One Windows habit people still miss after a phishing scare: check the sign-in methods on your important accounts, not just the password. If an attacker added a recovery email, phone, or app, they can get back in even after you change the password. Remove anything you don’t recognise from a clean device.
…
That is a worrying direction, especially if AI tools ever get good enough to copy themselves across devices or networks. On a Windows PC, the sensible move is to keep Windows Update on, watch for odd network activity, and disconnect anything suspicious straight away; if you want a simple checklist, see /guides/what-to-do-if-your-windows-pc-is-infected/
One quick Windows check people miss after a phishing scare: turn on the “show file extensions” option in File Explorer. It helps you spot fake attachments like invoice.pdf.exe, which can look harmless at first glance but be a real .exe file.
One thing people often miss after a scare: check your browser extensions in Windows and remove anything you don’t recognise. Bad extensions can keep showing fake alerts, change search results, or watch what you type. If one was added recently, treat that as a warning sign.
