Cybersecurity basics: passwords, malware and phishing

플레이하며 배우기

이 문제들을 풀어 에너지를 얻은 뒤 낚시하고 탐험하세요. 계정이 필요 없어요.

교육자를 위해: Cybersecurity basics: passwords, malware and phishing(KS3 Computing, Digital Literacy)을(를) 위한 바로 쓸 수 있는 수업 슬라이드, 복습 노트, 다이어그램 — 수업에 사용하거나, 학습자들이 실시간 게임으로 즐기는 인터랙티브 클래스 활동으로 진행하세요.

수업 노트

Strong Passwords

  • A strong password is long, random, and unique for each account.
  • Use a mix of upper and lower case letters, numbers, and symbols.
  • Avoid using personal information like names, birthdays, or common words.
  • Consider using a passphrase – a sequence of random words – which is easier to remember and harder to crack.
  • Never reuse passwords across different accounts; if one is compromised, others are at risk.
  • Use a password manager to store and generate strong passwords securely.

Long, unique passphrases with a password manager and multi-factor authentication resist guessing far better than short reused passwords.

Long, unique passphrases with a password manager and multi-factor authentication resist guessing far better than short reused passwords.

Malware Types

  • Malware is malicious software designed to harm or exploit devices and data.
  • A virus attaches itself to a file or program and spreads when the infected file is opened.
  • A worm spreads automatically across networks without needing a host file.
  • Ransomware locks your files or device and demands payment to restore access.
  • Malware can be delivered via email attachments, malicious links, or compromised websites.
  • Keeping software updated helps patch vulnerabilities that malware exploits.

Phishing and Social Engineering

  • Phishing is a scam where attackers trick people into revealing sensitive information or installing malware.
  • It is a form of social engineering – manipulating people rather than hacking systems.
  • Phishing messages often pretend to be from trusted sources like banks or government agencies.
  • They create urgency or fear, e.g., 'Your account has been compromised – click here now.'
  • The goal is usually to steal login credentials, financial details, or install malware.
  • Phishing is the most common type of cybercrime globally.

Types of Phishing

  • Email phishing – bulk emails sent to many people, often with fake login links.
  • Spear phishing – targeted attacks on specific individuals using personal information to seem credible.
  • Vishing (voice phishing) – fake phone calls, often using VoIP and number spoofing.
  • Smishing (SMS phishing) – fraudulent text messages with links or phone numbers.
  • Quishing – phishing using QR codes that lead to malicious sites.
  • Page hijacking – redirecting users from legitimate websites to malicious ones.

Staying Safe Online

  • Always think critically before clicking links or opening attachments, even if they look familiar.
  • Check the sender's email address or phone number for unusual details.
  • Hover over links to see the real URL before clicking.
  • Never enter personal information on a site reached via a suspicious link.
  • Use multi-factor authentication (MFA) where possible for extra security.
  • Keep all software and devices updated to protect against known vulnerabilities.

Software Updates

  • Software updates fix security holes (vulnerabilities) that attackers can exploit.
  • Enable automatic updates for your operating system, apps, and antivirus.
  • Updates often include patches for newly discovered malware threats.
  • Ignoring updates leaves your device at higher risk of infection.
  • Only download updates from official sources to avoid fake update scams.

A security update patches the vulnerability an attacker could otherwise exploit.

A security update patches the vulnerability an attacker could otherwise exploit.

Account and Device Safety

  • Use a different strong password for each important account.
  • Log out of accounts on shared or public devices.
  • Be cautious when using public Wi-Fi – avoid accessing sensitive accounts without a VPN.
  • Install and maintain reputable antivirus software.
  • Back up important data regularly to recover from ransomware attacks.
  • Report phishing attempts to your school, workplace, or relevant authorities.

A phishing message uses urgency to make you click; the safe response is stop, check independently, report.

The malware infection chain: delivery, execution, infection, impact, then persistence and spread.

Social engineering relies on urgency, impersonation and requests for sensitive information; pause, verify, report.

슬라이드

Sign up free to view the lesson slides

Step through every slide for this topic — plus flashcards and revision notes — with a free account.

가입 — 무료로그인

연습 문제

무료 미리 보기 — 58개 중 8개 문제. 가입하면 전부 볼 수 있어요.

  1. 1.Phishing is a type of social engineering attack.

    Easy

    True or false?

  2. 2.What does the term 'phishing' refer to?

    Easy
    • AUsing a fishing rod to catch fish
    • BA type of computer virus
    • CA scam that uses lures to 'fish' for sensitive information
    • DA method of securing passwords

  3. 3.Malware only includes viruses.

    Easy

    True or false?

  4. 4.Which of the following are types of malware mentioned in the source? (Select all that apply)

    Easy
    • AVirus
    • BWorm
    • CRansomware
    • DPhishing
    • EAdware

  5. 5.Spear phishing targets a specific individual or group.

    Easy

    True or false?

  6. 6.What is 'smishing'?

    Easy
    • APhishing via email
    • BPhishing via SMS text messages
    • CPhishing via voice calls
    • DPhishing via QR codes

  7. 7.Keeping software up to date is not important for cybersecurity.

    Easy

    True or false?

  8. 8.Match each phishing type to its description.

    Medium
    • Vishing
    • Smishing
    • Quishing
    • Voice phishing
    • SMS phishing
    • QR code phishing

Unlock all 58 questions, flashcards & more

무료 계정을 만들어 이 주제의 모든 문제, 슬라이드, 플래시카드, 복습 노트를 확인하세요.

가입 — 무료로그인

기출 문제

이 주제의 기출 문제 연습이 곧 나와요.
곧 출시