My device may be infected

Disconnect unwanted remote access, update the device and seek reputable support.

Possible warning signs

  • Unexpected pop-ups or security warnings
  • Programs opening by themselves
  • A stranger moving the pointer or controlling the screen
  • New apps or browser extensions
  • The device becoming unusually slow or unstable

If somebody has remote control

  1. Disconnect the device from Wi-Fi or unplug its network cable.
  2. Do not continue signing into accounts on that device.
  3. Use another trusted device to contact your bank and change important passwords.
  4. Remove remote-access software only when it is safe to do so, or obtain reputable technical support.

For other suspicious behaviour

Install operating-system, browser and security updates. Run the device’s trusted built-in or established security scan. Back up important documents and photographs, but do not copy unknown programs.

If the behaviour continues, contact the device manufacturer, retailer or a reputable local support provider. Do not call a number displayed in an unexpected pop-up.

Source

NCSC: advice for individuals responding to an online attack