Blog Post

The realm of cybercriminal activity is constantly evolving to become more sophisticated in the art of deception. One of the latest forms we see of this is a type of cyberattack called “malvertising”. This is a form of malware attack that disguises itself at an online advertisement, much like ones you see in Google search results, on websites, or as you scroll through your social media feeds. With advancements in AI sophistication, these fake ads are becoming increasingly difficult to spot and, therefore, are becoming more and more common and effective.

One example in recent years was the release of PlayStation 5. Due to the high demand and difficulty in finding availability for the game system, many bad actors created ads that led to phony websites. These websites closely mimicked the genuine ones and collected personal data and credit card details. And while most corporations, like Google, work hard to remove phony ads, they can often be overlooked for hours or days before they are flagged and removed. Especially during this time of the year, with the increase in online shopping during the holidays, you are particularly vulnerable if you let your guard down.

So what are some of the things you can be looking for to ensure the ad that’s caught your eye is the real deal? Here are a few tips:

1. Check for spelling errors in the ad’s URL. Just like spam emails, you can often identify when something is off based on the grammar or some alteration to the logos.
2. Do NOT click the ad. Instead, open a new tab and go directly to the brand’s website to see if they really are advertising what the suspicious ad displays.
3. If you are not currently using a DNS filter, look into it. It screens website and will redirect your web browser to a warning page if it is triggered by suspicious activity. This gives you an extra layer of protection, especially if you do click on a bad link.
4. Never put your login or credit card credentials on an ad link, even if it looks safe. Instead, go directly to the actual company’s website and proceed from there.
5. Remember that not all malvertising takes place online. Many of these fake ads will give you a phone number to call. Senior citizens are often the victim of this form of phishing by calling a bad number and giving their private information to the person on the other line.
6. Never download anything from an ad. Ignore enticing phrases like “Get a free copy of….xyz” and move on. Otherwise, you could willingly be injecting malware into your systems, allowing the cybercriminals to do major damage.
7. If you see something suspicious, say something. Make sure to warn your co-workers, family, and friends. Word of mouth, especially on social media, goes a long way in protecting the community.

To sum up, when in doubt, check it out. Even a simple google search of the suspicious ad may provide scam alerts to reveal the truth. If you want to really make sure you are covered, check Tech Eagles out, too. Our team of experts stands at the ready to make sure that you and your small business team are not only educated on best cybersecurity practices, but we take care of your IT and cybersecurity needs. Our services range from your VOIP, computer hardware, and internet needs to DNS filtering, security patches, and backups. Call us today to find the services that best suit your business needs. We look forward to chatting with you!