Common threats (malware, phishing, ransomware) in Intro to Computing - Draw & Build Visually

Draw This - beginner

Draw a diagram showing the three common computer security threats: malware, phishing, and ransomware. For each threat, include a simple icon or symbol and a short description of how it affects a computer or user.

10 minutes

Hint 1

Hint 2

Hint 3

Grading Criteria

Three threats labeled correctly: malware, phishing, ransomware

Each threat has a simple icon or symbol

Each threat has a short, clear description of its effect

Arrows or lines connect threats to their descriptions

Diagram is neat and easy to understand

Solution

  +----------------+       +----------------+       +----------------+
  |    Malware     |       |   Phishing     |       |  Ransomware    |
  |  (Virus Icon)  |       | (Hook Icon)    |       | (Lock Icon)    |
  +-------+--------+       +--------+-------+       +--------+-------+
          |                         |                        |
          | Infects computer        | Tricks user to         | Locks files and
          | with harmful software   | reveal personal info   | demands payment
          | like a virus in body    | like a fake email      | like a kidnapper
          |                        |                        |
          v                         v                        v
  [Computer slows down]    [User gives password]    [Files become inaccessible]

This diagram shows three common computer threats:

• Malware: Represented by a virus icon, it infects the computer like a virus infects a body, causing it to slow down or malfunction.
• Phishing: Shown with a hook icon, it tricks users into giving personal information by pretending to be trustworthy, like a fake letter asking for secrets.
• Ransomware: Illustrated with a lock icon, it locks the user's files and demands payment to unlock them, similar to a kidnapper holding something hostage.

Arrows connect each threat to its effect, helping visualize how each threat impacts the user or computer.

Variations - 2 Challenges

[intermediate] Draw a flowchart showing how a phishing attack can lead to a ransomware infection. Include steps from receiving a phishing email to files being locked by ransomware.

[advanced] Draw a detailed diagram showing four types of malware: virus, worm, Trojan horse, and spyware. Include how each spreads or affects the computer.

Practice

1. Which of the following best describes phishing?

easy

A. Tricking someone to reveal personal information

B. Locking files and demanding money

C. Damaging or deleting files on a device

D. Improving device performance

Solution

1. Step 1: Understand phishing concept

   Phishing is a trick to get personal info by pretending to be trustworthy.

2. Step 2: Compare options to phishing

   Only Tricking someone to reveal personal information matches this description exactly.

3. Final Answer:

   Tricking someone to reveal personal information -> Option A

4. Quick Check:

   Phishing = Tricking for info [OK]

Hint: Phishing tricks you to share info, not damage files [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking phishing damages files
• Mixing phishing with malware

2. Which of these is the correct description of ransomware?

easy

A. Software that deletes your files permanently

B. Software that locks your files and asks for money

C. A scam email asking for your password

D. A program that speeds up your computer

Solution

1. Step 1: Recall ransomware behavior

   Ransomware locks files and demands payment to unlock them.

2. Step 2: Match options to ransomware

   Software that locks your files and asks for money exactly matches this behavior.

3. Final Answer:

   Software that locks your files and asks for money -> Option B

4. Quick Check:

   Ransomware = Locks files + money demand [OK]

Hint: Ransomware locks files and demands money, not deletes permanently [OK]

Common Mistakes:

• Confusing ransomware with malware that deletes files
• Thinking ransomware is a phishing scam
• Believing ransomware improves performance

3. Look at this scenario:

"You receive an email asking to click a link to verify your bank details. The link leads to a fake website."

What type of threat is this?

medium

A. Phishing

B. Ransomware

C. Malware

D. Spyware

Solution

1. Step 1: Analyze the scenario

   The email tries to trick you into giving bank details via a fake website.

2. Step 2: Identify the threat type

   This is classic phishing: tricking for personal info using fake sites.

3. Final Answer:

   Phishing -> Option A

4. Quick Check:

   Fake site + trick = Phishing [OK]

Hint: Fake websites asking for info usually mean phishing [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking malware always damages files
• Assuming spyware is the same as phishing

4. A user reports their files are locked and a message demands payment. Which step fixes the problem?

medium

A. Click the payment link to unlock files

B. Ignore the message and continue working

C. Run antivirus software and disconnect from the internet

D. Share your password with the sender

Solution

1. Step 1: Identify the threat

   Locked files and payment demand indicate ransomware infection.

2. Step 2: Choose safe recovery action

   Running antivirus and disconnecting stops spread and helps remove ransomware safely.

3. Final Answer:

   Run antivirus software and disconnect from the internet -> Option C

4. Quick Check:

   Ransomware fix = Antivirus + disconnect [OK]

Hint: Never pay ransom; use antivirus and isolate device [OK]

Common Mistakes:

• Paying ransom immediately
• Ignoring the problem
• Sharing passwords with attackers

5. A company wants to protect employees from malware, phishing, and ransomware. Which combined approach is best?

hard

A. Disable all internet access permanently

B. Only install antivirus software and ignore employee training

C. Ask employees to share passwords to detect phishing

D. Install antivirus, train employees on suspicious emails, and backup data regularly

Solution

1. Step 1: Understand threats and protections

   Malware needs antivirus, phishing needs training, ransomware needs backups.

2. Step 2: Evaluate options

   Install antivirus, train employees on suspicious emails, and backup data regularly combines antivirus, training, and backups, covering all threats effectively.

3. Final Answer:

   Install antivirus, train employees on suspicious emails, and backup data regularly -> Option D

4. Quick Check:

   Combined defense = Antivirus + Training + Backup [OK]

Hint: Best defense combines software, training, and backups [OK]

Common Mistakes:

• Relying only on antivirus
• Ignoring employee awareness
• Disabling internet is impractical