By Shari Onda, Digital Forensic Analyst

In today’s digital age, the security of our electronic devices is more critical than ever. Despite our best efforts, there is always a risk of our devices being hacked and controlled by malicious actors. If you find yourself in such an unfortunate situation, it’s crucial to take immediate and strategic action to protect your personal information and regain control of your devices. Here are the recommended steps to deal with this alarming scenario:

1. Run Security Scans

Perform thorough security scans on all affected devices using reliable antivirus and anti-malware software. Ensure the software is up to date and run full system scans to detect and remove any malicious software. If possible, use a reputable bootable antivirus tool that can run from a USB drive, as some sophisticated malware can hide from traditional antivirus software installed on the system. This step is crucial because certain malware, such as keyloggers, can capture everything you do, even after you reset your networks, devices, and passwords, taking you back to square one.

2. Disconnect From the Internet

The second and most crucial step after running security scans is to disconnect all affected devices from the internet. Disconnecting from the internet helps prevent the hacker from continuing to access your information and devices remotely. You can disconnect by turning off Wi-Fi and Bluetooth or unplugging Ethernet cables.

3. Change Your Internet Service Provider (ISP) Internet Router Password

Your ISP router is pre-programmed with a username and password, which you can find on a sticker located on the bottom of the router. Because these are preconceived passwords, they can be easily guessed by perpetrators. Changing these to strong, unique passwords will help secure your network from outside attacks.

4. Change All Passwords

As soon as you are offline, start changing all your passwords. Use another secure, unaffected device to do this. Begin with your email accounts, as these are often the gateway to other accounts. Use strong, unique passwords for each account and enable two-factor authentication (2FA) wherever possible to add an extra layer of security.

5. Update Your Software

Ensure that your operating system, applications, and firmware are up to date. Software updates often include patches for security vulnerabilities that hackers exploit. Setting your devices to update automatically is a good practice to prevent such vulnerabilities.

6. Check and Secure Your Accounts

After securing your devices, check your accounts for any unauthorized activity. This includes email, social media, banking, and any other online services you use. Report any suspicious activity to the respective service providers immediately and follow their guidance on securing your accounts.

7. Enable Stronger Security Measures

Beyond changing passwords and enabling 2FA, consider additional security measures such as biometric authentication (fingerprint or facial recognition), security keys, and encryption. These steps can significantly enhance the security of your devices and accounts.

8. Consult a Professional

If the breach is extensive or you need clarification about the extent of the hack, consult a cybersecurity professional. They can provide a more thorough assessment of your situation and help you take appropriate steps to secure your data and devices. In some cases, law enforcement may also need to be involved, especially if sensitive information has been compromised.

9. Educate Yourself and Stay Vigilant

Lastly, educate yourself about common cyber threats and best practices for cybersecurity. Staying informed about the latest trends in cybercrime and how to protect against them can help you avoid future incidents. Regularly review and update your security measures to keep pace with evolving threats.

10. Report the Incident

If the hacker threatens injury to you or has damaged or stolen property or funds, report the incident to the police via the non-emergency line. While they may not be able to help immediately, it is vital to create a police record if further action is needed at a later date. This documentation can be crucial for legal, insurance, or further investigative purposes. Additionally, inquire if your local police department has a cybercrime unit that can offer more specialized assistance.

11. Seek Legal Counsel

If the situation is prolonged and you are unable to stop the hacking, consult an attorney. Some attorneys specialize in cyber law and digital privacy, and they can help you create restraining orders and utilize other legal tools to enhance your protection. They can also assist in building a case for civil litigation if you seek damages for the hacking incident. Legal counsel can provide valuable guidance on navigating the complexities of cybercrime and your rights.

Conclusion

Discovering that your electronic devices have been hacked is a stressful and potentially devastating experience. However, by taking immediate and informed actions, you can mitigate the damage and regain control of your digital life. Disconnecting from the internet, changing passwords, running security scans, updating software, securing accounts, enabling more robust security measures, consulting professionals, and educating yourself are all critical steps in this process. Stay proactive and vigilant to protect your digital assets from future attacks.

Sources:\

1. Norton. “How to create strong passwords and keep them secure.” Norton. Accessed May 30, 2024.
2. Malwarebytes. “How to use bootable antivirus tools to clean malware from your PC.” Malwarebytes. Accessed May 30, 2024.
3. Microsoft. “Why you should install updates.” Microsoft. Accessed May 30, 2024.
4. Google. “Advanced Protection Program.” Google. Accessed May 30, 2024.
5. Cybersecurity & Infrastructure Security Agency (CISA). “Cyber Essentials.” CISA. Accessed May 30, 2024.
6. TechRadar. “How To Change Your Router Password.” TechRadar. Accessed May 30, 2024.