Beware These Common 'Malvertising' Attacks

Emma Challinor

Chief Creative Officer

May 28, 2025

Beware These Common 'Malvertising' Attacks

Think about the last online ad you clicked... Did you just assume it was genuine?

If you said yes, you're not alone – and this is exactly what scammers are counting on.

What is Malvertising?

"Malvertising", or malicious advertising, is where scammers use online ads to trick you into:

  • Downloading malware (malicious software)
  • Sharing sensitive information like passwords
  • Handing over money

You don't even need to click these ads to become a victim - simply loading an ad in an outdated browser can compromise your device.

The Three Most Common Attacks

1. Scam Malvertising

These ads claim your computer is infected and urge you to call for support. The scammers then:

  • Convince you to install remote access software
  • Take control of your system
  • Charge you to "fix" non-existent problems

2. Fake Installer Malvertising

These attacks:

  • Direct you to cloned websites of trusted brands
  • Offer seemingly legitimate software downloads
  • Actually deliver malware to your device

3. Drive-by Download Malvertising

The most dangerous type because:

  • No clicking required - just viewing the ad is enough
  • Exploits outdated browser vulnerabilities
  • Automatically installs malicious files or extensions

Protecting Your Business

Follow these essential steps:

  • Question unexpected warnings about your computer
  • Verify website domains before downloading anything
  • Keep all browsers updated with the latest security patches
  • Train employees to recognise suspicious ads

Remember: Scammers want you to trust without thinking. When you see an ad that feels wrong, trust your gut and stop to verify before taking any action.

Want to protect your business from malvertising attacks?

Get in touch to learn about our security awareness training programmes.