← All situations
Emergency Mode
Someone had remote control of your computer
You gave someone remote access, or software gave it to them. Disconnect the device and work from a different one.
What this assumes
- Use a different device. Anything typed on the affected one may still be observed.
- Internet access on that other device.
Do these first
Containment. Minutes matter here and nothing else does.
- Disconnect the affected device from the network. Do not simply close the remote access software.
- From a different, trusted device, change your email password first, then financial accounts.
- Sign out all sessions on those accounts.
- Call your bank if you signed in to any financial account during the session.
Afterwards
When the immediate situation is over, a plan is what keeps it from happening the same way twice. That needs an account; this page never will.
Build a plan