I've already clicked the link, my account is hacked!
Don't worry, it'll be okay! Take a deep breath and follow the directions below.
Step 1: Reset your password
If your account has been compromised, the first step you need to take is to change your Google / Active Directory password.
To change your password while signed into a district computer at your site:
- On a Windows PC press CTRL+ALT+DELETE, then click 'Change a password'.
- On a MAC please contact Help Desk at x20044.
If you synchronize your email to a mobile phone you will need to input your new AD password on the device after changing it.
If you have any issues or questions, please contact the I.S. Help Desk at x20044.
Step 2: Revoke account permission to unknown apps
Navigate to https://myaccount.google.com/permissions and inspect the permissions associated with your Google account. If you notice any apps you don't remember giving permissions to, click "Revoke".
Step 3: Sign out other web sessions
Inside your email's inbox, scroll to the bottom of the page, you should see in the bottom right-hand corner a link that says "Open in ___ other location: Details" (the ___ would be the number of locations your email is currently signed in from). Click the Details link:
A new window will open. If anything is listed under "Concurrent Session Information", click the button below it that says "Sign out all other web sessions":
Step 4: Remove unwanted device access
Navigate to https://myaccount.google.com/device-activity and inspect the listed devices on your account. If a device is listed that you don't recognize, click on it in the list and select "Remove":
Step 5: Remove unwanted email filters
When logged into your email, click the gear icon at the top right, then go to Settings:
Next, navigate to the Filters and Blocked Addresses tabs. If there's anything listed that you didn't enter in yourself, delete it (if you've never created an email filter, this list should be blank):