Malvertising is a relatively new type of cyberattack that injects digital ads with malicious code that can infect your device. Interacting with these ads can download malware directly to your phone or computer or may direct you to a dangerous site that uses other methods to steal your information. Criminals may disguise their webpage as a trusted site (spoofing) or use a variety of social engineering techniques to manipulate victims to give up information.
Malvertising could also be embedded into QR codes and result in automatic downloads from malicious websites.
This form of cyberattack is difficult to track down and often difficult to detect, since infected ads may appear legitimate. Malvertising can appear on otherwise legitimate websites as well. Sites like The New York Times, the BBC, Spotify, Forbes and the NFL have all had users attacked through infected ads.
Unsolicited emails
In addition to website advertisements, you may receive dangerous ads directly to your email inbox. Unsolicited emails sent from outside Ballad Health can contain harmful links that can expose your inbox or your entire device to cybercriminals.
How to avoid malvertising:
- Avoid clicking on pop-up ads, and never open ads on a Ballad Health device.
- Don’t click links on unsolicited emails from outside Ballad Health.
- Keep software and browsers up to date to ensure you have the latest protections.
- Use antivirus software and an ad-blocker on your personal devices.
If you click on a link or advertisement that takes you to a site you didn’t expect, or if you notice any issues after clicking on an ad, contact the IT Service Desk immediately. Quickly reporting potential problems allows the IT Service Desk to prevent or minimize any damage and can make a huge difference.
You can report an issue to IT here.
