Easier to read with cream paper, a tint, more contrast or larger text? Choose your colours and text, once, for every page.

Preview

CS 2.2: Spotting phishing and spear phishing

This is the first page of the lesson. Read it and have a go at the activities. The rest is in the full lesson.

50 minutes

Two emails, one trap

Sam gets an email: "Your bank account is locked. Click now." Sam deletes it. It looks like a message sent to thousands of people.

Then Sam's manager gets an email from the "finance director" with her own name in it. It asks for a bank transfer today.

Which one is more dangerous? Today you learn to spot both.

By the end of this lesson

Note

I can list the signs of a fake email and say why one aimed at a single person is harder to spot.

Key words

WordWhat it meansExample
Phishinga fake message sent to many people to trick them
Spear phishinga fake message aimed at one person or a small group
Domainthe part of an email address after the @oakfield-bank.example
Spoofedmade to look as if it came from somebody else
Attachmenta file sent with an email
Urgencya push to act at once, before you can think
Malwaresoftware made to cause harm

The cells students fill in are left blank in this preview.

Starter

Have a go

Starter

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

Phishing is a net cast wide

The core lessons on tricking people explain what phishing is. Here you learn to spot it.

A phishing message goes to a very large number of people. The attacker hopes a few will reply, click or open a file. The message tries to get private details, or to put harmful software on a device.

Five signs of a phishing email

SignWhat it looks likeWhat you check
Public or spoofed addressA bank writes from @freemail.example, or the name looks right but the address is notRead the full address, not only the name
Misspelt domainoakfie1d-bank.example uses the number 1 for the letter lRead the domain one letter at a time
Poor writingSpelling mistakes, odd grammar, "Dear customer"Does a real firm write like this?
Infected attachment or linkinvoice.zip you did not expect, or a link that shows another address when you hoverDo not open it. Ask the sender another way
Urgency"Act in one hour or lose your account"Slow down. Real firms give time

The cells students fill in are left blank in this preview.

Check

Have a go

Check

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

The lesson goes on

8 more parts of this lesson are in the full curriculum, with the tasks, the final check and the labs. A college account gives your students all of it.