Know your enemy
"Malware" is any software built to do harm. The names matter less than the delivery methods, but here's the cast of characters:
- Ransomware encrypts your files and demands payment for the key. It's today's most damaging threat to small businesses.
- Trojans disguise themselves as legitimate software, like a "free PDF converter" that also steals your banking logins.
- Spyware & keyloggers quietly record what you type and see.
- Adware & browser hijackers flood you with pop-ups and redirect your searches. Annoying, and often a gateway to worse.
How it gets in
- Email attachments and links are still the #1 door. Invoices, shipping notices, and "voicemail" attachments are classic lures.
- Fake downloads: cracked software, "codecs," browser extensions, and ads that imitate real download buttons.
- Fake updates and alerts: a pop-up claiming your PC is infected or Flash needs updating. Real updates never arrive via web pop-up.
- Office macros: documents that ask you to "Enable Content." That button runs code. Don't press it unless you were expecting exactly this file from exactly this person.
- USB drives: found in a parking lot or handed out at an event. Curiosity is the exploit.
Your defense, in layers
- Keep everything updated. OS, browser, and apps, automatically. Most malware exploits already-patched holes.
- Run reputable protection. Windows Defender is genuinely good and free; businesses should consider managed endpoint protection.
- Use a standard (non-admin) account for daily work, so malware that lands can't dig in as deep.
- Download only from official sources: the vendor's real site or your platform's app store.
- Back up. Ransomware's entire business model collapses if you can restore your files. See our backup guide.
About paying ransoms: payment funds the next attack, roughly a quarter of payers never get working decryption, and many are hit again within a year, because they've proven they'll pay. With tested backups, you'll never face that choice.
Signs of infection
- Sudden slowness, fans blasting, or the machine acting on its own.
- New toolbars, changed home pages, or search results going somewhere odd.
- Pop-ups outside the browser, or antivirus mysteriously disabled.
- Files renamed with strange extensions, or a text file demanding payment. That's ransomware; disconnect from the network immediately.
If any of this sounds familiar, go straight to Think you've been hacked?, and don't hesitate to call us.