Incident support
Under attack, or think you might be?
Call us now. You'll speak to a security practitioner (not a call queue) who will help you contain the situation and work out what happens next.
Call +44 (0) 203 393 7795While you wait
Do not switch off affected machines. Disconnect them from the network instead. Preserve logs. Note the timeline of what you've observed. If credentials may be compromised, prioritise resetting privileged and remote-access accounts.