Practice: Spot the Attack

Relax. We'll talk through this in plain words — no textbook voice.

What you'll walk away with

Understand Practice: Spot the Attack without any of the intimidation
Apply this concept right away in real-world scenarios
Get comfortable avoiding security risks for yourself and the people around you

Let's think about this for a second

This practice set is designed to help you re-drill the phishing, social engineering, malware, and password concepts you learned in the Basic/Intermediate chapters through scenario recognition — it's not new material, it's pure practice.

Let's connect this to a real scenario

Four scenarios: (1) You get an email — 'Your account will be suspended in 24 hours, click here to verify' — sender: security@paypaI.com (capital I, not lowercase l). (2) A phone call — 'I'm calling from the IT department, I need to verify your password.' (3) You find a USB drive in the office parking lot labeled 'Confidential'. (4) A free software download asks you to install an extra toolbar. For each scenario, identify the attack type and write down what the correct response would be.

Identify the attack type for all 4 scenarios
Write the correct response for each scenario
Point out specifically what the red flag is in each

Let's look at this together

text

Scenario 1: Phishing email (typosquatted domain: paypaI vs paypal)
Scenario 2: Social engineering / pretexting (fake IT support)
Scenario 3: Baiting (malicious USB drive)
Scenario 4: Bundled malware/PUP (potentially unwanted program)

You should see

You'll be able to list the attack type + correct response for all 4 scenarios.

Try it in 5 minutes

Read through all 4 scenarios yourself and write down the attack type + response before checking your answers.

A quick word of caution

In the real world, never plug a 'found' USB drive into your computer — it's a classic vector for baiting attacks.

Easy traps

Jumping straight to the answer in the code block right after reading the scenario — thinking it through yourself is where the learning happens
Underestimating what could happen if you plug a USB drive into your computer

Now try it yourself

Read through all 4 scenarios yourself and write down the attack type + response before checking your answers.

You'll know it worked when: You'll be able to list the attack type + correct response for all 4 scenarios.