Cybersecurity is about protecting yourself and your information online. Almost everything we do like work, banking, shopping, learning, and even socializing, happens online. While this makes life easier, it also creates opportunities for cybercriminals to steal information, spread harmful software, and trick people into scams.

Why strong passwords matter: Passwords are the first line of defense against unauthorized access. Weak or reused passwords can be easily guessed, cracked, or leaked.

Best practices for strong passwords:

At least 12–16 characters long.
A mix of uppercase, lowercase, numbers, and special characters.
Avoid personal information (birthdays, names, simple words).
Use passphrases (e.g., a random sentence or unrelated words).

Password managers: Tools like LastPass, 1Password, or Bitwarden securely store and generate unique passwords for each account. They reduce the risk of forgetting passwords and encourage safer habits.

Two-Factor Authentication (2FA)

2FA adds a second step to login beyond just a password. Even if your password is stolen, the attacker can’t access your account without the second factor.

Types of 2FA:

SMS codes (less secure, but better than nothing).
Authenticator apps (Google Authenticator, Authy, Microsoft Authenticator).
Hardware security keys (YubiKey, Titan Security Key).

It dramatically reduces the risk of account takeover, especially for sensitive accounts like email, banking, and work systems.

Recognizing Phishing Emails, Links and Fake Websites

Phishing is a cyberattack where scammers trick you into revealing sensitive information by pretending to be trusted entities (e.g., your bank or workplace).

*Warning signs:

Urgent or threatening language (“Your account will be suspended!”).
Suspicious email addresses or misspelled domain names.
Poor grammar or generic greetings (“Dear user”).
Links that don’t match the official website.

*How to stay safe:

Hover over links before clicking.
Never enter login details on unfamiliar pages.
Verify requests with the organization directly.
Use browser security tools or extensions that flag suspicious sites.

Common Online Scams

Giveaway scams: “You’ve won a prize” messages asking for payment/shipping to claim it. Legitimate companies never charge winners.
Impersonation scams: Scammers pretend to be relatives, celebrities, government agencies, or even company executives (CEO fraud).
Job offer scams: Fake recruiters ask for upfront “training fees,” “equipment costs,” or personal details like bank info.
Investment scams: Promises of guaranteed high returns (crypto, forex, or Ponzi schemes).

How to avoid them: Be skeptical of offers that sound too good to be true, verify sources, and avoid sending money or personal information to strangers.

Introduction to Malware & How to Prevent Infection

Malware is a malicious software designed to damage, steal data, or spy on users. Types include viruses, worms, spyware, ransomware, and trojans.

Prevention methods:

Antivirus software: Detects and removes known threats. Keep it updated.
System updates: Regularly patch your operating system and apps to fix security holes.
Safe downloads: Only download apps/software from official stores or trusted websites.
Email attachments: Don’t open attachments from unknown or suspicious senders.
Firewalls & security settings: Enable built-in protections to block unauthorized access.

Role-Play Exercise

Scenario 1: Suspicious Email at Work

You’re at work when you receive an email titled:

Subject: Urgent – Update Your Payroll Details Now

From: hr-department@xzngroup-payments.com

Body: “Dear Employee, we’ve noticed an issue with your salary account. Please click the link below to update your bank details within 24 hours to avoid delayed payment.”

Questions:

What red flags do you notice in this email?
What should you do next?

Scenario 2: Strange Phone Call

A caller introduces themselves as a representative from your bank. They say:

“There has been unusual activity on your account. Please confirm your card PIN so we can stop the transaction.”

Questions:

What type of scam could this be?
What should you say or do in this situation?

Scenario 3: Too-Good-To-Be-True Offer

On Instagram, you see a post from a “verified-looking” account:

“We are giving away ₦100,000 to the first 50 people who send us ₦5,000 for verification. Don’t miss out, act fast!”

Questions:

What’s suspicious about this offer?
How should you respond?

Scenario 4: Malware Risk

You need a PDF editing tool for work. While searching, you find a free download on a random website that looks shady but promises “Full Pro Features - No Payment Required.”

Questions:

What’s the risk of downloading this software?
What is the safer alternative?

M6:S2 - Cybersecurity Basics

PREVIOUS STEP

Understanding Digital Footprints and Online Identity

NEXT STEP

Data Protection and Privacy

M6:S2 - Cybersecurity Basics

PREVIOUS STEP

Understanding Digital Footprints and Online Identity

NEXT STEP

Data Protection and Privacy

Course content

Course content