In today’s episode of Threat Analysis, Mauven MacLeod explores pressing cybersecurity threats impacting UK small businesses. The discussion begins with ValleyRAT, a sophisticated malware posing as innocuous software discovered by AlienVault OTX. This threat utilises DLL sideloading to gain backdoor access to organizations’ systems, recording keystrokes and siphoning data without detection. Despite its current focus on China and India, businesses linked to these regions should heighten their security measures. Next, the episode examines the ‘Spring Ring’ voice phishing campaign analysed by Unit 42. This vishing scheme targets employees on platforms like Microsoft Teams, urging the implementation of robust verification processes and multi-factor authentication. Attention is also drawn to serious vulnerabilities in TeamViewer software, as reported by Bleeping Computer. Unpatched systems are left vulnerable to remote attacks and data breaches, highlighting the importance of proactive security updates. Finally, the episode addresses concerns from a survey in The Register indicating a widespread lack of cyber skills among UK businesses. Without dedicated IT staff, many small to medium enterprises are particularly vulnerable. Mauven emphasises the need for regular training and awareness to foster a cyber-resilient culture. Tune in for essential insights to safeguard your business.