So my son (12 years old) was oblivious to the malignant intentions of people in this world and ignorantly accepted a file from a person on discord thinking it was a game patch.

So a day later he tells me his epic games account can’t be logged into and there’s a different email set up on his account. He had 2fa set up and the person that sent a file (which happened to be a trojan) managed to change the epic games email address and had access to his email as well.

Fast forward and I’ve managed to recover everything and explained to him what happened and how certain people will do this to you if you let your guard down.

​

Anyways during the whole ordeal, the noob “hacker” didn’t use a VPN when he first accessed my son’s gmail and I was able to obtain his ip, city/location/ ISP, from the logs and I can see that he flicked on his vpn moments later.

What can I do in retaliation with his IP to teach him a lesson? Or is it water under the bridge and walk away?