Internet users must protect themselves against malwares embedded in legitimate websites as the malicious codes initiate ‘drive-by download’ attacks, PLDT Inc. and Smart Communications Inc. warned. “Once downloaded, these malwares exploit the vulnerabilities of your device, allowing cybercriminals to steal your personal data, create disruptions, or take control of your credentials,” warned Angel Redoble, FVP and Chief Information Security Officer of PLDT and Smart. Unfortunately, the malicious files can lurk undetected in websites and users can trigger the attack by simply visiting the sites. Outdated applications or software are especially vulnerable to drive-by downloads. To protect against stealthy attacks, users must regularly update the web browser and operating systems of their devices, ensuring they run the latest security patches, the PLDT and Smart’s Cyber Security Operations Group (CSOG) advised. Uninstall and delete unused applications to prevent them from being exploited by malwares. Carefully read and review security pop-ups before clicking them. It’s best to use an administrator account when installing programs in one's computers. Users should also keep their antivirus up to date. So far, PLDT and Smart have been ramping up efforts to protect customers from cyber-attacks. In March alone, PLDT and Smart blocked more than 1.7 billion attempts to open malicious domains. The CSOG has also thwarted more than 1.2 billion cyber-attacks and data breaches against its network and assets in the same time frame. The PLDT Group’s information drives that help develop a culture of cybersecurity are part of its broader mission of elevating the quality of customer experience by protecting them from falling victim to cyberattacks and threats.