Something looks wrong. Start with the one that matches.
Email that looks wrong
- A customer got an email you never sent
- A Forwarding Rule in Your Email You Didn’t Create
- A Look-Alike Domain Is Sending Invoices in Your Name
- A Supplier Emailed New Bank Details: Before You Pay
- An Unusual Sign-In Alert Landed: Is It Real?
- Business Email Compromise: How It Shows Up in a Mailbox
- Business Email Hacked: Take the Account Back in Order
- Emails That Appear to Come From Your Own Address
- Password Reset Emails You Did Not Request
- Replies to Customers You Never Wrote: Who Got Them
- Sign-In Approval Prompts on Your Phone You Didn’t Start
- Someone Clicked a Phishing Link: What to Do First
- SPF, DKIM, and DMARC: Who Is Allowed to Send as You
- You Gave Your Password to a Scammer: What to Change First
A computer that looks wrong
- A program on a computer that nobody remembers installing
- A Pop-Up Says Your Computer Is Infected: Call This Number
- A Remote-Access Program You Did Not Install
- A User Account on a Computer That Nobody Created
- An Unknown Device on Your Network: How to Check It
- Antivirus Shows as Off and Nobody Turned It Off
- Browser Homepage Changed and Pop-Ups Keep Opening
- Computer Working Hard When No One Is Using It
- How to Tell Whether a Computer Is Compromised
- Is Our Office Network Secure? What One Person Can Check
- Mouse Moving on Its Own: Hardware, or Someone Connected?
- Router Hacked? What the Admin Page Shows and What to Check
- The Same Windows Update Keeps Failing on One Computer
After something has happened
- Files locked and a message asking for payment
- Can Your Backups Actually Be Restored? A Test You Can Run
- Cyber Insurance Claim: What to Do Before You Call Anyone
- Keeping Evidence Before You Clean Up a Computer
- Money Sent to a Fraudster: What to Do Today
- Ransom Note on the Screen: What the FBI Says About Paying
- Ransomware After the First Hour: Scope, Restore, Evidence
- We Think We Were Hacked: What the First Day Looks Like
- What a Compromise Check Can and Cannot Show You
- Who to Tell After a Security Incident, and in What Order
Who is watching your systems
- How to Tell Whether Windows Updates Were Installed
- Leaving an IT Provider Without Losing Access
- MFA Is On: What the Second Step Covers and Misses
- Questions to Ask Your IT Provider About Backups
- The Person Who Ran Your IT Left: The First Week
- What a Second Opinion on Your Security Covers
- When Your IT Person Is Away: Where Alerts and Access Go
- Who Holds Your Administrator Passwords: Six Places to Look
- Your IT Provider Isn’t Answering: What to Do Next