Hello, I’m Anthony, a sysadmin for several fleets and studying cybersecurity full time.
Nowadays, the built in Windows Defender is good enough for most of your daily use. 3rd party antivirus softwares are also a dime a dozen nowadays, and no longer the absolute slog of bloatware that they used to be (only in terms of performance, they are still one of the most frustrating piece of software that you can have on your machine). Some useful advices would be:
- Familiarise yourself with common attacks and web behaviours. Clicked on an element that opened in a new tab? Close that tab, double back to your original site and see if that was the intended interraction. Pop up opened out of nowhere? Close it immediately. Once you’ve familiarised yourself with some tactics that attackers use to try to take advantage of you, you would be (slightly) more well-equipped to traverse the shadier part of the internet.
- Make sure that software you download and install are from reputable sources. Assuming you do not traverse the high seas, only get software from their original makers. There are very little incentive for softwares to be redistributed online through a third party, so better be safe than be sorry.
- Check messages and email content and adresses carefully. Email impersonation is a very common attack vector (in fact, phishing still remains one of the most common attack vector for hackers), and it is widely used to carry payloads such as keyloggers and ransomwares. If you see an email you don’t expect, never open anything that is attached with it.