Immediate actions (first 15 minutes)
- Disconnect from the internet: turn off Wi‑Fi and unplug Ethernet. If the device shows active remote control, power it off.
- Use a trusted device: from a different, secure device (not the possibly compromised one), change passwords for your email, bank, and key accounts.
- Enable 2FA: turn on two‑factor authentication for accounts that support it to stop attackers reusing stolen passwords.
- Contact your bank: if financial information or transfers are involved, notify your bank or card issuer immediately and freeze accounts if necessary.