Common Online Threats

What is Phishing?

Phishing attacks use deceptive emails, texts, or websites that appear to be from legitimate organizations to trick you into revealing sensitive information like passwords, credit card numbers, or social security numbers.

Real Example

An email claiming to be from your bank saying "Your account will be closed unless you verify your information immediately" with a link to a fake banking website.

Warning Signs

• Urgent or threatening language
• Generic greetings (\"Dear Customer\")
• Suspicious sender addresses
• Unexpected attachments or links
• Poor grammar and spelling

How to Protect Yourself

1. Never click links in suspicious emails
2. Type website URLs directly into your browser
3. Verify requests by calling the organization directly
4. Use email filters and spam protection
5. Keep your software updated

What is Malware?

Malware is any software intentionally designed to cause damage to a computer, server, client, or computer network. It includes viruses, worms, trojan horses, spyware, and ransomware.

Real Example

A fake software update popup that actually installs keylogger software to capture everything you type, including passwords and credit card numbers.

Warning Signs

• Computer running slowly
• Unexpected pop-ups or ads
• Programs opening or closing automatically
• Files being deleted or encrypted
• Unusual network activity

How to Protect Yourself

1. Use reputable antivirus software
2. Keep your operating system updated
3. Download software only from official sources
4. Be cautious with email attachments
5. Regular system backups

What is Ransomware?

Ransomware is a type of malware that encrypts files on your computer or network, making them inaccessible until you pay a ransom to the attackers for the decryption key.

Real Example

The WannaCry attack in 2017 infected hundreds of thousands of computers worldwide, encrypting files and demanding Bitcoin payments. It affected hospitals, businesses, and government systems.

Warning Signs

• Files become inaccessible or encrypted
• Ransom notes appear on your screen
• File extensions change to unusual formats
• System performance degrades suddenly
• Suspicious network activity

How to Protect Yourself

1. Regular automated backups (offline storage)
2. Keep software and systems updated
3. Use endpoint protection software
4. Train users to recognize phishing attempts
5. Limit user privileges and network access

What is Social Engineering?

Social engineering uses psychological manipulation to trick people into divulging confidential information or performing actions that compromise security, often exploiting human emotions like fear, curiosity, or helpfulness.

Real Example

A caller pretending to be from IT support asking for your password to "fix a system issue." They create urgency and authority to pressure you into complying.

Warning Signs

• Unsolicited contact asking for sensitive information
• Creating false urgency or emergency situations
• Claiming to be from authority figures
• Offering something too good to be true
• Playing on emotions (fear, greed, sympathy)

How to Protect Yourself

1. Verify the identity of anyone requesting information
2. Be skeptical of unsolicited contact
3. Never give out passwords or sensitive data
4. Take time to think before acting
5. Follow established verification procedures

What are Weak/Reused Passwords?

Weak passwords are easy to guess or crack, while reused passwords mean that if one account is compromised, attackers can access all your other accounts using the same password.

Real Example

Using "password123" or "123456" for your email, which can be cracked in seconds. Or using the same password for your email, banking, and social media accounts.

Warning Signs

• Using common passwords (password, 123456, qwerty)
• Using personal information (birthday, name, address)
• Using the same password across multiple sites
• Passwords shorter than 12 characters
• Never changing default passwords

How to Protect Yourself

1. Use unique passwords for each account
2. Create long, complex passwords (12+ characters)
3. Use a password manager
4. Enable two-factor authentication
5. Change default passwords immediately

What are Public Wi-Fi Risks?

Public Wi-Fi networks are often unsecured, allowing cybercriminals to intercept data transmitted over the network, steal personal information, or inject malware into connected devices.

Real Example

Connecting to "Free_WiFi" at a coffee shop, which is actually run by a hacker who can see all your browsing activity, capture login credentials, and steal personal data.

Warning Signs

• Networks without passwords
• Suspicious network names (\"Free_WiFi\", \"Airport_WiFi\")
• Multiple networks with similar names
• Requests to install certificates or software
• Pop-ups asking for personal information

How to Protect Yourself

1. Use a VPN on public networks
2. Verify network names with staff
3. Avoid accessing sensitive accounts
4. Turn off auto-connect to Wi-Fi
5. Use your mobile hotspot instead