Water-holing

Where cyber criminals attempt to compromise a specific group of people by infecting one or more websites they are known to visit regularly. The goal is usually to gain access to the organisation’s computer network by infecting users’ computers with malware.

What should you do?

  • Be careful where and what you click whilst browsing
  • Report anything that looks different from usual visits to the website
  • Liaise with IT to ensure your devices are updated

How can you protect your account?

  • Never share login details – one account, one person. Actions made under your account are traceable to you. It is your account, your password, your responsibility.
  • Use unique passwords, avoid using personal information (e.g. birthdays and pet names) and do not use the same password for multiple logins. The National Cyber Security Centre recommends using three unique words (e.g. Shopping-fish-Cinema43). Passwords will remain unique and harder to guess for attackers but easier for you to remember.
  • Use Multi-Factor Authentication where possible but you must be cautious to not approve MFA requests when you are not expecting them.
  • Lock your device when leaving it, even if for a short time. Leaving a device unlocked gives anyone access to secure information.
  • Remember STOP – CHECK – REPORT. Report anything you are unsure of. Pause, verify independently and report.

Cyber fraud amounted to £1.63 billion in losses for individuals and business in 2025.

Cyber security awareness is important as it helps protect individuals and organisations from threats, reducing the risk of sensitive information being compromised and helps keep organisations secure.

Where to get help:

Always contact IT if you are unsure – pause, independently verify and promptly report.

STOP – CHECK – REPORT