To take action : 5–10 min to choose an action · Depending on your devices and accounts
You think hacking only happens in movies?
Understand an attack to choose where to interrupt it.
PatchYourself · Last editorial revision : · Sources
Fictional example: an everyday situation
In this example, an attacker tries an exposed password on someone’s email. If it works, they look for linked accounts. A unique sign-in, extra authentication or prepared recovery can limit consequences at different points.
The problem
An attack does not need to look like a film. A reused password, fake request or vulnerable app may provide the first access. The sequence varies: not every attack follows the same steps.
A simplified scenario
1. Prepare entry
An attacker may use exposed credentials, public information or a known weakness. Reducing password reuse and public information limits some opportunities.
2. Gain access
A stolen sign-in, phishing message or software exploit may open a session. Updates, passkeys and 2FA, and verifying requests address different risks.
3. Maintain or expand access
Once signed in, an attacker may add a recovery method, mail-forwarding rule or authorized app. Changing only the password does not necessarily remove these routes.
4. Act on data or accounts
An attacker may steal information, impersonate someone, request payments or make files inaccessible. Backups help recover files but do not undo disclosure.
What to do now
Step 1: Choose one protection
Open the email guide. One concrete action on an important account is a useful first step.
Step 2: Prepare a response
Find where your provider shows sessions, connected apps and recovery details. Keep the emergency guide accessible from another device.
Go further
Techniques and objectives
MITRE ATT&CK describes tactics and techniques observed in attacks. It is a reference for further study, not a mandatory sequence or a prediction of attack probability.
Protection at several points
Any measure can fail or be irrelevant to a particular attack. Combining them helps limit initial access, its reach and consequences. The checklist organizes actions without pretending to measure exact risk.
Sources and verification
References used for this revision. Menus and offers can change; consult the provider’s help for your version.