If you're hit with a malicious app or a remote-control request, cut the network and report first, then clean up your accounts from an untouched device.
There isn't much time to think when someone's pushing you to install an app or share your screen. This list lines up what to do from that moment through cleaning up your device and accounts afterward.
Each entry covers the situation, the immediate action, the official channel to contact, and what to have ready. Even if you've already installed something or shared your screen, working through these in order can limit further damage β and since procedures can change, confirm the latest guidance before you act. (Checked August 2026.)
Stop Before You Install
End Screen Sharing and Remote Control
Cut the Suspect Device's Network
Report from a Different Device
Request a Temporary Transaction Block
Get Removal Guidance from 118
Change Passwords on a Clean Device
Check Your Phone Line Status
Frequently asked questions
I already shared my screen β is it too late?
It's not too late. Ending the session, cutting the network, and reporting from a different trusted device is the next move. What you do from here matters more than what already happened.
Does deleting the malicious app finish the job?
No. Beyond removing the app, you also need to change passwords, request a temporary block on financial transactions, and check your phone lines. KISA's 118 hotline can walk you through the order.
Is it okay to change my passwords on the device I suspect is infected?
It's not recommended. If the device's infection status is unclear, anything you type could be exposed again β change your passwords from a separate, clean device instead.
Get new lists before anyone else
Once a week β only the new lists worth your time.
No spam Β· unsubscribe in one click
