What to do if you are cyber attacked: Practical steps to stay safe

In today’s modern society, the Internet plays a crucial role in our daily lives, facilitating connections for work, education, and social interaction. Regrettably, cybercrime is increasing, and Ghana is not immune to this trend. As we observe National Cyber Security Awareness Month (NCSAM) this October, I will be sharing valuable insights to help us deal with some major forms of cyber-attacks, specifically cyberbullying, hacking, or blackmail. This article contains practical steps that have proven helpful in the past to clients who have been victims of cyber-attacks.

Cyberbullying

Cyberbullying is a prevalent form of online harassment that doesn’t necessitate advanced technical skills from the perpetrators. It often entails sending threatening, insulting, or intimidating messages via social media, messaging platforms, or other digital channels. Cyberbullying can also encompass creating fake identities to target someone, posting embarrassing or derogatory information about someone online, repeatedly sending intimidating messages, or intentionally excluding someone from an online group or community. Its impact on the mental health and self-esteem of the victim, particularly among young people, can be profound and should not be underestimated.

Although not explicitly defined in the Cyber Security Act of Ghana 2020 (Act 1038), cyberbullying behaviours can be prosecuted under existing laws in Ghana that address harassment, intimidation, or coercion through electronic communication. If you are experiencing cyberbullying, here are some practical steps you can take to ensure your safety:

Do not engage further with the bully. Responding may only escalate the situation and make you break the law.
Document any abuse or harassment by taking screenshots, pictures, or screen recordings of offensive messages, posts, or interactions. This documentation is essential if you decide to report the incident to authorities or the platform where the bullying occurred.
Block and report the bully using the features provided by social media platforms or contact the platform’s support team for possible action.
Seek support from someone you trust, like a family member, friend, counselor, or organizations such as the Cyber Security Authority (CSA) and NGOs focused on mental health in Ghana. You may also consider legal action against the bully, with remedies ranging from civil to criminal charges in severe cases.
Dealing with Cyber Blackmail

Cyber blackmail occurs when someone threatens to release private information, photos, or videos unless demands are met. It usually occurs when romantic relationships turn sour, and one party wants to seek revenge against the other or in internet fraud romance scam situations. Generally, blackmail is a criminal offense under the Criminal Offenses Act of 1960 (Act 29). Perpetrators may be imprisoned for up to 15 years, depending on the circumstances. The Cybersecurity Act 2020 (Act 1038) also prohibits extortion via electronic means, which is basically what the blackmailers do. Offenders can face fines or imprisonment, with penalties varying based on the severity of the crime. Additionally, the Data Protection Act of 2012 (Act 843), while primarily focused on data privacy, unauthorized use of personal data for blackmail can be prosecuted under this Act.

As of July 2024, the Cyber Security Authority of Ghana reported a surge in cyber blackmail cases, with 226 cases alone in 2024, resulting in significant financial losses to victims.

If you find yourself in this situation, it’s important to remember that paying the blackmailer does not prevent them from sharing your private information. Here are some practical tips to handle such situations:

Do Not Panic or Give In: Stay calm and avoid meeting the attacker’s demands. Paying the blackmailer often leads to more demands rather than resolving the issue.
Preserve Evidence: Just like with cyberbullying, make sure to keep all communications from the blackmailer. This evidence can be used by law enforcement to track and potentially arrest the perpetrator.
Report to Authorities: Immediately report the incident to Ghana’s Cyber Crime Unit or the Ghana Police Service. The law protects individuals from such extortion, and the authorities have tools to investigate these crimes. If you know where that blackmailer is located or have any personal details that may lead to his arrest or apprehension, please do not hesitate to contact your lawyer to facilitate the search and arrest of the blackmailer in conjunction with the security services and private investigators. Once the blackmailer is apprehended, you may instruct your lawyer to write a cease-and-desist letter to restrain them from publishing your information online. Victims of cyber blackmail are encouraged to report incidents to the police, who are increasingly equipped to handle cyber-related crimes. Penalties can be significant, but enforcement can vary based on the resources and awareness of law enforcement agencies.
Change Passwords and Strengthen Security: Ensure that your online accounts are secure. Change Passwords and Strengthen Security: Ensure that your online accounts are secure. Use strong, unique passwords for each account, enable two-factor authentication (2FA), and review your privacy settings to minimize exposure.
Seek Professional Support: Being blackmailed can take an emotional toll, so consider speaking to a professional counselor for guidance and mental support during this time while you await investigation outcomes to prevent the blackmailer from further continuing with the blackmail. You may also press charges against the black blackmail under the law.
Hacking 

It is crucial to be aware of the risks associated with cyber hacking, as it can have serious repercussions on your personal and financial accounts. The Cyber Security Act 2020 (Act 1038) strictly prohibits unauthorized access to computer systems and data. Offenders may face legal consequences, including imprisonment. If you suspect unauthorized activity on your device, it is imperative to act swiftly to minimize potential damage, especially if your financial accounts have been compromised.

Here are some essential steps to take if you suspect cyber hacking:

Contact your financial service provider and internet service provider immediately to report any unauthorized access or fraudulent transactions. In Ghana, financial institutions such as the Bank of Ghana offer hotlines for reporting such incidents.
Change your passwords immediately using complex combinations of letters, numbers, and special characters. Avoid reusing the same password across multiple platforms.
Enable Two-Factor Authentication (2FA) for an additional layer of security, especially for social media accounts like WhatsApp.
Notify your contacts about the potential security breach to prevent hackers from exploiting your compromised account to scam or phish others.
Scan your device for malware by running a full antivirus scan to detect and remove any malicious software.
Report it to Ghana’s Cyber Crime Unit for investigation and specialized support.

Going forward, it is really important to look out for each other online, especially nowadays when online safety isn’t always guaranteed. Features like the “view once” option on WhatsApp and other cool social media features that promise privacy might not always protect us from cyber-attacks. To stay safe, make sure to keep your software, operating systems, and apps updated to fix any weaknesses that cybercriminals could take advantage of. Use strong, unique passwords, and think about using a password manager to create and store complex passwords securely. Be careful of phishing attempts, like unexpected emails or links asking for personal or financial information. It is also smart to limit the personal info you share online to lower the risk of a targeted attack.

Remember, we are all responsible for cybersecurity, and it’s super important to stay informed and follow good online safety habits. By being proactive and staying aware, we can reduce the risk of cyber-attacks and make the online world safer for everyone. If you come across any online threats, don’t hesitate to reach out to the right authorities or organizations that specialize in preventing cybercrime.

Take care and stay safe online!

About the Author

The author, E.K Bidzakin, is a Teaching Fellow at Arizona State University, USA and a Private Legal Practitioner. Her main areas of practice include criminal and corporate law, with a special focus on cybercrime, criminal profiling, due diligence, complex risk assessment, and financial and white-collar crime. She holds an LLM from Columbia Law School and is a member of the Ghana Bar Association.

Previously, she worked as a Prosecutor with the Social Security and National Insurance Trust (SSNIT) and has served on several Boards of various Companies and NGOs. You can contact her team by email at info@bidzakinkombat.com.