Common threats (malware, phishing, ransomware) in Intro to Computing - Real World Applications

Real World Mode - Common threats (malware, phishing, ransomware)

Real-World Analogy: Common Threats as Neighborhood Dangers

Imagine your computer is like your home in a neighborhood. Just like in real life, there are different kinds of dangers that can threaten your safety and belongings. Malware is like a sneaky burglar who breaks into your house to steal or damage things. Phishing is like a con artist who calls you pretending to be someone trustworthy to trick you into giving away your keys or secrets. Ransomware is like a kidnapper who locks your valuables in a safe and demands money before you can get them back.

Mapping Table: Computing Threats to Neighborhood Dangers

Computing Threat	Real-World Equivalent	Explanation
Malware	Burglar breaking into your home	Malware sneaks into your computer to steal, damage, or spy on your data, just like a burglar breaks in to steal or damage your belongings.
Phishing	Con artist on the phone	Phishing tricks you by pretending to be someone you trust to get your private info, like a con artist pretending to be a bank officer to get your keys or passwords.
Ransomware	Kidnapper locking valuables and demanding ransom	Ransomware locks your files and demands payment to unlock them, like a kidnapper holding your valuables hostage until you pay.

Day-in-the-Life Scenario: Protecting Your Digital Home

One day, you get a phone call from someone claiming to be your bank. They ask for your password to "verify" your account. This is like the con artist trying to trick you (phishing). You wisely hang up and don't share your info.

Later, you notice strange files on your computer and some programs acting weird. It's like a burglar sneaking into your home and messing with your stuff (malware). You run a security check to find and remove the intruder.

Suddenly, a message pops up saying your files are locked and you must pay money to get them back. This is the kidnapper locking your valuables (ransomware). You contact experts to safely unlock your files without paying the ransom.

Where the Analogy Breaks Down

• Unlike burglars, malware can spread automatically to many computers without physical presence.
• Phishing often happens through emails or fake websites, not just phone calls.
• Ransomware sometimes can be removed without paying, but in real life, kidnappers rarely release valuables without ransom.
• Computers have security software acting like alarms and locks, which don't have perfect real-world equivalents.

Self-Check Question

In our neighborhood analogy, if you receive an unexpected call asking for your house keys, what kind of threat does this represent?

Answer: It represents phishing, the con artist trying to trick you into giving away your keys.

Key Result

Common computer threats are like neighborhood dangers: malware as burglars, phishing as con artists, and ransomware as kidnappers.

Practice

1. Which of the following best describes phishing?

easy

A. Tricking someone to reveal personal information

B. Locking files and demanding money

C. Damaging or deleting files on a device

D. Improving device performance

Solution

1. Step 1: Understand phishing concept

   Phishing is a trick to get personal info by pretending to be trustworthy.

2. Step 2: Compare options to phishing

   Only Tricking someone to reveal personal information matches this description exactly.

3. Final Answer:

   Tricking someone to reveal personal information -> Option A

4. Quick Check:

   Phishing = Tricking for info [OK]

Hint: Phishing tricks you to share info, not damage files [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking phishing damages files
• Mixing phishing with malware

2. Which of these is the correct description of ransomware?

easy

A. Software that deletes your files permanently

B. Software that locks your files and asks for money

C. A scam email asking for your password

D. A program that speeds up your computer

Solution

1. Step 1: Recall ransomware behavior

   Ransomware locks files and demands payment to unlock them.

2. Step 2: Match options to ransomware

   Software that locks your files and asks for money exactly matches this behavior.

3. Final Answer:

   Software that locks your files and asks for money -> Option B

4. Quick Check:

   Ransomware = Locks files + money demand [OK]

Hint: Ransomware locks files and demands money, not deletes permanently [OK]

Common Mistakes:

• Confusing ransomware with malware that deletes files
• Thinking ransomware is a phishing scam
• Believing ransomware improves performance

3. Look at this scenario:

"You receive an email asking to click a link to verify your bank details. The link leads to a fake website."

What type of threat is this?

medium

A. Phishing

B. Ransomware

C. Malware

D. Spyware

Solution

1. Step 1: Analyze the scenario

   The email tries to trick you into giving bank details via a fake website.

2. Step 2: Identify the threat type

   This is classic phishing: tricking for personal info using fake sites.

3. Final Answer:

   Phishing -> Option A

4. Quick Check:

   Fake site + trick = Phishing [OK]

Hint: Fake websites asking for info usually mean phishing [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking malware always damages files
• Assuming spyware is the same as phishing

4. A user reports their files are locked and a message demands payment. Which step fixes the problem?

medium

A. Click the payment link to unlock files

B. Ignore the message and continue working

C. Run antivirus software and disconnect from the internet

D. Share your password with the sender

Solution

1. Step 1: Identify the threat

   Locked files and payment demand indicate ransomware infection.

2. Step 2: Choose safe recovery action

   Running antivirus and disconnecting stops spread and helps remove ransomware safely.

3. Final Answer:

   Run antivirus software and disconnect from the internet -> Option C

4. Quick Check:

   Ransomware fix = Antivirus + disconnect [OK]

Hint: Never pay ransom; use antivirus and isolate device [OK]

Common Mistakes:

• Paying ransom immediately
• Ignoring the problem
• Sharing passwords with attackers

5. A company wants to protect employees from malware, phishing, and ransomware. Which combined approach is best?

hard

A. Disable all internet access permanently

B. Only install antivirus software and ignore employee training

C. Ask employees to share passwords to detect phishing

D. Install antivirus, train employees on suspicious emails, and backup data regularly

Solution

1. Step 1: Understand threats and protections

   Malware needs antivirus, phishing needs training, ransomware needs backups.

2. Step 2: Evaluate options

   Install antivirus, train employees on suspicious emails, and backup data regularly combines antivirus, training, and backups, covering all threats effectively.

3. Final Answer:

   Install antivirus, train employees on suspicious emails, and backup data regularly -> Option D

4. Quick Check:

   Combined defense = Antivirus + Training + Backup [OK]

Hint: Best defense combines software, training, and backups [OK]

Common Mistakes:

• Relying only on antivirus
• Ignoring employee awareness
• Disabling internet is impractical