I clicked a suspicious link

Clicked a link you think was phishing? Don't panic, but act fast. If you do the right things in the first few minutes, the damage is greatly limited.

Do this right away

1. Disconnect your PC from the internet. Turn off Wi-Fi from the network icon, or unplug the network cable. That stops malware from sending anything out or downloading more.
2. Don't enter anything. If you landed on a sign-in page, close the tab without entering a username or password.
3. Call us at 38 27 80 00. Tell us what you clicked, what happened next, whether you entered anything, and the time. Feel free to forward the email to support@digiserv.no.

Next steps, ideally together with us

• Change your password for the service the sign-in page imitated, from another device. You change your Microsoft 365 password at myaccount.microsoft.com.
• Check your account activity. Go to myaccount.microsoft.com, select My sign-ins and look under Recent activity. Unfamiliar sign-ins? Let us know.
• Run a virus scan. Reconnect to the internet, search for “Windows Security” in the Start menu, select Virus & threat protection and run a full scan.
• Check your email. Look for emails in Sent Items that you didn't send yourself, and look in Deleted Items. Also check that no forwarding to an unknown address has been set up: Settings, View all Outlook settings, Mail, Forwarding.

Avoid it next time

• Turn on MFA for all important accounts. Then it doesn't matter if someone has your password. See Set up Microsoft Authenticator.
• Learn the signs in How to spot phishing. We also offer security training for all employees.
• Keep Windows and your apps up to date.
• Don't click links in emails you aren't expecting. Go straight to the website instead.

Even the most experienced people click the wrong thing now and then. The most important thing is to speak up quickly, not wait and hope it turned out fine.