I Clicked the Link… Now What?

Phishing attacks come in many forms and produce different results depending on the motivation. Some attacks infect systems with viruses or malware while others send you to malicious websites in hopes that you fall victim. Because the intent and motivation varies among phishing attacks, the actions you take may vary by situation as well. No matter the intent, you should first avoid clicking on phishing links. However, we are all human, and bad clicks do happen. Here's what to do if this happens to you:

If you are at work:

• Stop what you are doing.
• Immediately contact the IT helpdesk or appropriate party as timely reporting empowers your organization to act quickly.
• Follow instructions given by IT professionals to mitigate damages.

If you are at home:

• Disconnect your computer from the network.
• Run antivirus or anti-malware scans on all files and folders following instructions on any threats discovered.
• Change all your passwords. This is a tedious step but one that could save you future trouble.
• If you are familiar with the Windows recovery process, this is a good option in some cases. This allows you to perform a full system reset. Warning: only do this if you have a good backup as this will delete all your files.
• Seek professional help.

Also, keep in mind that phishing is not limited to email. Text messages, social media, and phone call scams are becoming more and more common today. Stay alert and treat any odd requests with skepticism until you verify the source. Remember to always think before you click!