Your Kid Just Clicked Something. Now What?

It happens in seconds. Your child is watching a YouTube video, playing a game, or downloading something for school. A pop-up appears — “You’ve won a prize,” “Click here to claim your reward,” “Download required to continue.” And before you can say anything, they’ve clicked it. 

Your heart rate goes up. Now what? 

The good news is that one click is rarely catastrophic if you respond quickly and you have basic protection in place. The bad news is that most South African households don’t know what to do in that moment — and hesitation is exactly what allows minor incidents to become serious ones. 

Why Kids Are Specifically Targeted 

This isn’t accidental. Cybercriminals actively target platforms popular with children because children are easier to deceive and less likely to recognise the warning signs. 

According to Kaspersky research, attempted cyberattacks using kids’ favourite game brands as a lure increased by 35% in the first quarter of 2024 compared to the same period the previous year — nearly 1.3 million attack attempts in just three months. Minecraft alone accounted for over 3 million attempted attacks in the 12 months between July 2023 and June 2024. Most of these attacks disguise malware as game mods, cheat tools, or in-game rewards. 

The mechanic is simple and effective: a child wants something — a faster character, a free skin, a new level — and a malicious download offers exactly that. They click without thinking twice. The malware installs in the background while the game loads. 

Check Point Research has specifically documented how sophisticated these campaigns have become — multi-stage malware chains disguised as legitimate Minecraft mods, capable of stealing browser credentials, crypto wallets, Discord tokens, and screenshots from the infected device. Even children who don’t have financial accounts are valuable targets because they’re playing on family devices that do. 

What to Do Immediately After a Suspicious Click 

Step 1: Don’t panic, but don’t wait either. The first few minutes matter. If something downloaded automatically, disconnect the device from Wi-Fi before it can communicate with any external server. This is the fastest way to limit potential damage. 

Step 2: Check what actually happened. On Windows, open Task Manager (Ctrl + Alt + Delete) and look for any processes you don’t recognise running in the background. On a phone, check your recently installed apps. If something new appeared that shouldn’t be there, that’s a red flag. 

Step 3: Run a scan. If you have ESET or another reputable antivirus installed, run a full scan immediately. This will identify and quarantine known threats. If you don’t have antivirus installed, now is the time to address that gap. 

Step 4: Change passwords for important accounts. If the device had browser-saved passwords, banking apps, or email accounts open, change those passwords from a different, unaffected device as a precaution. 

Step 5: Call someone if you’re unsure. If you’re not confident the device is clean, don’t just hope for the best. Get it assessed. 

The Devices Kids Use Are Family Devices 

One of the most important things to understand about child-targeted malware is that even if your child has no financial information on their device, their device is often connected to your home network. An infected family laptop can potentially expose every device on that network — including the one you use for internet banking. 

This isn’t a reason to ban children from technology. It’s a reason to have basic endpoint protection running on every device in the household, and to make sure children understand that downloads from unofficial sources — game mods, free software, browser extensions — carry real risk. 

The Setup That Makes This Less Scary 

A home with ESET Home Security running on family devices has a significant advantage in this situation. ESET actively blocks known malicious downloads before they complete, warns when a device visits a dangerous site, and detects suspicious behaviour in real time rather than only when you run a manual scan. For families with gaming children, having active endpoint protection is not optional — it’s the difference between a pop-up that got blocked and a device you need to wipe. 

The other piece is a guest network or network segmentation — keeping kids’ devices on a separate network from your primary devices — so that even if a child’s device is compromised, it can’t easily reach your work laptop or NAS drive. This is a router configuration that takes an hour to set up and doesn’t cost anything beyond the hardware you likely already have. 

The Conversation Worth Having 

Technology safety education for children doesn’t need to be a lecture. It needs to be a habit — the same way you talk about not getting in a stranger’s car, talk about not downloading things from websites you’ve never heard of. ESET’s research team specifically recommends that parents make this a regular conversation rather than a one-off warning, because the threat landscape evolves faster than annual reminders can keep up with. 

At Dial a Nerd, we set up family device protection — ESET on every device, guest network configuration, and a security check to make sure your household is protected before something goes wrong. If you’d like peace of mind before the next accidental click, we can help.