Email - My non-Affiliated email has been compromised

Your computer was most likely compromised in one of four ways:

• Your Windows and Anti-Virus Software isn't up to date.
• Your passwords are easily hacked, i.e. name, birthday, name of pet. 
• You clicked on a malicious link in an email, on a social networking site, or webpage.
• You downloaded a game, video, song, or attachment with malicious scripts or files attached.

What to do next

1.) Check (and update) your computer’s security. Most hackers collect passwords using malware that has been installed on your computer (or mobile phone if you have a smartphone). No matter which operating system you use, be sure your anti-virus and anti-malware programs are up to date.     

We recommend the following actions to secure your devices:

• If you have a computer issued to you by the C21 Affiliated IT department, please contact our helpdesk at helpdesk@c21affiliated.com or call ​​​​​​​608-640-3011.  We typically have remote access to these devices and can scan/clean them up remotely.
• If the device DID NOT come from the C21 Affiliated IT department, we recommend you install Malwarebytes antivirus scanner, reboot the device, and run a scan for infections to remove them.  The app is free to download, install, and scan with on Windows/Mac/iPhone/iPad/Android/Chromebook platforms.
• If you are still concerned about the device’s security and it is NOT an Affiliated asset, we recommend you take the device to a reputable computer repair service provider and/or your cellular provider retailor for assistance.                                                                                                                            

2.) Change your password and make it stronger. Do this after your anti-virus and anti-malware programs are updated or hackers may collect your new password as well.

• Strong passwords do not have to be hard to remember, they should be hard to guess. Try using a password keeper like https://www.lastpass.com to help keep track of all your complicated passwords.
• Make your password at least 10 characters long, and use capital letters, lower case letters, numbers, and symbols.
• Do not use information about yourself or someone close to you (including your dog or cat!) like name, age, or city.
• Use Passphrases, like I love working at Century 21 Affiliated! would be IlwaC21A!
• Change your security question(s). If your email account was hacked from a device or location not matching your normal usage patterns, it's possible the cybercriminal needed to correctly answer a security question. If your question and answer are common (Question: What is your dog's name? Answer: Spot), that may not have been a difficult challenge.
• Consider adopting two-factor authentication. Many email providers offer two-factor authentication (2FA) as an additional security measure. This method requires both a password and some other form of identification, such as a biometric or a mobile phone number, to access an account.

3.) Send an email to your contacts saying you were hacked. When an email comes from someone you know you are more likely to open it and click on links within it - even if the subject is weird. Help stop the spread of the malware by warning those in your contact list to be cautious of any email sent by you that doesn’t seem right and to not click on the links.

4.) Smarten up about spam, phishing, and scams. Spam comes at us from all angles; in the mailbox in front of your home (junk mail) in your email inbox, via IM, social networking sites, chats, forums, websites, and sadly, now also on your phone. Now more than ever, it is important to be on the lookout for scams!

• You do not have a rich uncle you’ve never heard of in some foreign country trying to send you money. You have not won the lottery. No stranger is going to give you money for any reason. No hot babe is lonely and waiting for your response. The only things you’ll get via an unsolicited pharmacy offer are ripped off or an infection (on your computer or phone). If there really was a miracle weight loss cure, it would be front page news and on every TV station.
• No reputable bank or company is ever going to ask you to ’authenticate’ information online or through a text message. If you need to go to your bank website, put in the bank, like bmo.com
• No one is going to send you a Dropbox document without telling you first. 

Cited by: "What Do I Do When My Email Has Been Hacked?” Webroot Spam, Webroot, www.webroot.com/us/en/resources/tips-articles/what-do-i-do-when-my-email-has-been-hacked-and-spam-is-sent-to-my-contacts.