MEPX
Chapter 10 of 10All chapters
  1. 1Who is actually after you
  2. 2Passwords
  3. 3Two factor authentication
  4. 4Phishing and social engineering
  5. 5Updates and patching
  6. 6Encryption
  7. 7Networks and public wifi
  8. 8Malware and ransomware
  9. 9Access and least privilege
  10. 10When something goes wrong

Chapter 10 of 10

When something goes wrong

The first hour matters.

Immediate steps

Disconnect the affected machine from the network, change passwords from a device you trust, and turn on two factor where it was missing. Do not wipe anything you may need as evidence.

  • Check for mail forwarding rules an attacker may have added.
  • Tell the bank early if payment details were involved.

Afterwards

Work out which door was open and close that one. A compromise with no explanation usually means it can happen again, and blaming the person who clicked is the least useful response.