What To Do If Hacked

We are living in a constantly evolving digital world where cybercrime is becoming part of everyday life for everyone. Corporations, organizations, and individuals alike are being hacked on a daily basis, with hackers often slipping away into the night unscathed. This article will discuss the different types of hacking that exist, how to identify if you’ve been hacked, what to do if hacked and recommendations on how to avoid being hacked again.

Different types of hacking: From phishing to social engineering

There are various types of hackers and because of that there are different types of hacking attacks that are used today to infiltrate computers or other IoT devices, however we will be focusing on the most common types. These hacking attacks can be perpetrated against organizations or individuals.

• Phishing: This attack type is perpetrated via E-Mail. The hacker will send a fake E-Mail from a legitimate business; the E-Mail will appear legitimate and will require the recipient to click on the link included in the E-Mail that will redirect the recipient to a fake website where they will be required to input their login details. This will allow the hacker to steal their login credentials without the recipient realizing.
• Malware: This attack type is perpetrated via a link. The victim of the attack will click on a malicious link on a website or one they received via a phishing E-Mail and the malware will be installed on their devices or network. This will allow the hacker to steal their data, install suspicious software on their device or remove the victim’s access to their device.
• Ransomware: This attack type is similar to malware, however once the hacker has stolen the victim’s data, the hacker will delete or encrypt all the data off the victim’s device or network and hold it for ransom. The victim will be expected to pay the sum requested by the hacker in order for their data to be restored or the decryption key provided.
• Social Engineering: This attack type is where a hacker manipulates someone into disclosing personal or confidential information via a telephone call, in person, or online. The hacker will prey on the employee’s empathy and kindness to gain access to unauthorized data and systems. 

Register for our free awareness courses on our eLearning platform.

How to identify if you’ve been hacked: Signs to look for

There are many signs that will tell you if you’ve been hacked or not; some signs will be small and some big. The signs will vary depending on what was hacked such as E-Mail, social media accounts, bank accounts, or business credentials such as business account login information. Some of the signs may include:

• Receiving notifications or E-Mails that your password was changed.
• Receiving E-Mails that there is a new device logged in to your account from a different location.
• You cannot log in to your account.
• Your cursor is slow or moving without you touching it.
• You are getting popups or ads on your device.
• You are being redirected to unfamiliar websites when attempting to use your device.
• Your antivirus software has been disabled.
• Your device is overheating or making strange sounds.
• There are strange messages, E-Mails, or purchases from your accounts.

What to do if you’ve been hacked: Steps to follow

If any of these signs are occurring on your devices, whether they are personal or professional, they need to be addressed immediately. The hack has already happened, so now it’s time to identify what data or information has been compromised, the relevant device(s) and take the necessary steps to undo the hacker’s access and any possible damage they might have done.

1. Quarantine the affected device. This includes isolating it off the network by disconnecting the connection to the Wi-Fi. This will remove the hacker’s connection to the device.
2. Identify which accounts or profiles were affected. This is to ensure you can identify what data might be affected and determine relevant next steps.
3. Change passwords. Make sure new passwords are strong; include at least 12 characters, with small letters, capital letters, numbers, and symbols in random order to prevent them from being hacked again. If the same password was used for multiple accounts, change those too.
4. Install antivirus software and run a scan. This will determine if malware was installed on your device and allow you to remove it and restart your device.
5. Contact any institutions, such as banks or identity theft bureaus, if you suspect your identity has been stolen. They will provide recovery steps and support you in that process.
6. Recover your accounts. Most social media accounts, email services and computer account services have ways to restore your account.
7. Make sure all software is up-to-date. This will ensure the software installed on your device has the latest protection from the organization that produced it.

How to avoid being hacked again: Preventative measures

Once the above steps have been taken to fix the hack, there are things you can do to avoid it happening again in the future.

• Ensure strong and effective antivirus software is installed on your device(s).
• Apply multi-factor authentication to all accounts if possible. This will make it harder for hackers to hack into your accounts or devices in future as any logins will need to be authorized.
• Always have a recent external backup. This backup should be isolated from the network to avoid it being damaged or stolen in the event of a hack.
• Use a strong and effective password manager and change your passwords regularly to ensure hackers can’t log in to your accounts if your information is released in a data breach.
• Organizations should install intrusion detection systems on their network devices to detect if hackers are on the network.
• Be aware of current trends in hacking and the steps you can take to avoid falling victim to them.
• Do not share personal information on social media. This information can be pieced together by hackers to hack into your accounts. Read our tips on staying safe on social media.

Being hacked can be a scary experience, but it’s important to remember that the hack can be prevented if some basic steps are followed. Social Engineering attack types are constantly evolving as software and apps evolve, making awareness one of the most important protections against hacking.

Conclusion: It is easy to be hacked so keep all security measures up to date

To conclude, different types of hacking such as phishing or ransomware exist and pose a risk to individuals and organizations alike. There are ways to determine if you have been hacked, such as receiving notifications that your password was changed without your permission. Some suggestions for steps to follow if you’ve been hacked include changing your passwords regularly, recovering your accounts and installing antivirus software. Finally, some recommendations on how to avoid being hacked in the future include using an effective password manager and enabling multi-factor authentication on various accounts, be they for social media or business.

To ensure your organization to fully protected against any type of attack, contact us for more information.