Common threats (malware, phishing, ransomware) in Intro to Computing - Flowchart & Logic Diagram

Process Overview

This flowchart explains how common cyber threats like malware, phishing, and ransomware work step-by-step. It shows how these threats enter a computer system, what they do, and how users can respond to protect themselves.

Flowchart

Receive Email or Download File

Yes No↓

Click Link or Open File

↓

Malware Infects System

↓

Phishing Steals Info

Yes No↓

Encrypts Files

↓

Demand Ransom

This flowchart shows the step-by-step process of how common threats like malware, phishing, and ransomware operate after a user receives an email or downloads a file. It includes decision points about suspicion, type of threat, and ransomware behavior.

Step-by-Step Trace - 6 Steps

Step 1: User receives an email with a link.

Step 2: User checks if the email looks suspicious.

Step 3: User clicks the link because it looks suspicious but interesting.

Step 4: System detects the threat type: phishing attempt.

Step 5: User enters information on the phishing page.

Step 6: Process ends with data stolen.

Diagram

 +-------------------+      +-------------------+      +-------------------+
 |   User's Computer | ---> |   Malware Program  | ---> |  Files Encrypted   |
 +-------------------+      +-------------------+      +-------------------+
          |                          |                          |
          v                          v                          v
 +-------------------+      +-------------------+      +-------------------+
 |  Phishing Website | ---> |  Steals Info Data |      |  Ransom Demand    |
 +-------------------+      +-------------------+      +-------------------+

This diagram shows how a user's computer interacts with malware and phishing websites. Malware can encrypt files leading to ransom demands, while phishing websites steal user information.

Flowchart Quiz - 3 Questions

What should you do if you receive a suspicious email?

A Avoid clicking links or opening attachments

B Click all links to check if they are safe

C Reply to the sender asking for confirmation

D Forward the email to friends

Key Result

Common cyber threats start with suspicious emails or files and rely on user actions to infect systems or steal data.

Practice

1. Which of the following best describes phishing?

easy

A. Tricking someone to reveal personal information

B. Locking files and demanding money

C. Damaging or deleting files on a device

D. Improving device performance

Solution

1. Step 1: Understand phishing concept

   Phishing is a trick to get personal info by pretending to be trustworthy.

2. Step 2: Compare options to phishing

   Only Tricking someone to reveal personal information matches this description exactly.

3. Final Answer:

   Tricking someone to reveal personal information -> Option A

4. Quick Check:

   Phishing = Tricking for info [OK]

Hint: Phishing tricks you to share info, not damage files [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking phishing damages files
• Mixing phishing with malware

2. Which of these is the correct description of ransomware?

easy

A. Software that deletes your files permanently

B. Software that locks your files and asks for money

C. A scam email asking for your password

D. A program that speeds up your computer

Solution

1. Step 1: Recall ransomware behavior

   Ransomware locks files and demands payment to unlock them.

2. Step 2: Match options to ransomware

   Software that locks your files and asks for money exactly matches this behavior.

3. Final Answer:

   Software that locks your files and asks for money -> Option B

4. Quick Check:

   Ransomware = Locks files + money demand [OK]

Hint: Ransomware locks files and demands money, not deletes permanently [OK]

Common Mistakes:

• Confusing ransomware with malware that deletes files
• Thinking ransomware is a phishing scam
• Believing ransomware improves performance

3. Look at this scenario:

"You receive an email asking to click a link to verify your bank details. The link leads to a fake website."

What type of threat is this?

medium

A. Phishing

B. Ransomware

C. Malware

D. Spyware

Solution

1. Step 1: Analyze the scenario

   The email tries to trick you into giving bank details via a fake website.

2. Step 2: Identify the threat type

   This is classic phishing: tricking for personal info using fake sites.

3. Final Answer:

   Phishing -> Option A

4. Quick Check:

   Fake site + trick = Phishing [OK]

Hint: Fake websites asking for info usually mean phishing [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking malware always damages files
• Assuming spyware is the same as phishing

4. A user reports their files are locked and a message demands payment. Which step fixes the problem?

medium

A. Click the payment link to unlock files

B. Ignore the message and continue working

C. Run antivirus software and disconnect from the internet

D. Share your password with the sender

Solution

1. Step 1: Identify the threat

   Locked files and payment demand indicate ransomware infection.

2. Step 2: Choose safe recovery action

   Running antivirus and disconnecting stops spread and helps remove ransomware safely.

3. Final Answer:

   Run antivirus software and disconnect from the internet -> Option C

4. Quick Check:

   Ransomware fix = Antivirus + disconnect [OK]

Hint: Never pay ransom; use antivirus and isolate device [OK]

Common Mistakes:

• Paying ransom immediately
• Ignoring the problem
• Sharing passwords with attackers

5. A company wants to protect employees from malware, phishing, and ransomware. Which combined approach is best?

hard

A. Disable all internet access permanently

B. Only install antivirus software and ignore employee training

C. Ask employees to share passwords to detect phishing

D. Install antivirus, train employees on suspicious emails, and backup data regularly

Solution

1. Step 1: Understand threats and protections

   Malware needs antivirus, phishing needs training, ransomware needs backups.

2. Step 2: Evaluate options

   Install antivirus, train employees on suspicious emails, and backup data regularly combines antivirus, training, and backups, covering all threats effectively.

3. Final Answer:

   Install antivirus, train employees on suspicious emails, and backup data regularly -> Option D

4. Quick Check:

   Combined defense = Antivirus + Training + Backup [OK]

Hint: Best defense combines software, training, and backups [OK]

Common Mistakes:

• Relying only on antivirus
• Ignoring employee awareness
• Disabling internet is impractical