Beware these common ‘malvertising' attacks

The Orbital10 Team • 11 March 2025

Think about the last online ad you clicked…

 

Did you just assume it was genuine?

 

If you said yes, you’re not alone – and this is exactly what scammers are counting on.

“Malvertising”, or malicious advertising, is where scammers use online ads to trick you into downloading malware (malicious software), sharing sensitive information like passwords, or even handing over money.

 

These attacks are becoming more sophisticated, and they’re a growing threat to businesses of all sizes. Worse yet, you don’t even need to click on these ads to become a victim; just loading the ad in an out of date browser can be enough to compromise your device.

 

The three most common malvertising techniques are known as scam malvertising, fake installer malvertising, and drive-by download malvertising. Here’s a little more about them:

 

·        Scam malvertising is where an ad claims that your computer is infected and urges you to call for support. Once you do, the scammers convince you to install software that gives them control over your system. Then they charge you to “fix” the fake issue.

 

·        Fake installer malvertising often uses ads that lead you to cloned websites of brands you trust. You download software, thinking it’s legit… but, instead, you’re downloading malware onto your device.

 

·        Drive-by download malvertising is where ads infect your computer without you even clicking on anything. This type of malvertising exploits outdated browsers and installs malicious files or extensions automatically.

 

Recognising these scams is the first step to keeping your business safe. If you see an ad claiming you’ve been hacked or urgently need to act, stop and think: How would this company even know anything about your computer?

 

Also, make sure you double-check links before you click. If the link isn’t sending you to a legitimate domain, steer clear. And most importantly, make sure you’re running the latest version of your browser, as updates patch vulnerabilities that malvertising often exploits.

 

Don’t forget to share this knowledge with your employees, too. They’re your first line of defence – and training them to spot suspicious ads can save your business from serious trouble.

 

Scammers want you to trust without thinking. But a healthy dose of scepticism can make all the difference. Next time you see an ad that feels wrong, trust your gut… and ask yourself if it’s safe before you click.

 

Want to train your team to protect your business from malvertising and other online scams? We can help, get in touch >

Someone dropping an alarm clock into a waste paper bin
by The Orbital10 Team 14 July 2025
Turn Word documents into PowerPoint slides in seconds with Microsoft Copilot — a faster, smarter way to boost team productivity.
A man pulling apart some blinds to peer through suspiciously
by The Orbital10 Team 14 July 2025
Windows 11’s upcoming Onlooker Detection feature could warn you if someone’s snooping on your screen, helping protect your privacy when working in public.
A hand pressing a digital screen and the letters 'AI'
by The Orbital10 Team 14 July 2025
90% of businesses are using Generative AI — are you? Learn how AI is transforming productivity, and what your organisation needs to do next.
Person in front of a laptop looking at their emails with a symbol showing one new email
by The Orbital10 Team 14 July 2025
Phishing scams are impersonating Microsoft more than ever. Learn how to spot the signs, stay alert, and protect your business from cyber threats.
Woman sitting in front of a laptop with her arms in the air shrugging
by The Orbital10 Team 7 July 2025
Learn the key differences between IT Security and Cybersecurity, plus essential steps every business must take to protect data and systems.
Some typing on a laptop with backup clouds dotted around
by The Orbital10 Team 11 June 2025
Ransomware is evolving — and it’s coming for your backups. With attacks at an all-time high, your last line of defence needs to be bulletproof. Discover how immutable backup storage can keep your business protected, even when attackers get in.
A post it note with 'password qwerty' written on it
by The Orbital10 Team 11 June 2025
Weak passwords are still one of the biggest risks to your business – and attackers know it. From “123456” to reused logins, poor password practices make it easy for cyber criminals to get in and cause serious damage. In this blog, we break down why passwords aren’t enough anymore, what better options look like, and how your business can upgrade its login security for good.
Open laptop with a hand in a black leather glove coming out the screen and reaching to the keyboard
by The Orbital10 Team 11 June 2025
Think your Microsoft account is safe behind a strong password and MFA? Think again. A new tactic called device code phishing is letting cyber criminals bypass traditional security – using real Microsoft login pages to trick users into handing over access. In this blog, we break down how the attack works, why it's so dangerous, and what your business can do to stay ahead of it.
A mousetrap
by The Orbital10 Team 12 May 2025
“Free” online tools could be costing you more than you think. File conversion websites may be hiding ransomware or data theft tools. Here’s how to protect your business from this growing cyber threat.
A view of a teams video call between four people, all smiling and a couple of them waving
by The Orbital10 Team 12 May 2025
Tired of saying “next slide, please” in Teams meetings? Microsoft just rolled out a long-awaited update that allows multiple presenters to control slides—making your meetings and webinars run more smoothly than ever. Here's what to expect.
More posts