Common threats (malware, phishing, ransomware) in Intro to Computing - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is malware?

Malware is bad software designed to harm or take control of your computer without your permission. It can steal information, slow down your device, or cause other problems.

beginner

What does phishing mean?

Phishing is a trick where someone pretends to be a trustworthy person or company to steal your personal information like passwords or credit card numbers.

beginner

Explain ransomware in simple terms.

Ransomware is a type of malware that locks your files or computer and asks for money to unlock them. It's like a digital kidnapper.

intermediate

How can you protect yourself from phishing attacks?

You can protect yourself by not clicking on suspicious links, checking the sender's email carefully, and never sharing passwords or personal info through email.

beginner

What is a real-world analogy for ransomware?

Imagine someone locks your house and demands money before giving you the key. Ransomware does the same but with your computer files.

Which of the following is NOT a type of malware?

A Worm

B Virus

C Phishing

D Trojan Horse

Phishing is a type of social trick, not malware itself. Virus, Worm, and Trojan Horse are types of malware.

What does ransomware do to your files?

A Deletes them permanently

B Sends them to your contacts

C Copies them to another device

D Locks them and asks for money

Ransomware locks your files and demands payment to unlock them.

Phishing attacks usually try to steal your:

A Physical mail

B Passwords and personal info

C Computer hardware

D Internet connection

Phishing tricks you into giving away passwords and personal information.

Which action helps protect against malware?

A Using antivirus software

B Installing software from unknown sources

C Clicking all email links

D Sharing passwords with friends

Using antivirus software helps detect and remove malware.

A common sign of a phishing email is:

A A request for personal info with urgent language

B An email from a known friend

C A newsletter you subscribed to

D A message with no links

Phishing emails often use urgent language to trick you into giving personal info.

Describe what malware, phishing, and ransomware are, using simple words and examples.

Think about how each one can affect your computer or personal information.

Explain three ways you can protect yourself from common online threats like malware, phishing, and ransomware.

Consider habits that keep your computer and information safe.

Practice

1. Which of the following best describes phishing?

easy

A. Tricking someone to reveal personal information

B. Locking files and demanding money

C. Damaging or deleting files on a device

D. Improving device performance

Solution

1. Step 1: Understand phishing concept

   Phishing is a trick to get personal info by pretending to be trustworthy.

2. Step 2: Compare options to phishing

   Only Tricking someone to reveal personal information matches this description exactly.

3. Final Answer:

   Tricking someone to reveal personal information -> Option A

4. Quick Check:

   Phishing = Tricking for info [OK]

Hint: Phishing tricks you to share info, not damage files [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking phishing damages files
• Mixing phishing with malware

2. Which of these is the correct description of ransomware?

easy

A. Software that deletes your files permanently

B. Software that locks your files and asks for money

C. A scam email asking for your password

D. A program that speeds up your computer

Solution

1. Step 1: Recall ransomware behavior

   Ransomware locks files and demands payment to unlock them.

2. Step 2: Match options to ransomware

   Software that locks your files and asks for money exactly matches this behavior.

3. Final Answer:

   Software that locks your files and asks for money -> Option B

4. Quick Check:

   Ransomware = Locks files + money demand [OK]

Hint: Ransomware locks files and demands money, not deletes permanently [OK]

Common Mistakes:

• Confusing ransomware with malware that deletes files
• Thinking ransomware is a phishing scam
• Believing ransomware improves performance

3. Look at this scenario:

"You receive an email asking to click a link to verify your bank details. The link leads to a fake website."

What type of threat is this?

medium

A. Phishing

B. Ransomware

C. Malware

D. Spyware

Solution

1. Step 1: Analyze the scenario

   The email tries to trick you into giving bank details via a fake website.

2. Step 2: Identify the threat type

   This is classic phishing: tricking for personal info using fake sites.

3. Final Answer:

   Phishing -> Option A

4. Quick Check:

   Fake site + trick = Phishing [OK]

Hint: Fake websites asking for info usually mean phishing [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking malware always damages files
• Assuming spyware is the same as phishing

4. A user reports their files are locked and a message demands payment. Which step fixes the problem?

medium

A. Click the payment link to unlock files

B. Ignore the message and continue working

C. Run antivirus software and disconnect from the internet

D. Share your password with the sender

Solution

1. Step 1: Identify the threat

   Locked files and payment demand indicate ransomware infection.

2. Step 2: Choose safe recovery action

   Running antivirus and disconnecting stops spread and helps remove ransomware safely.

3. Final Answer:

   Run antivirus software and disconnect from the internet -> Option C

4. Quick Check:

   Ransomware fix = Antivirus + disconnect [OK]

Hint: Never pay ransom; use antivirus and isolate device [OK]

Common Mistakes:

• Paying ransom immediately
• Ignoring the problem
• Sharing passwords with attackers

5. A company wants to protect employees from malware, phishing, and ransomware. Which combined approach is best?

hard

A. Disable all internet access permanently

B. Only install antivirus software and ignore employee training

C. Ask employees to share passwords to detect phishing

D. Install antivirus, train employees on suspicious emails, and backup data regularly

Solution

1. Step 1: Understand threats and protections

   Malware needs antivirus, phishing needs training, ransomware needs backups.

2. Step 2: Evaluate options

   Install antivirus, train employees on suspicious emails, and backup data regularly combines antivirus, training, and backups, covering all threats effectively.

3. Final Answer:

   Install antivirus, train employees on suspicious emails, and backup data regularly -> Option D

4. Quick Check:

   Combined defense = Antivirus + Training + Backup [OK]

Hint: Best defense combines software, training, and backups [OK]

Common Mistakes:

• Relying only on antivirus
• Ignoring employee awareness
• Disabling internet is impractical