criminals to get in and cause serious damage. In this blog, we break down why passwords aren’t enough anymore, what better options look like, and how your business can upgrade its login security for good.
Open laptop with a hand in a black leather glove coming out the screen and reaching to the keyboard
by The Orbital10 Team 11 June 2025
Think your Microsoft account is safe behind a strong password and MFA? Think again. A new tactic called device code phishing is letting cyber criminals bypass traditional security – using real Microsoft login pages to trick users into handing over access. In this blog, we break down how the attack works, why it's so dangerous, and what your business can do to stay ahead of it.
A mousetrap
by The Orbital10 Team 12 May 2025
“Free” online tools could be costing you more than you think. File conversion websites may be hiding ransomware or data theft tools. Here’s how to protect your business from this growing cyber threat.
A view of a teams video call between four people, all smiling and a couple of them waving
by The Orbital10 Team 12 May 2025
Tired of saying “next slide, please” in Teams meetings? Microsoft just rolled out a long-awaited update that allows multiple presenters to control slides—making your meetings and webinars run more smoothly than ever. Here's what to expect.
Illustration of a business man on a mobile device with a shadow of a cyber hacker phishing the man
by The Orbital10 Team 12 May 2025
Think your team would never fall for a phishing scam? Think again. 86% of employees say they’re confident in spotting scam emails—but over half have already fallen for one. This blog explores how overconfidence is a hidden cybersecurity threat, and what you can do to protect your business before it's too late.
Business man rubbing his head, sitting in front of his laptop
by The Orbital10 Team 12 May 2025
Spreadsheets slow us down and are too easy to mess up. So, what if I told you there’s a better way to handle data in your business?
Businessman standing with his back to us & 2 big muscular arms drawn in chalk on either side of him
by The Orbital10 Team 25 April 2025
Using a simple password like “Password1234”? Stop! It might be easy to remember – but it’s also too easy to crack. And it’s putting your business at risk…
man with paper bag covering his head
by The Orbital10 Team 25 April 2025
: If your team use Google Chrome’s Incognito mode, you probably assume your browsing is private. But until Microsoft spotted this big flaw, your info could be shared across devices… here’s how they’ve fixed it.
A space rocket launching out of a laptop held in someones hand
by The Orbital10 Team 25 April 2025
Is Edge your business’s browser of choice? Microsoft’s thinking of automatically opening Copilot when you use it. It could boost productivity, but there are privacy concerns to be aware of…
More posts