Step 1: Immediate Response

Immediate Actions Required

1. Don't panic - Follow this guide systematically
2. Document everything - Take screenshots and notes
3. Contact Tibus support - Get expert assistance immediately

Isolate the Affected System

If possible, take these actions to prevent further damage:

• Managed Hosting: Contact Tibus support to isolate your site
• Self-Service:
  • Temporarily disable public access if possible
  • Change all passwords immediately
  • Enable maintenance mode if available

Document the Incident

Record the following information:

• Date and time you discovered the issue
• Symptoms observed (modified files, strange behavior, alerts)
• Recent changes made to the system
• Any suspicious emails or access attempts

Next Step

Proceed to Step 2: Assessment