Cyber Threat Monthly Newsletter from Fluid One

New 2FA Phishing Kit Astaroth Threatens User Logins

IT security has long been a game of cat and mouse, with cyber criminals and security professionals constantly evolving their tactics. A new threat, the Astaroth phishing kit, highlights this ongoing battle by targeting two-factor authentication (2FA)—a security measure once seen as a reliable defence.

Understanding MFA and 2FA
Passwords have traditionally been the primary line of defence in digital security. However, due to their vulnerabilities, multi-factor authentication (MFA) was introduced to enhance protection. MFA requires users to provide two or more forms of identification—commonly passwords alongside biometric data or one-time codes—before granting access. 2FA, a subset of MFA, typically involves just two methods.

What makes Astaroth different?
While MFA and 2FA have significantly improved security, they’re not immune to attack. Phishing remains a popular tactic, with scammers posing as trusted entities to steal credentials. Astaroth takes this a step further.

First appearing in January 2025, Astaroth is a sophisticated phishing kit designed to intercept 2FA codes in real-time. It works by creating convincing replicas of legitimate login pages, tricking users into submitting their credentials. Once entered, the kit captures both the password and 2FA code, allowing attackers to access the real site immediately—bypassing what would normally be a strong security barrier.

How the attack works:

1. A user receives an email that appears to be from a trusted source (e.g., Microsoft or Gmail).
2. Clicking the link directs them to a fake but authentic-looking login page.
3. As the user enters their credentials and 2FA code, the kit relays the information to the real site, granting the attacker access.

What sets Astaroth apart is its ability to function as a live "man-in-the-middle," capturing credentials and 2FA tokens in real time. Traditional phishing kits often stop at collecting static login details—this one goes further.

Protecting Yourself
Vigilance is key. To protect against Astaroth and similar threats:

• Be sceptical of unexpected login requests or urgent emails.
• Always double-check URLs—legitimate Microsoft logins, for instance, use https://login.microsoftonline.com.
• When in doubt, contact your IT team before clicking.

Need support with your IT security?

Cyber threats evolve constantly, making awareness your best defence. At FluidOne, we offer training to help users stay informed, along with solutions like MFA, mobile device management, and secure networking. You can reach us through https://www.fluidone.com/contact, call us at 01273 384100 or email us at brighton@fluidone.com to get in touch with our experts today to find out how we can help protect your business.

Hemiko - Notice of Works on Richmond Road from 2 June – 22 July 2025 

We will shortly be commencing works which will affect Richmond Road in Worthing. To receive regular updates on upcoming works in Worthing, please sign up to our mailing list by emailing worthing@hemiko.com, and a member of our team will add you to our distribution.

What works are taking place?

Phase 1:
Hemiko will be working on the southbound lane of Chapel Rd and the section of Richmond Rd between Worthing County Court and the Chapel Rd junction, resulting in a westbound lane closure on Richmond Road.

Chapel Rd will remain open two-way, with a filter system and temporary traffic lights in place at the Richmond Rd junction to control the flow of traffic. The westbound lane of Richmond Rd will be closed and traffic entering Chapel Rd from Richmond Rd will only be able to travel northbound. Vehicles wishing to travel westbound from Chapel Rd onto Richmond Rd will be diverted via Chapel Rd, Teville Rd, and Christchurch Rd.

Pedestrians will also be unable to cross from the central island on the Richmond Road junction to the pavement outside The Venue but will be able to safely pass onto the east side of Chapel Rd to walk into the town centre.

Several parking bays will be suspended on Richmond Rd, including two disabled bays outside The Venue. Alternative disabled parking is available at the nearby Civic Quarter Car Park; further information on disabled parking is available on the Council website: https://www.adur-worthing.gov.uk/parking/disabled/. By 08:00am on 2 June 2025, all cars will need to be removed from the on-street parking bays on Richmond Rd as illustrated in the diagram. The bus stops outside Worthing Library, Worthing Town Hall, and Worthing Tabernacle Church will be suspended for both phases of works; travellers are encouraged to contact Stagecoach and Compass Travel for further details.

Phase 2:
For the second phase, Hemiko will continue to work on the southbound lane of Chapel Rd and a portion of Richmond Rd. Traffic will continue to flow both ways on Chapel Rd, facilitated by a filter system and temporary traffic lights. Traffic entering Chapel Rd from Richmond Rd will also now be able to turn southbound or northbound.

The bus stops outside Worthing Library, Worthing Town Hall, and Worthing Tabernacle Church will remain suspended over the second phase of works. Likewise, the crossing from the central island on the Richmond Road junction to the pavement outside The Venue will be inaccessible. The parking bays illustrated in the diagram above will remain suspended during this time.

Towards the end of Phase 2, Hemiko will need to close Richmond Road for five days. The dates of this closure and the diversion route for traffic will be communicated in due course, giving sufficient notice to residents and visitors.

Health, safety and accessibility

The health and safety of local residents and our staff is a top priority. We will be installing safety fencing around the site, to keep everyone safe. We have undertaken health and safety assessments of the works and will continue to do these throughout.

If you are a resident of the road with accessibility requirements or vulnerability, please let us know on 01903 337364 or by emailing us and we would be happy to meet with you to discuss your needs, and ensure safe access is always available to your property or place of work.

Thank you – and who to talk to if you’d like more information or to provide feedback

We know that no one likes disruption on their streets. We will be working very hard to minimise the disruption as much as possible. Thank you for your cooperation whilst we complete these essential works.

If you have any concerns and would like to speak to one of the local team, you can reach us on 01903 337364 or by emailing worthing@hemiko.com. Further details on how to contact us are accessible on our website, https://hemiko.com/contact-us.

You can also feel free to speak to staff when you see them on site.

Whitehead-Ross Education - Case Study

What do you do?

Whitehead-Ross Education integrates education, recruitment, and ongoing employer support to build a sustainable employment network. Our efforts connect businesses with skilled talent, provide job seekers with meaningful opportunities, and contribute to long-term workforce development. Whitehead-Ross Education streamline recruitment for multiple employers across our sites by optimising their hiring process and connecting them with untapped talent pools. By providing insight into the local labour market, we help employers make informed hiring decisions and change the lives and careers of our candidates.

Whitehead Ross Education does not charge for any recruitment support as it is fully funded by The DWP. If you would like to contribute to your community’s economic development and gain dedicated, hardworking employees, reach out to Lili on lilifoskett@wrecltd.co.uk

Why did you join the Chamber?

I joined the Chamber to connect with my local community and expand my network. Working for a government-funded employability service, this aligns perfectly with supporting our customers by connecting with local employers seeking staff - at no cost, no contract, and no agency fees. The Chamber hosts fantastic networking events where I enjoy meeting like-minded professionals, strengthening relationships, and growing my network. I’m grateful for the opportunity to engage with both new and familiar faces, helping to build strong local connections. A huge thanks to the Chamber for making this possible in Worthing and the surrounding areas.

What’s your favourite thing about being a member? 

My favourite thing about being a Chamber member is the incredible networking opportunities. The events bring together like-minded professionals, making it easy to build meaningful connections with local businesses. As someone working in employability services, these relationships are invaluable for supporting job seekers and helping employers find staff - without cost or contracts. I love the sense of community, the welcoming atmosphere, and the chance to meet both familiar and new faces. The Chamber truly helps businesses and individuals thrive, and I’m grateful to be part of it.

Carpenter Box Goes from Strength to Strength at Chichester

The Chichester office of Sussex and South East accountancy firm Carpenter Box continues to go from strength to strength, thanks to a successful recruitment drive and an office refurbishment that’s providing further room to grow.

The firm has had an office in Chichester since October 2020 and following the recent refurbishment, has seen the number of employees based there increase from 20 to 30 – and there’s no sign of slowing down.

The Chichester office continues to recruit to satisfy demand for the firm’s professional services, including company secretarial support, corporate audit and assurance work, tax planning advice, an outsourced finance function and estate planning.

Sarah Fitzgerald, Partner, who heads-up the office, commented: “Chichester is home to many great businesses and entrepreneurs, and we are delighted to be a growing part of that community and to be providing career opportunities for local people.

“Our client profile reflects the area’s commercial landscape and includes agriculture and viticulture businesses as well as manufacturers, service companies and entrepreneurs. They each face particular challenges at the moment, whether that’s changes to inheritance tax or increases in employer national insurance. Our aim is to help them navigate this environment successfully and to assist them in becoming more efficient and agile.”

One of the growth areas for the firm is its Outsourced Finance Function, which businesses are increasingly using not just for bookkeeping and accountancy support, but to tap into director level expertise.

www.carpenterbox.com

Support Link to Hope and take on a Transylvanian Sponsored Cycle Challenge!

What is it? An 8 day trip ( 6 days cycling) sponsored challenge through the heart of Transylvania, Romania. A chance to experience stunning scenery, un spoilt rural villages, Saxon UNESCO towns and historic fortified churches. We will be cycling for 335km/210km in a circular loop through the heart of Transylvanian.

There are 10 places and the challenge will take place between 3rd – 10th October 2025

This amazing challenge to raise funds for Link to Hopes education and social care projects. Alongside this we are also raising funds for a wonderful project that supports marginalised adults and children with disabilities based in Brasov.

At the end of the cycle challenge there will be a chance to meet the Hope Without Limits team and see and hear about how your sponsored funds is going to be spent.

Price £795 per person (excluding luggage and drinks)

Includes flights, accommodation, all meals, guides, transfers, bike hire, repairs and maintenance, entrance fees, luggage transfer and medical support.

As we are doing this to raise funds then we ask each cyclist to try to raise £1,000. This might seem daunting but we support you all the way. It’s in our interest to do everything possible to help you raise those funds.

Find out more here

Prestigious Double Award Win for TERRA

Since acquiring Tottington Manor 4 Years Ago, the growth and the brand positioning of their restaurant has achieved huge recognition, only one year after the launch of their TERRA Restaurant Sussex.

Following the visit last week of the Nationally recognised AA Inspector, TERRA Restaurant has been awarded their first AA Rosette. Helen Pomery Director said “This recognition is the result of four years of really pushing our team to be the best they can be and receiving this long awaited accolade is the biggest reward for them. Ultimately our guest feedback drives us forward every day and helps push us even further in our mission to receive our next Rosette, our journey has only just begun”.

Chris Hilton, Executive Head Chef at TERRA said “I’m over the moon and so proud to have been part of the journey that Tottington Manor and TERRA Restaurant has been on so far and I continue to be very excited about what the future holds, there is more to come”.

This news came just a week before the call from Restaurants Brighton who spearhead the highly regarded hospitality equivalent of the Oscars! We were incredibly honoured to have won our first BRAVO Award for Most Sustainable Restaurant. Knowing we were up against some very strong contenders we were quite overwhelmed but sustainable hospitality has been our primary focus from day one. With rising fuel costs, it became a priority to eliminate fossil fuels, dramatically reduce our wastage and choosing Sussex ingredients across 90% of our food menu and 25% of our Drinks & Wine List, not only are we actively supporting our local economy, it just feels like the right thing to do.

Last year was the first time we were nominated for a BRAVO and we were really honoured to have been placed at 15^th place for Best Sussex Restaurant. Appreciating the quality restaurants across Sussex also nominated, this gave us a huge sense of achievement but in 2025, we were nominated in 5 categories; Best Sussex Restaurant, Best Team, Best Wine List, Best Sunday Roast and Most Sustainable. Our biggest win was winning the Most Sustainable Restaurant category, however, achieving 2^nd place as Best Sussex Restaurant was beyond words, the whole team feel hugely rewarded because our guests voted for us, there can be no greater recognition. Across all categories we achieved Top 10 for 4 and Top 20 for all 5 nominations out of the thousands nominated. We cannot thank everyone enough, especially Restaurants Brighton who work so hard to champion the Sussex Hospitality Sector.

TERRA Restaurant Sussex is an AA Rosette standard South Downs facing restaurant at Tottington Manor which fully caters for events with AA 4 Star Restaurant with Rooms Award. A fine quality destination to entertain, eat well, drink well and sleep well.

Carpenter Box announces merger with Clark Brownscombe

South East accountancy firm Carpenter Box is extending its office network into East Sussex with news that it is to merge Lewes-based Clark Brownscombe into its south coast operations.

Carpenter Box currently serves a growing client base from offices in Worthing, Brighton, Crawley, Chichester, Portsmouth and London and this latest announcement marks another important step in the firm’s ongoing expansion strategy.

Clark Brownscombe will continue to operate from the office in Lewes and will adopt the Carpenter Box brand later this year. Current Directors at the firm, Robert Scrivins and Vicky Anderson, will become Partners at Carpenter Box following the merger, which will also see six members of staff join the firm.

Commented Alan Edwards, Managing Partner at Carpenter Box: “I’m thrilled to announce this merger with Clark Brownscombe and delighted to welcome the firm into the Carpenter Box team. They are a perfect fit for our growth strategy, helping us to expand into East Sussex with a Lewes office. Together, we bring nearly 200 years of combined experience in tax planning, advisory services and financial planning and share the same customer service ethos.”

Robert Scrivins added: “This merger is a significant milestone in our journey. We currently have expertise in business, charity and individual accounting and taxation matters and by joining with Carpenter Box, we will unlock additional resources and services that will directly benefit our clients through access to specialist knowledge.”

Carpenter Box, part of the Sumer Group of regional accountancy practices, is an award-winning firm of chartered accountants, tax specialists and business advisers with a reputation for innovation and excellence. The firm, which now has 23 Partners and over 250 members of staff, operates across the south east and in London, with specialist teams helping businesses and entrepreneurs succeed in a profitable, sustainable and tax-efficient way.

Photo L-R: Alan Edwards, Robert Scrivins, Vicky Anderson, Stuart Noakes

www.carpenterbox.com

www.clarkbrownscombe.co.uk

Electric Storm Youth Charity Announces New Leadership 

Say Hello, Wave Goodbye

Electric Storm Youth (ESY), a dedicated charity supporting young people across Sompting and Lancing for over 18 years, is proud to announce a leadership transition as it embarks on an exciting new chapter.

We extend our sincere thanks to John Randall, who has served as Interim CEO over the past year. John first joined ESY four years ago as a fundraiser, bringing energy and commitment to the role. In 2024, he stepped into the position of Interim CEO, guiding the organisation through a critical period of growth. Under his leadership, ESY implemented key developments and secured significant funding, including vital support from The National Lottery.

Marion Peskett, Chair of Trustees, shared:

“John has been a tremendous asset to Electric Storm Youth. His dedication, leadership, and ability to bring people together have had a lasting impact. We are incredibly grateful for all he has contributed during his time with us.”

As we look ahead, we are delighted to welcome Karen Jefford CMgr CMI as the new CEO of Electric Storm Youth.

Karen brings extensive leadership experience across the business, education, and charity sectors. A lifelong resident of Lancing, she has a deep understanding of the local community and a clear passion for supporting young people. With 13 years in secondary education, as well as being a mother of two and grandparent, Karen brings both professional insight and personal connection to her new role.

Karen is committed to building on ESY’s strong foundation. Her vision includes expanding services, developing new revenue streams, and strengthening the charity’s resilience, ensuring that ESY remains a vital and visible presence at the heart of the community.

Karen Jefford CMgr CMI, CEO of Electric Storm Youth, said:

“Having continued to engage in education, I see every day how important organisations like Electric Storm Youth are in helping young people navigate the journey from school into adulthood. If we at ESY can support, encourage, and build confidence among our young people, we’re not only helping them today, but we’re also investing in a stronger, more resilient future for everyone. I’m honoured to be part of this next chapter and to lead a charity that truly sits at the heart of our community.”

As we mark this transition, Electric Storm Youth remain firmly committed to its mission: supporting teenagers now and laying the foundations for the future.

www.electricstormyouth.co.uk

Tax and Investment Tips in a Volatile Landscape

How best to navigate the complexities of the current tax and investment landscape in a volatile economic environment?

That was the question that attracted more than 100 clients of South East accountants Carpenter Box to a special personal finance seminar in Horsham.

Roy Thompson, Head of Financial Services at Carpenter Box Financial Advisers, outlined how ‘fiscal drag’ caused by the freeze on allowances for personal tax, inheritance tax and ISAs heightened the need to make the most of investment returns. Moreover, the proposed inheritance tax treatment on unused pension pots from April 2027 will make it more important than ever to adopt a family-based approach to personal finance and tax planning.

He outlined how the pension changes, as proposed by the Government, could significantly increase death duties, but then highlighted a number of current options, that would help mitigate the inheritance tax take.

Inheritance tax was a particularly thorny issue for family farms, said David Crowter, Partner & Head of Private Client Services at Carpenter Box.

“With business and agricultural property relief changing from 100% on certain qualifying assets to being restricted to 100% on the first £1m from 6^th April 2026, many farming families are looking for answers. So, some of the things I have been suggesting to clients are that they review their Will to ensure it reflects their current wishes, take advice on gifting and valuation planning, and use life cover and pension drawings to reduce the amount to be paid in IHT.”

Henry Wilson, Partner, Senior Portfolio Manager at LGT Wealth Management, provided an overview of global financial markets, pointing out that while the global economy remains resilient, there will be investment opportunities. However, diversification and selectivity will be key in navigating the somewhat volatile and shifting economic and geopolitical landscape.

Photo (l-r) shows: Roy Thompson, Head of Financial Services at Carpenter Box Financial Advisers, Henry Wilson, Partner, Senior Portfolio Manager at LGT Wealth Management and David Crowter, Partner & Head of Private Client Services at Carpenter Box.

www.carpenterbox.com.

IT Security vs Cyber Security: the foundation vs the frontier

Securing IT infrastructure is crucial for modern business. But while IT security forms the foundation of protection, it alone is just one piece of the puzzle, with cyber security filling the critical gaps.

IT Security: the foundation

IT security is comprehensive, covering everything from hardware and software protection to managing access, ensuring data integrity, and disaster recovery. It acts as a brick-and-mortar defence—locking doors, securing networks, and safeguarding sensitive information. IT security focuses on protecting the infrastructure itself, ensuring only authorised access to vital resources and keeping systems operational against internal and external threats.

Typical IT security measures include:

• Endpoint Security: Safeguarding devices like computers and phones from malware.
• Data Security: Encrypting sensitive data to prevent unauthorised access.
• Disaster Recovery Plans: Ensuring rapid recovery from breaches, data loss, or outages.
• Access Control: Enforcing multi-factor authentication (MFA) for account protection.

These measures are essential for securing internal systems and sensitive data. However, they often lack the flexibility and focus needed to tackle modern cyber threats.

Why IT Security needs Cyber Security

IT security provides the foundation, but it doesn’t address the dynamic nature of cyber dangers. Threats like ransomware, phishing, and advanced persistent threats (APTs) evolve rapidly, requiring specialised, proactive defenses. That’s where cyber security comes in.

Cyber security focuses on protecting internet-connected systems from real-time threats such as hacking and malware, which can bypass traditional IT security. It brings an extra layer of defence, emphasising the detection and response to attacks as they happen. Key aspects of cyber security include:

• Threat Intelligence: Identifying emerging cyber threats before they can cause damage.
• Incident Response: Having a plan to mitigate the impact of an attack.
• Continuous Monitoring: Keeping a watchful eye on systems for signs of compromise.

Without cyber security, your organisation could remain vulnerable to threats that IT security is not designed to handle.

The future of security

As technology evolves, security strategies must adapt. AI, for example, offers huge benefits but also exposes organisations to new security risks. Both IT and cyber security are needed to manage these risks and ensure compliance. Cyber security helps organisations prepare for secure AI adoption, while IT security protects data and enforces security policies.

The necessity of both

In conclusion, IT security provides the essentials for protecting infrastructure, while cyber security actively defends against the evolving cyber threat landscape. A robust defence requires both, ensuring systems are not only secure but resilient against future cyber challenges.

At FluidOne, we provide comprehensive IT and cyber security solutions, empowering businesses to thrive in the AI era. For more information, you can reach us through https://www.fluidone.com/contact, call us at 01273 384100 or email us at brighton@fluidone.com.