Summer Isn’t Vacation for Cybercriminals
While your staff may be easing back into work after summer getaways, cybercriminals are heating up their attacks.
In fact, August is one of the worst months of the year for phishing scams, especially for small and mid-sized businesses in places like Salem, Oregon, where people often wear multiple hats and cybersecurity isn't always at the front of mind.
At 10D Tech, we monitor these seasonal patterns and proactively guide clients through steps like refreshing user awareness training, updating endpoint security rules, and implementing real-time monitoring to block phishing attempts before they land and help businesses build in smarter protections during high-risk windows like summer.
Two recent studies from cybersecurity vendors Check Point and Proofpoint show phishing scams rise sharply during summer, especially those targeting:
- Vacationers (hotel and Airbnb lookalikes)
- Back-to-school shoppers and staff (university & bookstore impersonations)
- Remote workers using unsecured WiFi or checking personal email on work devices
In May 2025 alone, over 39,000 new vacation-related domains were registered and 1 in 21 were flagged as suspicious or outright malicious.
The bad guys know what you’re clicking on. That’s why this season is such a hotbed.
Why This Hits Local Businesses Hard
Let’s say your Salem office manager is wrapping up a vacation rental for the family reunion… but checks her personal email at work.
One click on a fake booking site and now ransomware is crawling across your entire network.
It happens. Fast.
Especially when phishing emails are no longer filled with bad grammar. With the rise of AI-generated phishing, scams now look perfectly legit with authentic logos, polished language, and even personalized details.
Smart Ways to Stay Protected This August (and Beyond)
Here’s how to outsmart even the smartest phishing attempt:
- Train Your Team (Especially Post-Vacation)
- Remind staff what to look for:
- Suspicious links (hover before clicking)
- Emails from strange domains (.today, .info, etc.)
- Slightly misspelled sender names or domains
- Unexpected attachments or “urgent” language
- Avoid Personal Email on Work Devices
- The crossover risk is real. Encourage your team to keep personal email and browsing on their own devices.
- Use Endpoint Security That Can Think for You
- Ask your MSP (or 10D Tech … hey, that’s us) about EDR (Endpoint Detection and Response). It watches your computers for unusual activity like fake logins, strange downloads, and malicious sites and shuts them down before damage is done.
- Enable Multifactor Authentication (MFA)
- If someone does get your login credentials, MFA stops them cold. Use app-based MFA or physical keys, not just text message codes.
- Be Cautious on Public WiFi
- If you must check work items while traveling, use a VPN to keep your data encrypted.
Salem Businesses: You’re a Bigger Target Than You Think
Cybercriminals know that smaller cities like Salem aren’t always as heavily fortified as Portland or Seattle. They’re counting on less oversight and more distractions in the summer.
Let’s prove them wrong.
Book a quick, free cybersecurity assessment and we’ll take a Closer Look at:
- Where phishing risks are hiding in your systems
- What your endpoint protection is (or isn’t) doing
- How MFA, training, and smarter tools can close the gap
About 10D Tech
10D Tech provides managed IT and cybersecurity solutions to small and midsized businesses across Oregon. We deliver proactive, practical protections, from EDR to secure AI use to phishing training, with local support and no confusing jargon.
👉 Book your 15-minute cybersecurity assessment and let’s take a Closer Look at how to keep your business safe. https://www.10dtech.com/15min-assessment
