What happened
A bookshop running on two desktops and a printer noticed one PC acting strangely: files disappearing and programs opening on their own. They assumed it was just Windows being Windows.
What we did
- Found a keylogger installed through a fake “Adobe update” email
- Removed it and changed all supplier login credentials
- Set up email authentication so those fake emails bounce at the gateway
- Security-checked the other PC and the till system
The outcome
The shop is now on our quarterly check-up plan.
“Thorough.”
The lesson
Real software updates come from inside the program, not from an email. Odd behaviour is worth checking.