Attacker Goals

• Exfiltrate your data quietly
• Establish persistence and access
• Capture credentials and tokens
• Open a hidden command channel

Warning Signs

• Notice sudden slowness or crashing
• Watch fans and heat while idle
• Flag faster battery drain
• Spot pop-ups and changed homepages

System Indicators

• Check unknown startup apps and tasks
• Look for new admin accounts
• Confirm antivirus and firewall stay on
• Audit unfamiliar software and extensions

Surveillance Cues

• Catch the camera or mic activating alone
• Watch for the webcam light when idle
• Note keystroke monitoring behavior

Network Red Flags

• Trace unexplained outbound traffic
• Investigate login alerts from new places
• Distrust unrequested password resets

Account Red Flags

• Review cloud files syncing on their own
• Check contacts getting messages you never sent
• Confirm no privileges changed silently

Quick Triage

• Disconnect Wi-Fi and unplug ethernet
• Avoid logging into banking or sensitive sites
• Isolate the machine immediately

Contain

• Treat the device as untrusted
• Preserve evidence before wiping
• Change credentials from a clean machine