Truman Roe

Employees are falling for 3x more phishing scams

Have you ever stopped to wonder how many phishing scams your employees encounter each day? The answer might come as a nasty surprise.

Last year, the number of employees clicking on phishing links TRIPLED – and businesses everywhere are paying the price.

Before we dive into this situation a little more, let’s rewind a bit.

Phishing is where scammers try to steal sensitive information (like passwords or payment details) by pretending to be a trusted source.

Maybe your employee gets an email that looks like it’s from Microsoft, with a link to a login page. Once your employee enters their details, that information falls right into the hands of criminals… and from this, they get the keys to your business.

Here’s the really worrying part: Phishing attacks aren’t just happening more often, they’re getting harder to spot, too.

Email phishing is still a big issue, but scammers are branching out; planting fake links in search engines, social media, online ads, and website comments. Scammers know that employees are taught to be cautious about emails, so they’re finding new ways to slip through the cracks.

So, why are more people falling for these scams?

Part of the problem is fatigue. Employees see so many phishing attempts in their inboxes, it’s difficult to keep their guard up every minute of the day. Scammers are also getting more creative, using fake websites and emails that are almost impossible to tell apart from the real thing.

And they’re now targeting trusted platforms like Microsoft 365, which hold a goldmine of business data.

Your people can either be your greatest defense or your biggest vulnerability. A well-trained, alert team can spot phishing attempts before any damage is done. But if they’re unaware or unprepared, a single click can open the door to financial losses, stolen data, and a whole world of trouble for your business.

So, what’s the solution?

Start with education. Make sure your team knows what phishing looks like, not just in emails but across the web. Teach them to question unexpected requests for their login details, double-check links, and report anything suspicious. And don’t rely on memory alone; regular training sessions can keep the risk of phishing scams fresh in your employees’ minds.

At the same time, don’t leave all the responsibility on your team’s shoulders. Tools like multi-factor authentication (MFA) add an extra layer of security, so even if a password does get stolen, attackers can’t get in. Combine this with up-to-date software and a strong cyber security plan, and you’ve got a much better chance of keeping your business safe.

Phishing scams aren’t going away any time soon, but with the right approach, you can stop your business from becoming another statistic.

Need help protecting your business data? We can help – get in touch.

by Truman Roe

Beware that corrupted email attachment: It could be a scam

You’re scanning your inbox and spot an important email with a Word document attached. Maybe it’s an invoice, a message from a supplier, or even a request from a colleague. You open it without thinking twice… and just like that, you’ve been scammed.

This scenario is exactly what cyber criminals are counting on. Now they’ve come up with another new way to get past even the most advanced email security filters – this time, using corrupted Microsoft Word files.

It’s a clever and dangerous tactic.

Phishing (pronounced "fishing") is where scammers try to trick you into giving away sensitive information, like passwords or bank details. They “bait” you with an email that looks legitimate, maybe from your bank, a coworker, or a company you trust.

These emails often include attachments or links. When you open the attachment or click the link, you could be downloading malicious software (malware) or visiting a fake website designed to steal your details.

Phishing attacks are constantly evolving, and they’re now one of the most common ways scammers break into businesses. Email security filters are usually pretty good at scanning attachments. But since corrupted files can’t be analyzed properly, the Word file is able to sneak into your inbox.

When you open one of these corrupted files, Microsoft Word will “repair” it and show you what looks like a normal attachment. But the document will contain a malicious QR code or link that sends you to a phishing site (often a fake Microsoft 365 login page). If you enter your details, scammers could have access to your account – and potentially your entire business.

Stealing just one employee’s login details can be enough. With access to your cloud systems, scammers could get hold of sensitive customer data, lock your team out of essential files, or even send phishing emails from your account to trick your contacts.

If this happens to you, it could be catastrophic. Your business could face financial losses, legal consequences, and a damaged reputation that could take a long time to rebuild.

Cyber attacks are getting more complicated. But you don’t need a degree in cyber security to help keep your business safe.

The best protection is awareness and caution.

Here are some steps you can take:

• Slow down and think twice before opening attachments or clicking on links
• If an email seems urgent, beware – scammers like to rush you, so you’ll act without thinking
• If you’re not sure an email is legit, check with the person or company that the email seems to be from
• Never trust an attachment or link just because it looks professional

Most importantly, make sure you educate yourself and your team about what phishing is, why it’s dangerous, and how to recognize the warning signs.

We help businesses like yours with this every day. If you’d like us to help you too, get in touch.

by Truman Roe

The two big threats of doing business on public Wi-Fi

Public Wi-Fi is everywhere these days – coffee shops, airports, hotels, trains. It’s super convenient, especially for business travelers or anyone working remotely.

But what if I told you that hopping on that free Wi-Fi could expose your business data to cyber criminals? That’s the reality of using unsecured public networks.

When you connect to public Wi-Fi, you’re opening the door to scammers who know exactly how to exploit these networks. The two biggest threats you need to know about are called Man-in-the-Middle (MITM) attacks and Evil Twin attacks.

Yes, they sound like something out of a spy movie… but they’re very real and can have serious consequences for your business.

Let’s start with Man-in-the-Middle (MITM) attacks. You’re sitting in a coffee shop, sending an email or logging in to your business bank account. You think your device is communicating directly with the Wi-Fi network, but in reality, a cyber criminal has inserted themself between you and the network.

This “man in the middle” can see everything you’re doing – your passwords, your emails, even your credit card details. And the worst part? You probably won’t even notice it’s happening.

Criminals use this stolen information in all sorts of ways. They might sell it to advertisers, use it to impersonate you in phishing scams (where they trick people into sharing sensitive information, like passwords or credit card details). Or even steal money from your accounts. For businesses, this could mean sensitive financial information or customer data ending up in the wrong hands.

Now let’s talk about Evil Twin attacks. Imagine you’re in an airport and see two Wi-Fi networks: One called “Airport Free Wi-Fi” and another called “Airport Wi-Fi Secure”. They both sound legit, but one of them could be a fake network set up by cyber criminals.

When you connect to the fake network, scammers can monitor everything you do online, just like in a MITM attack – but they can go even further. They can steal your cookies (little bits of data that websites use to remember you) and gain access to things like your login details or personal information.

In some cases, they can even install malware (malicious software) on your device without you clicking a single thing. Scary, right? All it takes is connecting to the wrong Wi-Fi network, then your data – and your business’s security – could be compromised.

Using public Wi-Fi doesn’t have to be a security nightmare, but you do need to be cautious. Here are some steps you can take to help keep your business protected:

• Avoid accessing sensitive information while connected to public Wi-Fi. This includes anything involving passwords, personal data, or financial accounts. If you wouldn’t want a stranger looking over your shoulder, it’s best to save it for when you’re on a secure network.
• Stick to websites that use HTTPS, which encrypts your data. You’ll know a site is secure if you see a padlock icon in the address bar or "https://" at the beginning of the web address. Most websites use this today.
• Consider using trusted browser extensions designed to boost your online safety. Many can block cookies, ads, and even malicious websites, reducing the risk of your information being exposed.
• Turn off auto-join on your business devices. This stops your work phone, tablet, or laptop from automatically connecting to any available network, including potentially dangerous ones.
• Be wary of suspicious pop-ups. Scammers often use these to trick you into clicking something malicious. If a pop-up feels wrong, don’t interact with it – just close the window.
• Enable two-factor authentication (2FA) on your business accounts whenever possible. This requires a second form of identification (like a code sent to your phone) to log you in, which makes it harder for anyone to break in even if they get hold of your password.
• Finally, keep your software up to date. Updates often include security patches that protect your device from the latest threats. Ignoring them could leave your business devices vulnerable.

A little caution goes a long way when it comes to keeping your business protected online. Ask yourself: Is the convenience of free Wi-Fi worth the risk of exposing my data?

If you’d like help keeping your business data protected no matter where you are, get in touch.

by Truman Roe

FOMO is driving businesses to spend more on IT

Ever feel like you’re racing to keep up with all the new tech out there? You’re not the only one. Businesses are spending more on software than ever before… and it’s in no small part due to “FOMO” – fear of missing out.

In fact, a recent report shows that 76% of businesses are bumping up their software budgets for next year, with many planning to increase their spend by 5 to 15%.

Why?

It’s simple: No business owner wants to feel like they’re falling behind while their competitors are jumping on the next big thing. So, businesses are investing in tools that they think will make them better, faster, and more secure.

Artificial intelligence (AI) is at the top of the list when it comes to the tech businesses want to invest in. This is because AI is making it easier to get stuff done; whether that’s automating routine tasks, crunching numbers, or even improving customer service.

But on the flip side, AI is also putting new tricks up the sleeves of cyber criminals. Meaning that businesses are having to spend more on cyber security to keep their data safe.

The hardest part about buying software isn’t usually the actual purchase – it’s what comes after. Using new software takes planning, and everyone in the team needs to learn how to use it. If your team isn’t ready, even the best software won’t help you much.

This is why many businesses are also investing in training tools, such as learning management systems (LMS). This helps bring employees up to speed, so your new tech doesn’t just sit there collecting virtual dust.

It can be tempting to be one of the first to adopt all the latest tools. But moving too fast can lead to headaches. It takes time to figure out what software is right for your business and how to make it fit into your processes. Jumping in without a clear plan could leave you with a tool that’s more trouble than it’s worth.

The good news is that many businesses are getting smarter about how they choose software, using reviews, testimonials, and recommendations from experts (like us) to make informed decisions.

If you’re feeling the pressure to invest in new tools, take a breath. Think about what your business really needs:

• Do you want to improve efficiency?
• Keep your business data secure?
• Help your team work better?

Whatever the reason, make sure you choose tools that are in line with your goals and that your team is ready to use.

FOMO might be driving the trend, but that doesn’t mean you have to let it control your decisions.

We can help make sure the tech you invest in pays off for your business in the long run. Get in touch.

by Truman Roe

How many devices do you use every workday?

It feels like we have a gadget for everything these days, doesn’t it?

The average office worker now carries around three devices to get through the day. Think laptops, tablets, headphones… and even multiple phones.

Technology keeps teams connected and helps us work smarter – but there’s a downside: Managing so many devices can get a little overwhelming.

What happens every time we add a new device to our daily work routine? There’s something else to charge. Another thing to carry. One more item to keep track of.

In fact, carrying around all this tech adds up to an average 9lbs of extra weight. That’s like carrying an air fryer to work every day!

Another issue is the mental load. Many professionals say they feel bogged down by the notifications they get across all their devices. It’s common to get dozens of notifications every day, and the constant flow of alerts can be such a distraction.

One way to get around gadget overload is to try out devices that handle many functions, like foldable phones, or hybrid laptops. This way, one device could do the same thing two or three of your devices are doing.

Another great strategy is to upgrade to a smarter system, like Windows 11.

Windows 11 makes it easier to switch between tasks, reducing the need for extra devices. With a smoother, more integrated experience, your team might not feel they need as many gadgets to stay productive.

Need help streamlining your setup? We can help walk you through the options. Get in touch.

by Truman Roe

Windows 11 uptake is at an all-time high – what are you waiting for?

Still holding on to Windows 10 in your business? It’s time to start thinking about making the move to Windows 11.

Three years after its release, Windows 11 is making major headway, with its market share reaching 35.55% in October 2024. While Windows 10 still holds around 60.97% of the market, change is on the horizon – and there are some compelling reasons to consider the switch.

First, let’s talk about the big news: From October 14, Windows 10 will no longer receive free support from Microsoft. Although this doesn’t mean Windows 10 will stop working, it will stop getting important updates, such as up-to-date protection against malicious software and cyber threats.

Microsoft will be offering extended security support for Windows 10 for an extra year, but this will cost businesses $30 per device and could get expensive. And this is only a temporary solution.

So, why has interest in Windows 11 spiked recently?

For one, the PC market has picked up. This is partly because of the rise of "AI PCs", which use hardware that is more capable of handling AI-based tasks. People want to make sure their devices are compatible with the latest software, including Windows 11. There’s also buzz around the rollout of “Windows Intelligence” – a possible rebrand of some Windows 11 AI features.

Upgrading to Windows 11 isn't just about keeping up with the latest tech, though. Another reason people are moving to Windows 11 is that it offers a more streamlined and user-friendly experience. New features include customizable widgets and an improved File Explorer, helping you to get things done faster.

Another major benefit to businesses is that Windows 11 brings improved security, offering better protection against cyber threats like:

• Ransomware, where you get locked out of your files and held to ransom for their (possible) return
• Phishing attacks, where you get tricked into revealing sensitive information through things like fake emails

If you want to stick with Windows 10, Microsoft’s one-year extension could offer you a bit more time. But if you want our advice? You’d only be delaying the inevitable, while missing out on the benefits of upgrading.

We can help make the switch stress-free. Get in touch.

by Truman Roe

Beware that "support call" – it could be a ransomware scam

If you get a call claiming to be from Microsoft Teams support, think twice before doing what they ask.

There’s a new trend for scammers to pose as “help desk” staff, with the aim of tricking employees into letting them take over their devices.

This is part of a larger ransomware attack, where you’ll be denied access to your business data unless you make a hefty payment to get it back.

Recently, a notorious cyber crime group has taken this scam to a new level.

First, they’ll flood an employee’s inbox with so much spam that it becomes unusable. Then they swoop in with a phone call, pretending to be from IT support, offering to “fix” the problem.

They may ask your employee to install remote desktop software like AnyDesk or use built-in tools like Windows Quick Assist. Once they have access, they can move around your network, collect sensitive data, and launch ransomware on your devices.

Be warned – they don’t only reach out over the phone. They’ve also started setting up Teams accounts to make employees think they’re part of IT support.

They do this by choosing usernames like “Help Desk” and using fake Microsoft tenant domains such as “securityadminhelper.onmicrosoft .com”. Then they send one-to-one messages to employees, saying they need access to their device.

Ransomware attacks are serious business. Along with locking you out of your data, they can also shut down your operations, disrupt customer service, and potentially leak confidential information.

Recovering from a ransomware attack can be expensive, both in terms of paying the ransom and dealing with the aftermath. It can cause loss of revenue, damage your reputation, and it could even have legal consequences.

Make your team aware of this scam and encourage everyone to be cautious with any unsolicited support calls or Teams chats. And make sure everyone knows to check with your actual IT department first, if someone is asking to install software or gain access.

Also, if you use Microsoft Teams in your business, make sure it’s set up securely. Only allow external chats from trusted domains, and make sure chat logging is enabled.

If you want extra help safeguarding your setup, we can do that. Get in touch.

by Truman Roe