Recognising Deceptive Online Resources That Put Corporate Systems at Risk

The internet provides access to useful information, software and online services. However, not every website is genuine. Some are deliberately designed to imitate legitimate platforms and trick users into downloading harmful files, sharing sensitive information or exposing company devices to risk.

A website may look professional, display a familiar logo and appear trustworthy while still being fraudulent.

Knowing what to look out for can help you protect your work device, company information and corporate systems.

1. Look Closely at Website Addresses

Deceptive websites often use addresses that resemble those of legitimate organisations. A small spelling change, an extra word or a different domain ending can be easy to overlook.

For example, imagine a legitimate website uses:

• Genuine example: example.com
• Deceptive lookalike: ex@mpl3.com
• Another lookalike: example-support.com
• Another variation: example.com.security-check.net

These are illustrative examples, not actual websites associated with a real organisation. Notice how the addresses use familiar words or characters to appear legitimate.

In the last example, the actual domain is security-check.net, not example.com. The words example.com appear only as part of a longer address.

What to do: Read the full website address carefully. When accessing a service, use its known official address or a trusted organisational link rather than relying on its appearance.

2. Be Careful With file Downloads

Some websites offer familiar applications, browser tools or system utilities through unofficial download pages.

For example, a page might display a familiar software logo and a prominent “Download Now” button, but the file may not come from the genuine software provider.

What to look out for:

• Download buttons that redirect to unrelated websites.
• Unfamiliar websites offering company software.
• Unexpected prompts to install a tool to fix an error or continue browsing.
• Websites instructing you to run commands or change system settings.

What to do: Obtain workplace software through approved IT procedures. Do not install software or follow unfamiliar system instructions just because a website recommends them.

3. Question Requests for Information

An online tool may request your work email, password, company documents or other information before allowing access to a service.

For example, a website offering a free PDF conversion tool might ask you to upload a confidential business report.

The tool may work as advertised, but that does not automatically mean it is approved to receive company information.

What to do: Use approved platforms for work documents and never enter corporate credentials into unverified websites.

4. Don’t Be Rushed by Pop-Ups or Attractive Offers

Be cautious of messages such as:

• “Your computer is infected! Download this repair tool.”
• “Your browser is outdated. Install this update now.”
• “Download this free application to unlock premium features.”
• “Run this command to fix the problem.”

These messages may be designed to pressure you into taking an action without checking whether it is safe.

What to do: Do not download files, run commands or change device settings based on unexpected website instructions. Contact IT if the message concerns your work device.

Before You Trust an Online Resource

• Check the complete website address for misspellings, misleading additions or unexpected domains.
• Verify that the resource belongs to the organisation it claims to represent.
• Avoid unapproved file downloads and online tools.
• Do not upload company information to unapproved platforms.
• Stop and seek IT guidance if anything seems unusual.

Remember

A familiar name, logo or professional-looking page does not guarantee that an online resource is genuine.

Check the address. Question the request. Verify the source before you act.

🔐 CyberDesk – Protecting Our Digital Workplace