It’s Cybersecurity Awareness Month this October, a global initiative focused on helping people and businesses stay safer online. This year’s message is particularly timely following the recent cyber incident involving the ASOS app.
Customers received an unexpected notification through the official app, a channel most people would naturally trust. It is a useful reminder that a message can look convincing and still deserve a second look.
As Neil Bayliss, Director at Hubtel IT, explained:
“What makes this incident particularly concerning is that the message appeared through the official ASOS app. Most people naturally trust notifications from apps they use regularly, so it is an important reminder that even a familiar channel should not be trusted without question.
“The real danger may not be the notification itself, but the cybercrime that follows it.”
High-profile incidents create uncertainty, and cybercriminals are quick to take advantage. Customers may receive follow-up emails, texts or fake account alerts referring to the incident. These messages could ask people to reset a password, confirm personal details or follow a link to secure their account.
Here is what to do if you receive or interact with a suspicious message.
You clicked the link but did not enter any information
First, don’t panic. Scammers often count on people feeling pressured and losing their ability to think clearly.If you opened the link but did not provide any information or download anything, close the page and do not go back to it.Keep a close eye on your accounts over the following days and weeks. Look out for activity you do not recognise, unexpected security alerts or password-reset messages you did not request.If something downloaded automatically when you followed the link, run a comprehensive antivirus scan and deal with anything it finds. If it happened on a work device, report it to your IT team straight away.
You entered your password
If you provided your password, act immediately.Open the genuine app or type the organisation’s website address into your browser yourself. Do not return through the link in the original message.Change your password as soon as possible. If you have used the same password for other accounts, change it on those accounts too.You should also turn on two-step verification if it is available. This adds another check when somebody tries to access your account.
You shared card or banking details
Contact your bank immediately if you provided card or account details.Use the bank’s official app or website, or call the telephone number printed on the back of your card. Do not use contact details contained in the suspicious message.Keep checking your account for transactions you do not recognise. Stolen information is not always used straight away, so it is important to remain vigilant.
What if it happened at work?
Tell your IT team as soon as possible if you followed the link through a work account or device.Do not wait until you see signs of a problem. Reporting it quickly gives your IT team the best chance to check the device, secure the account and prevent the same message from reaching other people.There is no embarrassment in reporting a mistake. Staying quiet can turn a manageable issue into a much bigger one.
Scams are becoming harder to spot
There used to be some fairly obvious signs of a scam, including spelling mistakes, unusual wording and suspicious-looking links.Those clues are becoming less reliable. Some cybercriminals now use AI tools to create polished, convincing messages that can look as though they have come from a genuine retailer, colleague, supplier or senior manager.Hubtel IT’s existing cybersecurity guidance warns that people should focus on the action a message is encouraging, rather than assuming a professionally written message is genuine. Before doing anything, ask yourself:
Was I expecting this message?Is it putting me under pressure to act quickly?
Is it asking for a password, payment or confidential information?
Does the request make sense?
Can I check it through another channel?
If you are unsure, stop and verify the message.
Open the organisation’s official app or website yourself, or call a telephone number you already trust.
How to report a suspicious message
Suspicious emails can be forwarded to report@phishing.gov.uk
Suspicious text messages can be forwarded to 7726 free of charge.If the message was received at work, report it through your organisation’s normal IT or cybersecurity support route as well.
Stop, check and report
Clicking a suspicious link does not automatically mean that your device or account has been compromised. What matters is what happened after the link was opened and how quickly you respond.Close the page, change any details you may have shared and report the incident. Above all, do not allow urgency or embarrassment to prevent you from asking for help.
As Neil Bayliss says:
“Cybercriminals rely on people feeling rushed or panicked. If something doesn’t feel right, stop, close the page and check the message through a channel you trust. Acting quickly is important, but acting calmly is just as important.”
Is your business prepared for convincing cyber threats?
Email filtering and security software are important, but people also need the confidence to recognise and report suspicious activity.
Hubtel IT helps businesses strengthen both sides of their cyber security: protecting systems against threats and helping employees understand what to do when a convincing message gets through. We describe this as a two-tiered approach, combining email protection with employee security awareness and phishing training.
Speak to Hubtel IT about protecting your business against phishing, account compromise and increasingly convincing cybercrime.
