Cybersecurity Threats: Malware and Phishing

Active learning helps students internalise cybersecurity concepts because these threats are abstract and constantly evolving. When students analyse real phishing emails or simulate infections, they move from passive awareness to tangible skills that protect data in their daily digital lives.

• Class 11
• Computer Science
• 4 activities
• 25 min–40 min

Learning Objectives

1. Classify different types of malware based on their propagation and payload mechanisms.
2. Analyze the structural and linguistic cues present in phishing messages to identify fraudulent attempts.
3. Compare and contrast the tactics used in various social engineering attacks, such as pretexting and baiting.
4. Evaluate the potential impact of specific malware infections or phishing scams on individual users and organizations.
5. Design a simple checklist for users to verify the legitimacy of an email or website before sharing sensitive information.

Role Play

⏱ 35 min·Small Groups

Email Audit: Spot Phishing Clues

Provide printed sample emails, some legitimate and some phishing. In small groups, students list red flags like mismatched sender domains, urgent demands, or suspicious attachments. Groups vote on classifications and justify choices to the class.

Prepare & details

Explain the different types of malware and how they compromise computer systems.

Facilitation Tip: During Email Audit, give students magnifying glasses to examine each email header line closely, as attackers often hide clues in less obvious fields like 'reply-to' addresses.

Setup: Adaptable to standard classroom seating with fixed benches; fishbowl arrangements work well for Classes of 35 or more; open floor space is useful but not required

Materials: Printed character cards with role background, objectives, and knowledge constraints, Scenario brief sheet (one per student or one per group), Structured observation sheet for students watching a fishbowl format, Debrief discussion prompt cards, Assessment rubric aligned to NEP 2020 competency domains

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

Role Play

⏱ 25 min·Pairs

Flowchart Duel: Virus vs Worm

Pairs draw flowcharts showing virus replication needing user action versus worm self-spreading. They swap charts with another pair for peer review and corrections. Present one key difference to the whole class.

Prepare & details

Analyze the characteristics of a phishing attempt to identify potential scams.

Facilitation Tip: During Flowchart Duel, provide students with blank flowcharts and coloured pencils to map each malware type’s behaviour step-by-step, reinforcing sequential thinking.

Setup: Adaptable to standard classroom seating with fixed benches; fishbowl arrangements work well for Classes of 35 or more; open floor space is useful but not required

Materials: Printed character cards with role background, objectives, and knowledge constraints, Scenario brief sheet (one per student or one per group), Structured observation sheet for students watching a fishbowl format, Debrief discussion prompt cards, Assessment rubric aligned to NEP 2020 competency domains

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

Role Play

⏱ 40 min·Small Groups

Role-Play Station: Social Engineering

Set up stations for tactics like pretexting or baiting. Small groups act as attacker and defender in 5-minute skits. Observers note defence strategies, then rotate roles and debrief common errors.

Prepare & details

Differentiate between various social engineering tactics used by cybercriminals.

Facilitation Tip: During Role-Play Station, set a timer for each scenario to keep energy high, then pause for 30 seconds of silent reflection before switching roles.

Setup: Adaptable to standard classroom seating with fixed benches; fishbowl arrangements work well for Classes of 35 or more; open floor space is useful but not required

Materials: Printed character cards with role background, objectives, and knowledge constraints, Scenario brief sheet (one per student or one per group), Structured observation sheet for students watching a fishbowl format, Debrief discussion prompt cards, Assessment rubric aligned to NEP 2020 competency domains

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

Role Play

⏱ 30 min·Whole Class

Threat Hunt Game: Whole Class Quiz

Project scenarios on malware or phishing. Students buzz in with buzzers or hands to identify threats and suggest preventions. Tally scores and discuss wrong answers as a class.

Prepare & details

Explain the different types of malware and how they compromise computer systems.

Facilitation Tip: During Threat Hunt Game, assign each team a different colour sticky note so you can quickly see which groups spotted threats fastest during the class review.

Setup: Adaptable to standard classroom seating with fixed benches; fishbowl arrangements work well for Classes of 35 or more; open floor space is useful but not required

Materials: Printed character cards with role background, objectives, and knowledge constraints, Scenario brief sheet (one per student or one per group), Structured observation sheet for students watching a fishbowl format, Debrief discussion prompt cards, Assessment rubric aligned to NEP 2020 competency domains

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

Teaching This Topic

Teachers should avoid overwhelming students with technical jargon first. Start with relatable examples like school Wi-Fi outages or classmate accounts being hacked, then layer technical terms onto familiar experiences. Research shows that connecting cybersecurity to students’ lived digital habits makes lessons stick. Emphasise that technology alone cannot prevent breaches, so human vigilance is central.

What to Expect

Successful learning is visible when students confidently identify phishing red flags, distinguish viruses from worms through clear examples, and explain why social engineering tricks succeed even when technology defences fail.

Watch Out for These Misconceptions

Common Misconception

During Flowchart Duel, watch for students grouping all malware under 'Virus' without distinguishing replication methods.

What to Teach Instead

Provide a sorting mat with two columns labelled 'Needs Host' and 'Self-Spreading' and have pairs place example cards like 'Trojan' and 'Worm' under the correct column before creating flowcharts.

Common Misconception

During Role-Play Station, watch for students assuming phishing only involves emails.

What to Teach Instead

Give each pair three scenario cards: one email, one SMS, and one voice call, and require them to act out each version before discussing how tone and urgency vary across channels.

Common Misconception

During Threat Hunt Game, watch for students believing antivirus software catches every threat.

What to Teach Instead

Include two fake 'AV scan' icons in your quiz: one showing a green tick and another showing a 'zero-day threat bypassed' message, then discuss why human checks matter.

Assessment Ideas

Exit Ticket

After Email Audit, give students two short scenarios: one describing a virus infection via an email attachment and another detailing a smishing SMS link. Ask them to write one sentence for each scenario explaining the core threat and one sentence identifying a key indicator that distinguishes it from legitimate activity.

Discussion Prompt

During Email Audit, present a mock phishing email to the class. Ask: 'What are three specific elements in this email that raise suspicion? How could a user verify the legitimacy of the sender or the linked website without clicking on it?' Facilitate a class discussion on their observations and verification methods.

Quick Check

After Flowchart Duel, display a list of malware types (e.g., Virus, Worm, Trojan, Ransomware) and social engineering tactics (e.g., Phishing, Pretexting, Baiting). Ask students to match each tactic to its primary goal or mechanism. Review answers as a class, clarifying any misconceptions.

Extensions & Scaffolding

• Challenge students who finish early to design a phishing email that mimics a popular Indian e-commerce site, then swap with peers for detection practice.
• For students who struggle, provide a partially completed flowchart for viruses and worms with key terms missing, to guide them through the comparison step-by-step.
• Deeper exploration: Ask students to research a real cyberattack on an Indian institution and present how malware or phishing played a role, linking theory to current events.

Key Vocabulary

Malware	Short for malicious software, this is any software intentionally designed to cause damage to a computer, server, client, or computer network. Examples include viruses, worms, and ransomware.
Virus	A type of malware that attaches itself to legitimate files or programs and replicates when the host file is executed, spreading to other files.
Worm	A standalone malware program that replicates itself in order to spread to other computers, often exploiting network vulnerabilities without needing to attach to an existing program.
Phishing	A cybercrime where attackers impersonate trusted entities, typically through emails, text messages, or fake websites, to trick individuals into revealing sensitive information like passwords or credit card details.
Social Engineering	The psychological manipulation of people into performing actions or divulging confidential information, often used as a method to gain access to systems or data.