If someone hacks into your online account, you only have 15 minutes to stop something much worse from happening... This is what you need to do.
You need an online account to use social media, apps, streaming services, or banking services. This is a big target for hackers. All of these services keep personal information and let you access other data that is linked to it. If you lose access to any of these accounts, the situation can get much worse.
In this case, cybersecurity company ESET says that acting quickly is very important to stop more damage from happening. The company explains that the first 15 minutes are the most critical, as this is the period during which the attacker seeks complete control of the account.
During that short period, cybercriminals often change the recovery email, add their own access methods, or configure hidden options to remain within the system, even if the victim delays taking action. Therefore, it is essential to act quickly.
■ What should you do if your online account is hacked, according to ESET?
● From minute 0 to minute 2
The most important thing is to stop the damage as quickly as possible. This means checking if you can still access your account. If you can still access it, you should take immediate action to protect it. If you can no longer access it, the best thing to do is start the platform's official account recovery process immediately.
In the case of bank accounts or cards, you should contact your bank to stop any unauthorized transactions. Alternatively, if you suspect the problem is caused by a virus or malware, it is advisable to disconnect your device from the internet.
● Within 3-6 minutes
You should secure your account: Review important information such as your alternate email address and phone number. For your email, also ensure that no forwarding rules are enabled without your permission, and then create a new, strong password that is different from your previous passwords. In addition, it is recommended to enable two-step verification for an extra layer of security.
● From minute 7 to 10
Here, you need to check if the attack is affecting other accounts, because if you're using the same password for multiple services, you should change it for all of them. It's also advisable to review recent activity, such as logins, sent messages, or any suspicious activity, especially in email.
● Minutes from 11 to 13 and from 14 to 15
The goal is to scan the device and remove any suspicious programs or add-ons, while also ensuring the system is up to date. Finally, and most importantly, between minutes 14 and 15, it is crucial to inform your contacts and report the incident. This prevents the attacker from deceiving others and enhances security.