Module 1 of StartCloud's Cyber Hygiene for Staff learning pathway, in five short units with a knowledge check: why cyber attacks are automated rather than personal, the four things criminals actually want (money, mailboxes, data and relationships), the common entry points including the anatomy of a typical invoice fraud attack, and the pause-and-check habit plus no-blame reporting culture that make staff the strongest defence.
Why Cyber Criminals Target Businesses Like Yours
It is not personal, it is automation
Let us clear something up on day one: nobody in a hoodie sat in a dark room, studied your business, and picked you. That is the movies. Real attacks are mostly automated. Software scans every address on the internet for weak spots, and phishing emails go out by the million to any inbox that exists. Your business gets probed the same way your neighbour's does: constantly, cheaply, and without a single human thinking about you.
That sounds almost comforting until you follow the logic. If the attacks are automated and free to send, criminals do not need to be picky. They just need someone, somewhere, to click. And when a bite comes back from a small business, it is often the better catch: real money in the bank, and thinner defences than the big end of town. No security team, no fancy monitoring, one very busy owner.
How often a cybercrime was reported to the Australian Signals Directorate in 2024-25. Over 84,700 reports in a single year.
Average self-reported cost of a cybercrime for an Australian small business in the same report, up 14 per cent on the year before.
Bots do not sleep, take leave, or care what industry you are in. They scan everything connected to the internet, all the time.
This is the most expensive sentence in Australian small business. Being small does not make you invisible, it makes you easier. The bot that found your login page has no idea whether you are a two-person plumbing outfit in Balcatta or a bank. It only knows whether the door opened. The good news, and the whole point of this course, is that most of those doors are easy to keep shut.