Protect yourself · Cyber safety knowledge base

Avoid malware and respond to suspicious activity

Recognise risky downloads, fake technical support and the steps to take when a device may be infected.

Practical guidance 2 min read

Do not let a download become remote access

Malware is software that can steal information, damage files or give someone control of a device. It can arrive through pirated software, fake invoices, malicious apps, browser extensions and fraudulent support instructions.

Reduce common entry points

  • Keep your operating system, browser and applications updated.

  • Use built-in security protection and install software only from trusted official sources.

  • Do not disable antivirus to install an app or use cracked software.

  • Do not enable macros or paste commands into a terminal because a website says it is a verification step.

  • Decline unsolicited remote-support sessions, even if the caller claims to work for a bank or internet provider.

  • Keep a backup disconnected or otherwise protected from changes on your everyday device.

Warning signs need checking

Unexpected administrator changes, disabled security tools, unfamiliar apps, encrypted files or account theft can indicate compromise. Slowness and battery drain alone do not prove infection. Investigate using trusted tools rather than an advert promising an instant fix.

If you suspect an infection

  1. Stop banking, shopping and entering passwords on the device. Disconnect Wi-Fi and network cables if active compromise is suspected.

  2. For a work or school device, contact IT promptly and follow their evidence-preservation instructions.

  3. From a separate trusted device, secure important accounts and contact financial providers if money is exposed.

  4. Record the warning message, time and relevant filenames. Do not forward suspicious files to other people.

  5. Use trusted technical support to scan, remove malware or rebuild the device. Restore only from a known-good backup after securing it.

If files are held for ransom

Disconnect the affected device and seek professional help. Paying does not guarantee recovery or deletion of stolen information. Do not erase files or negotiate in a hurry. Keep evidence, assess backup options and use verified incident-reporting channels.

Useful references

Here to help

Something doesn’t look right?

Prepare an incident report with the details that matter.

Report an incident