Understanding a handful of common cybersecurity terms and emerging attack techniques can help you recognize suspicious activity before it becomes a serious problem. Whether you’re checking email, downloading a file, or logging into a business application, knowing what to look for can make all the difference.
Here are some of the most important cybersecurity terms and attack techniques every employee should know, explained in plain English.
Browser Hygiene
You probably think about keeping your computer updated, but what about your web browser?
Your browser is one of the most commonly used applications on your device, making it a frequent target for cybercriminals. Practicing good browser hygiene means keeping your browser up to date, removing extensions you no longer use, locking your computer whenever you step away, and using trusted security tools to protect your accounts.
These simple habits reduce unnecessary risk and make it much harder for attackers to take advantage of outdated software or overlooked vulnerabilities.
Browser Extensions
Browser extensions can make everyday work easier by adding features or improving productivity. They can also become a security risk if they aren’t managed carefully.
Some extensions request broad permissions that allow them to view website data, read information you enter, or interact with the pages you visit. Even extensions that were once trustworthy can become problematic if they’re abandoned, sold to another developer, or updated with malicious code.
Periodically review the extensions installed in your browser to remove anything you no longer recognize or use.
Password Managers
Many browsers offer to save your passwords automatically, but browser-based password storage isn’t always the best option for business accounts.
A dedicated password manager provides stronger protection by securely storing credentials, generating complex passwords, and making it easier to maintain unique passwords across every account. Using an organization-approved password manager can significantly reduce the risk of compromised credentials.
HTTPS
Many people assume the padlock icon in their browser means a website is completely safe.
It doesn’t.
HTTPS encrypts the connection between your browser and the website, helping keep your information private while it’s being transmitted. However, it doesn’t verify that the website itself is legitimate. Cybercriminals regularly create fraudulent websites that also use HTTPS.
The safest approach is to verify both the website address and the organization behind it before entering passwords or sensitive information.
Living Off Trusted Sites (LOTS)
One of the more recent techniques used by cybercriminals is known as Living Off Trusted Sites, or LOTS.
Rather than hosting malicious files on suspicious websites, attackers take advantage of trusted platforms like Microsoft SharePoint, OneDrive, Google Drive, Dropbox, or DocuSign. Because these services are widely trusted, malicious links or files hosted there are more likely to slip past security filters and raise less suspicion.
A trusted platform doesn’t automatically make every file or link trustworthy. Always verify unexpected documents or file sharing requests before opening them.
Malvertising
Not every online advertisement is harmless.
Malvertising is the practice of using online advertisements to distribute malware or direct users to fraudulent websites. Sometimes these ads appear in search engine results or imitate trusted software downloads, making them difficult to distinguish from authentic links.
Before downloading software, AI tools, or browser utilities, verify that you’re using the organization’s official website rather than clicking the first sponsored result you see.
Browser-in-the-Browser (BitB)
Some phishing attacks don’t send you to a fake website. Instead, they create a fake login window directly inside the webpage you’re already visiting.
Known as a Browser-in-the-Browser (BitB) attack, these fake pop-ups closely resemble Microsoft, Google, or other authentication windows. At first glance, they can be nearly impossible to distinguish from the real thing.
One simple way to check is to click and drag the login window. A legitimate sign-in window will move independently of your browser. If it can’t leave the webpage because it’s actually part of the page itself, that’s a strong indication you’re looking at a fake.
The Rise of “*Fix” Attacks
Cybercriminals are increasingly relying on social engineering instead of technical exploits. One growing trend involves what’s become known as “*Fix” attacks.
These scams convince users they’re solving a technical problem when they’re actually giving attackers access to their devices.
Some common examples include:
- ClickFix, which instructs users to press keyboard shortcuts or paste commands into their computer under the guise of verifying they’re human.
- FileFix, which claims a document is corrupted and requires special commands or software to open.
- CrashFix, which intentionally freezes a browser before prompting users to enter a so-called recovery command.
- ConsentFix, which convinces users to copy information from one website to another as part of a fake verification process.
If a website ever asks you to run commands, paste unfamiliar code, or change computer settings to continue, stop immediately. Legitimate websites and applications rarely require users to perform these types of actions.
Device Code Phishing
Many organizations use Microsoft 365 and other cloud platforms that support device authentication.
Attackers have found ways to abuse this built-in feature through what’s known as Device Code Phishing. Victims receive an email or message directing them to a genuine Microsoft sign-in page, where they’re instructed to enter a short code. Because the page itself is real, many users assume the request is safe.
If you receive a request to enter a device code that you didn’t initiate yourself, don’t proceed. Contact your IT department or verify the request through another trusted channel.
Adversary-in-the-Middle (AiTM)
Multi-Factor Authentication (MFA) is one of the best defenses available today, but attackers continue finding new ways to work around it.
In an Adversary-in-the-Middle (AiTM) attack, cybercriminals position themselves between the user and the real website, allowing them to capture authentication information after it’s entered.
This doesn’t mean MFA isn’t valuable. It remains one of the most effective security measures available. It does mean employees should continue paying close attention to login pages and unexpected authentication requests rather than assuming MFA alone will stop every attack.
Watch for Common Red Flags
While cyber threats continue to evolve, many attacks still rely on the same warning signs.
Be cautious of:
- Website addresses with unusual spellings or unexpected domain extensions
- Login pages that don’t behave normally
- Unexpected requests to run commands or download software
- Emails that create urgency or pressure you to act immediately
- Files or links shared through trusted platforms that you weren’t expecting
When something feels off, trust your instincts and verify the request before moving forward.
Knowledge Is One of Your Best Defenses
Cybersecurity isn’t just the responsibility of your IT department. Every employee plays a role in protecting company data, customer information, and business operations.
The threat landscape changes quickly, and attackers are constantly developing new techniques to bypass traditional defenses. Staying informed about common cybersecurity terms and emerging attack methods helps you recognize suspicious activity sooner and respond with confidence. While cybercriminals continue to develop new techniques, many attacks still rely on the same goal: convincing someone to trust something they shouldn’t.
At Higher Information Group, we help organizations strengthen their cybersecurity through layered security solutions, managed IT services, employee security awareness, and proactive support. If you’re looking to build a stronger security strategy or help your workforce stay informed about today’s evolving threats, our team is here to help.
