Phishing and social engineering in Cybersecurity - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the sentence to identify a common phishing method.

Cybersecurity

Phishing often involves sending emails that [1] to trick users into revealing personal information.

Drag options to blanks, or click blank then click option'

Aappear legitimate

Bcome only from friends

Ccontain no links

Dare always encrypted

Attempts:

3 left

💡 Hint

Common Mistakes

Thinking phishing emails never have links.

Believing phishing emails only come from friends.

Phishing emails usually appear legitimate to deceive users into trusting them.

2fill in blank

medium

Complete the sentence to explain a social engineering tactic.

Cybersecurity

Social engineering attacks often exploit [1] to manipulate victims.

Drag options to blanks, or click blank then click option'

Asoftware vulnerabilities

Bnetwork speed

Chuman trust

Dhardware failures

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing social engineering with technical hacking.

Assuming it targets only software or hardware.

Social engineering attacks exploit human trust to trick people into giving away information or access.

3fill in blank

hard

Fix the error in the description of a phishing attack.

Cybersecurity

A phishing attack tries to steal information by pretending to be a [1] source.

Drag options to blanks, or click blank then click option'

Atrusted

Brandom

Cunknown

Dmalicious

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing 'random' or 'unknown' which do not fit phishing tactics.

Confusing the attacker’s identity with their intent.

Phishing attacks pretend to be from a trusted source to gain victims' confidence.

4fill in blank

hard

Fill both blanks to complete the definition of spear phishing.

Cybersecurity

Spear phishing targets [1] individuals by using [2] information to appear convincing.

Drag options to blanks, or click blank then click option'

Aspecific

Brandom

Cpersonal

Dgeneric

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing spear phishing with general phishing.

Choosing 'random' or 'generic' which do not describe spear phishing.

Spear phishing targets specific individuals using personal information to trick them.

5fill in blank

hard

Fill all three blanks to complete the explanation of how to avoid phishing.

Cybersecurity

To avoid phishing, always [1] suspicious emails, [2] links before clicking, and [3] sharing personal information carelessly.

Drag options to blanks, or click blank then click option'

Averify

Bcheck

Cshare

Dignore

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing 'share' personal information which increases risk.

Ignoring the need to verify emails or check links.

To avoid phishing, verify suspicious emails, check links before clicking, and ignore sharing personal information carelessly.

Practice

1. What is the main goal of a phishing attack?

easy

A. To trick people into giving personal information

B. To physically steal a computer

C. To improve internet speed

D. To update software automatically

Solution

1. Step 1: Understand phishing purpose

   Phishing attacks use fake messages to deceive people.

2. Step 2: Identify the attack goal

   The goal is to steal personal or sensitive information by tricking users.

3. Final Answer:

   To trick people into giving personal information -> Option A

4. Quick Check:

   Phishing = stealing info by tricking [OK]

Hint: Phishing steals info by fake messages [OK]

Common Mistakes:

• Confusing phishing with physical theft
• Thinking phishing improves technology
• Believing phishing updates software

2. Which of the following is a common sign of a phishing email?

easy

A. An email asking for your password urgently

B. An email from a known contact with no links

C. A newsletter you subscribed to

D. A system update notification from your computer

Solution

1. Step 1: Identify phishing email traits

   Phishing emails often create urgency and ask for sensitive info like passwords.

2. Step 2: Match the option to phishing signs

   An email asking for your password urgently shows urgency and password request, a common phishing tactic.

3. Final Answer:

   An email asking for your password urgently -> Option A

4. Quick Check:

   Urgent password request = phishing sign [OK]

Hint: Urgent password requests often mean phishing [OK]

Common Mistakes:

• Thinking all emails from contacts are safe
• Confusing newsletters with phishing
• Assuming system updates ask for passwords

3. Consider this message: "Your account will be locked in 24 hours. Click here to verify." What is the most likely purpose of this message?

medium

A. To warn about a real account issue

B. To update account settings securely

C. To steal login details through a fake link

D. To provide customer support contact

Solution

1. Step 1: Analyze message content

   The message creates urgency and includes a suspicious link.

2. Step 2: Identify phishing behavior

   Fake links are used to steal login details by tricking users.

3. Final Answer:

   To steal login details through a fake link -> Option C

4. Quick Check:

   Urgency + fake link = phishing attempt [OK]

Hint: Urgent messages with links often steal info [OK]

Common Mistakes:

• Believing all urgent messages are real
• Clicking links without checking URL
• Assuming links always lead to safe sites

4. You receive an email that looks like it's from your bank but the sender's address is [e-mail]. What is the best action to take?

medium

A. Reply asking for more details

B. Verify the sender's address and contact the bank directly

C. Click the link to check your account immediately

D. Forward the email to friends to warn them

Solution

1. Step 1: Check sender's email carefully

   The sender's address looks suspicious and not official.

2. Step 2: Choose safe verification method

   Contacting the bank directly using official channels avoids phishing risks.

3. Final Answer:

   Verify the sender's address and contact the bank directly -> Option B

4. Quick Check:

   Verify sender + direct contact = safe action [OK]

Hint: Always verify sender and contact official source [OK]

Common Mistakes:

• Clicking suspicious links immediately
• Replying to unknown senders
• Sharing suspicious emails without checking

5. A social engineer tries to gain access to a company by pretending to be a trusted delivery person. Which of the following is the best way to prevent this type of attack?

hard

A. Share passwords with delivery staff for convenience

B. Allow anyone with a delivery badge inside

C. Ignore all visitors to avoid risk

D. Verify identity and delivery details before granting access

Solution

1. Step 1: Understand social engineering tactics

   Attackers use trust and fake identities to gain access.

2. Step 2: Identify proper security response

   Verifying identity and delivery details prevents unauthorized entry.

3. Final Answer:

   Verify identity and delivery details before granting access -> Option D

4. Quick Check:

   Verify identity = prevent social engineering [OK]

Hint: Always verify before trusting visitors inside [OK]

Common Mistakes:

• Trusting anyone with a badge
• Ignoring visitors completely
• Sharing sensitive info with outsiders