OranjBox Networks

10/08/2026

Not every cyberattack looks like a cyberattack.

There may be no virus.
No ransomware.
No suspicious program running on the computer.

Sometimes, it’s just an email.

Business Email Compromise (BEC) often relies on something much simpler: convincing someone that they’re communicating with a person they trust.

A request from the owner to urgently pay an invoice.
A vendor sending “updated” banking information.
A Microsoft 365 login page that looks completely legitimate.
A familiar email conversation that suddenly includes new payment instructions.

The technology involved can be surprisingly simple. The deception is what makes it effective.

And that’s why antivirus alone isn’t a cybersecurity strategy.

Email filtering, identity protection, MFA, monitoring, security awareness and good business processes all provide different opportunities to catch an attack before money or information leaves the business.

Security works in layers.

This Cybersecurity Awareness Month, take an extra moment when something involving money, credentials or sensitive information doesn’t feel quite right.

Verify it through another channel.

That phone call might be the security layer that stops the attack.

🍊 OranjBox Networks
What’s in the box.

10/05/2026

Phishing emails are getting better.

Better spelling. Better branding. Better timing. And with AI making convincing messages easier to create, the old advice of “look for bad grammar” isn't enough anymore.

So what should you actually look for?

🚩 7 red flags of phishing:

1️⃣ You weren't expecting it
An invoice, document, password reset or shared file arrives out of nowhere.

2️⃣ Something about the sender is off
The name looks familiar, but the email address or domain doesn't quite match.

3️⃣ It creates urgency
“Act now.” “Payment overdue.” “Your account will be disabled.” Attackers don't want to give you time to think.

4️⃣ It asks for sensitive information
Passwords, MFA codes, banking details and other sensitive information shouldn't be handed over because an email asked for them.

5️⃣ The link doesn't match the destination
Before clicking, check where the link actually goes. A Microsoft-looking button doesn't necessarily lead to Microsoft.

6️⃣ There's an unexpected attachment
Especially when the message is trying to convince you that you need to open it immediately.

7️⃣ The request doesn't make sense
Your boss suddenly wants gift cards. A vendor changes their banking information by email. Microsoft needs you to “verify” your password. Context matters.

If something feels off, don't use the phone number or link in the suspicious message to verify it. Contact the person or organization through a method you already trust.

And when in doubt, ask IT.

Catching a phishing attempt before the click is a whole lot easier than dealing with one after it.

Your IT partner. Built for what’s next.

10/01/2026

October is Cybersecurity Awareness Month. 🔐

Cybersecurity has changed a lot.

There was a time when protecting a business mostly meant installing antivirus, putting a firewall at the edge of the network, and keeping software updated.

Those things still matter. But today, protecting a business means protecting a lot more than the computers.

It means protecting identities and email.
It means securing devices and company data.
It means helping people recognize threats before they act on them.
It means monitoring for suspicious activity when preventative controls fail.
And it means having a recovery plan when something does get through.

Because there isn't one product, service, or checkbox that makes a business secure.

Security works in layers.

Throughout October, we're going to use Cybersecurity Awareness Month to talk about some of those layers, the threats we're seeing businesses face, and practical ways organizations can reduce their risk.

No scare tactics. No cybersecurity alphabet soup.

Just useful information to help businesses make better decisions about their security.

🍊 OranjBox Networks
What’s in the box.

09/29/2026

Tomorrow, September 30, OranjBox Networks will be closed in observance of the National Day for Truth and Reconciliation.
For us, this day is about more than closing the office.
It is a time to reflect on the history and ongoing impacts of residential schools, to honour Survivors, their families and communities, and to remember the children who never returned home.
Reconciliation isn't something accomplished by a post or a single day. It requires listening, learning and understanding, and carrying those lessons forward in how we treat one another and contribute to our communities.
We'll be taking the day to reflect on that.
OranjBox will return to regular business hours on October 1.

09/23/2026

If the only time you call IT is when something breaks, you’re already playing catch-up.

IT should be part of the conversation before the decision gets made, not brought in afterward to figure out how to make it work.

Moving offices? Hiring more people? Buying new software? Changing how your team works? Bringing on a new vendor? Those decisions can all have technology, security, and cost implications that are much easier to deal with before the fact.

Fixing problems is part of IT support. Helping you avoid them, plan around them, and make better technology decisions is what an IT partner should be doing.

So, when was the last time you called IT before making a big decision?

At OranjBox, we want to be part of those conversations.

We can help.

📞 780-441-6539
✉️ [email protected]
🌐 oranjbox.ca

09/14/2026

Cybersecurity is more than antivirus.

One of the statistics that stood out to me at CanITCon was just how significant Business Email Compromise (BEC) has become.

According to the FBI’s 2025 Internet Crime Report:

🔶 Business Email Compromise — $3.05 BILLION in reported losses
🔒 Ransomware — $32.3 million
🦠 Malware — $19.4 million

That comparison matters.

Most businesses know they need protection against ransomware and malware. And many IT providers have invested heavily in endpoint protection, antivirus and backups to address those threats.

But BEC is different.

The attacker may not need to install malware or encrypt a single computer. They can compromise an account, impersonate an executive or trusted vendor, insert themselves into an existing conversation, change banking information, or simply convince someone to send money where it shouldn’t go.

Your endpoint protection can’t necessarily stop an employee from acting on a convincing email from someone they believe they trust.

That’s why cybersecurity needs to be layered.

Email security. Identity protection. MFA and Conditional Access. Endpoint security. Security awareness training. Monitoring. Backups. And, importantly, processes that help people recognize and verify unusual requests.

Protecting the computer isn’t enough. You need to protect the person using it and the identity behind it.

If your cybersecurity strategy begins and ends with antivirus and backups, there may be a significant gap in your defenses.

Layered security. We can help.

📞 780-441-6539
✉️ [email protected]
🌐 oranjbox.ca

07/01/2026

🍁 Happy Canada Day!

Please note that OranjBox will be closed on Wednesday, July 1st in observance of Canada Day.

We will resume regular business hours on Thursday, July 2nd.

While our office will be closed for the holiday, urgent support remains available. Simply call our main office and follow the prompts for emergency assistance.

We wish all of our clients, partners, friends, and fellow Canadians a safe, relaxing, and enjoyable Canada Day! 🍁

Happy Canada Day from all of us at OranjBox.

06/15/2026

🚨 OranjBox Threat Watch: Fake IT Support Calls Through Microsoft Teams

We are seeing a growing trend of social engineering attacks conducted through Microsoft Teams, where threat actors pose as IT support personnel to gain unauthorized access to business environments.

The attacks often follow a simple pattern:

✅ A Teams message or call arrives from someone claiming to be IT Support, Help Desk, or an Administrator.

✅ The user is told they need a password reset, security update, or urgent assistance.

✅ The attacker convinces the user to:
• Enter their credentials into a fake login page
• Share their screen
• Install remote access software such as AnyDesk
• Grant control through Windows Quick Assist

Once access is granted, attackers can move quickly to email systems, company data, and other business resources.

What your staff should remember:

🔹 Your IT provider should never ask for your password.

🔹 Be suspicious of unsolicited Teams calls or chats claiming to be support.

🔹 Never install remote access software unless you've verified the request through a trusted channel.

🔹 If someone contacts you unexpectedly and asks for remote access, hang up and call your IT provider directly.

For organizations, now is a good time to review:
• External Teams communication settings
• Quick Assist and remote access tool policies
• Multi-factor authentication deployment
• Security awareness training

Social engineering remains one of the most effective attack methods because it targets people, not technology.

If your organization uses Microsoft 365 and Teams, make sure your team knows what these attacks look like before they encounter one.

04/02/2026

01/22/2026

🚨 Microsoft Service Outage – What We Know So Far

Microsoft is currently experiencing a widespread service outage affecting multiple cloud-based platforms. Reports indicate disruptions to services such as Microsoft 365, Teams, and other dependent workloads, with impacts varying by region and tenant.

Microsoft has acknowledged the issue and is actively investigating and working toward full service restoration.

For those interested in the latest details and live updates, you can read more here:
👉 https://www.tomsguide.com/news/live/microsoft-down-live-updates-outage-jan-22-26

At OranjBox, we’re closely monitoring the situation and advising clients as updates become available. Events like this are a reminder of why business continuity planning, redundancy, and clear communication channels matter, even with large, trusted cloud providers.

If you have questions about how outages like this could affect your environment or how to better prepare for them, we’re happy to help.

What’s in the Box? 📦

Multiple Microsoft services aren't working