Welcome to our cyber security game, Virus Runner. Below are the levels
designed to test your knowledge on different types of phishing. Each
level presents a series of phishing scenarios for you to identify if it
is a scam. Then you will be provided with the correct and incorrect
feedback for each scenario.
Level One: Phishing
Did you know phishing is an online scam where cyber scammers pretend to
be trustworthy sources, like your bank or friends, to trick you into
sharing sensitive information? They create realistic-looking messages or
emails, often with a sense of urgency, to lure you into giving away your
passwords, bank details, or personal data. To protect yourself, always
verify the sender's identity, avoid clicking on suspicious links or
downloading attachments, and never share personal info with strangers
online!
Scenario 1: Online Payment Email
Scenario description: You have received an email from CyberAmazeON. It
contains information asking for a large payment. The email also is
demanding you provide payment within 24 hours through this link:
https://totallylegitCyberAMAzeONnotascam.com.
Prompt: Is this a scam?
Correct answer: Yes, this is a scam.
Feedback: The email is a scam because it is asking for payment
immediately through a suspicious link. Be wary of messages from unknown
senders that create a sense of urgency and ask for payment. When in
doubt, you can check your account directly with the company through
their official website or phone number.
Incorrect answer: No, this is not a scam.
Feedback: Oh no, this was an email scam (also known as a phish). If you
receive an invoice for an item that you haven't paid for, do not click
the link! Instead check directly with your bank to see if you were
charged. Also, if you do not remember paying for the item at this
company, check with the company directly through their official website
or phone number.
Scenario 2: Asking for Credit Card Information Email
Scenario description: You have received an email from an unknown sender.
It contains information asking if he can borrow your parent's credit
card information.
Prompt: Is this a scam?
Correct answer: Yes, this is a scam.
Feedback: Never share personal information or payment information with
strangers!
Incorrect answer: No, this is not a scam.
Feedback: Oh no, this was an email scam (also known as a phish). Never
share personal information or payment information with strangers!
Scenario 3: Redeem Discount Code Email
Scenario description: You have received an email from Pizza House. The
email is asking you to redeem this Pizza House discount code
“QSJWAAP546” on their official website.
Prompt: Is this a scam?
Correct answer: No, this is not a scam.
Feedback: Normally email scam messages would also try to include an
embedded link along with the code, however the message contained only a
redemption code. Also, when in doubt, make sure to confirm the website's
link is real with Pizza House or with any company's customer support
before redeeming the code.
Incorrect answer: Yes, this is a scam.
Feedback: A redemption code was the only piece of information offered to
you. Hackers would often try to include a clickable link alongside the
code to trick users into visiting websites.
Scenario 4: Suspicious Login Email
Scenario description: You have received an email from Google. The email
is asking you to verify your account as there has been a suspicious
login on your email account from an unrecognized device, and does not
include any additional links or actions.
Prompt: Is this a scam?
Correct answer: No, this is not a scam.
Feedback: This is not a phishing message, as the sender wasn't trying to
obtain information from you. Often organizations will require users to
confirm new logins from unrecognized devices.
Incorrect answer: Yes, this is a scam.
Feedback: The sender wasn't trying to take your information from this
email. Often organizations will require users to confirm new logins from
unrecognized devices.
Scenario 5: Package Delivery Details Email
Scenario description: You are expecting a package to be delivered and
have received an email from CyberAmazeON. It contains information about
your order number of #OXPS21314 and your expected delivery. The email
also stated that the expected package is about to be delivered and is
timed to arrive at 3:07pm.
Prompt: Is this a scam?
Correct answer: No, this is not a scam.
Feedback: This is not a phishing (email scam) message. The sender did
not try to obtain any information from you or redirect you to another
website.
Incorrect answer: Yes, this is a scam.
Feedback: This email is passing on information to you with your order
number and time delivered. Email scams will try to trick you into
clicking links, such as checking your order status and redirecting you
to another website.
Level Two: Smishing
Did you know that smishing is like phishing, only it happens through
text messages. Scammers send fake messages that look real, pretending to
be your bank or other trusted sources, to trick you into sharing
personal info or clicking on malicious links. Be careful and never click
on suspicious links or share sensitive data through text. If you're
unsure, contact the company directly using a trusted phone number to
verify the message's authenticity. Keep your guard up, stay safe and
protect your info.
Scenario 1: Package Delivery Details Text Message
Scenario description: You receive a text message from CyberAmazeON but
have not ordered any packages lately. The message says “Hello agent,
your CyberAmazeON package with tracking code GB-6412-GH83 is expecting
you to set delivery preferences: c7dvr.info/FGdGtk12vil3M”
Prompt: Is this a scam?
Correct answer: Yes, this is a scam.
Feedback: This is a smishing (text message) scam. These scams often
contain links that redirect you to a website to fill out your personal
information.
Incorrect answer: No, this is not a scam.
Feedback: Oh no, this was a texting scam (also known as a smish). This
is a smishing (text message) scam. These scams often contain links that
redirect you to a website to fill out your personal information.
Scenario 2: Gift Card Winner Text Message
Scenario description: You receive a text message that says “Congrats
Agent! Your code L49-K8X7 printed on your last receipt is among 7 we
randomly picked for $1000 Walmart gift card promotion
k3xvc.info/pl1Llr3N5GN3M”
Prompt: Is this a scam?
Correct answer: Yes, this is a scam.
Feedback: This is a smishing (text message) scam, which often contain
links that will redirect you to a website asking you to enter personal
or banking information.
Incorrect answer: No, this is not a scam.
Feedback: Oh no, this was a texting scam (also known as a smish). These
messages often contain links that will redirect you to a website asking
you to enter personal or banking information.
Scenario 3: Package Delivery Confirmation Text Message
Scenario description: You have recently ordered a package from this
company and are expecting delivery. You receive a text message that says
“Hello from CyberVerse UNIQLO - Your expected package [JY1111000080500]
was delivered to your mailbox or front door.”
Prompt: Is this a scam?
Correct answer: No, this is not a scam.
Feedback: This is not a scam. This message only provided you an alert
about your expected package.
Incorrect answer: Yes, this is a scam.
Feedback: This is not a scam. This message only provided you an alert
about your expected package.
Scenario 4: Social Media Authentication Text Message
Scenario description: You are signing into your Instagram account. You
login and you now receive a text message. The message says “Please use
583983 as your security code to log in. We will never contact you for
this code. Do not send show or send this code to anyone else.”
Prompt: Is this a scam?
Correct answer: No, this is not a scam.
Feedback: This is not a smishing (text message) scam. The message sent
to you is a security code to sign into your Instagram account. Most
smishing messages will display suspicious links alongside a security
code when trying to scam you.
Incorrect answer: Yes, this is a scam.
Feedback: This is not a smishing (text message) scam. The message sent
to you is a security code to sign into your Instagram account. Most
smishing messages will display suspicious links alongside a security
code when trying to scam you.
Scenario 5: Browsing Social Media Comments
Scenario description: You are on social media, and you browse through
the comments of a video you’re interested in. A user provides a link to
get free product in the comment section.
Prompt: Is this a scam?
Correct answer: Yes, this is a scam.
Feedback: Never click on links on social media comments if you are
unsure of where you will be redirected! The links might take you to a
fake website, or contain malicious software designed to infect your
device.
Incorrect answer: No, this is not a scam.
Feedback: Never click on links on social media comments if you are
unsure of where you will be redirected! The links might take you to a
fake website, or contain malicious software designed to infect your
device.
Level Three: Vishing
Did you know that vishing is like phishing, only vishing happens over
the phone? Scammers pretend to be trustworthy people like bank reps or
officials and create a sense of urgency to trick you into giving away
personal info. Remember to be careful with unplanned phone calls, hang
up, and verify the caller's identity by contacting the organization
directly using a reliable number when in doubt. Don't share personal
info with anyone you don't trust on the phone.
Scenario 1: Government Verification Call
Scenario description: Your grandpa receives a phone call but is having a
hard time hearing the caller. He passes the phone to you and the caller
on the phone asks for your grandpa’s social insurance number and
financial information to check for government verification.
Prompt: Is this a scam?
Correct answer: Yes, this is a scam.
Feedback: This is a scam! The caller is asking for personal information
and is posing as a government employee. Never share your personal
information or financial information over the phone without confirming
it is someone you know or trust.
Incorrect answer: No, this is not a scam.
Feedback: The caller is asking for personal information and is posing as
a government employee. Never share your personal information or
financial information over the phone without confirming it is someone
you know or trust.
Scenario 2: Bill Payment Request Call
Scenario description: You receive a phone call, and the caller is asking
you to pay your phone bill through the phone. He asks for your personal
information first to confirm your identity and then is asking you to pay
by providing your parent’s banking information.
Prompt: Is this a scam?
Correct answer: Yes, this is a scam.
Feedback: This is a vishing scam (voice mail). Hackers will often pose
as service providers and ask for payment information. Never provide
banking information over the phone.
Incorrect answer: No, this is not a scam.
Feedback: This is a vishing (voice mail) scam. Hackers will often pose
as service providers and ask for payment information. Never provide
banking information over the phone.
Scenario 3: Voicemail from Doctor’s Office
Scenario description: There is a voicemail left on your phone. The
message says “Hello Agent, this is the receptionist from your new family
doctor. You owe a balance of $50 dollars on your next visit for
transferring all records from your previous doctor.
Prompt: Is this a scam?
Correct answer: No, this is not a scam.
Feedback: This is not a vishing (voice mail) scam. The voice message
left by your new family doctor is asking for payment on your next visit.
You can always ask your parents or call your new doctor to ask or check
what the billing is for before spending money.
Incorrect answer: Yes, this is a scam.
Feedback: This is not a vishing (voice mail) scam. The voice message
left by your new family doctor is asking for payment on your next visit.
You can always ask your parents or call your new doctor to ask or check
what the billing is for before spending money.
Scenario 4: Voicemail from Booked Flight
Scenario description: You have a flight tomorrow to New York. There is a
voicemail left on your phone. The message says “Hello, your booked
flight with East Jet for New York has changed. The flight time has
changed from 8:00AM to 1:00PM due to some maintenance work, more
information has been sent to your email.
Prompt: Is this a scam?
Correct answer: No, this is not a scam.
Feedback: This is not a vishing (voice mail) scam. This is an automated
voice call giving you updates about the changes to your flight! The call
did not ask you for your information or redirect you to a suspicious
website.
Incorrect answer: Yes, this is a scam.
Feedback: This is not a vishing (voice mail) scam. This is an automated
voice call giving you updates about the changes to your flight! The call
did not ask you for your information or redirect you to a suspicious
website.
Scenario 5: Internet Service Provider Call
Scenario description: You receive a call from your internet provider.
The caller is asking that there is an overdue payment of $301.50 for
your internet bill. He wants you to pay through the phone with your
parent’s credit card or else he will cancel your service. The caller
asks for all your parents credit card information.
Prompt: Is this a scam?
Correct answer: Yes, this is a scam.
Feedback: This is a vishing (voice mail) scam. Your service provider is
unlikely to request payment information over the phone. If you are
unsure if this is a legitimate request, hang up and call back your
internet provider directly to confirm the bill.
Incorrect answer: No, this is not a scam.
Feedback: This is a vishing (voice mail) scam. Your service provider is
unlikely to request payment information over the phone. If you are
unsure if this is a legitimate request, hang up and call back your
internet provider directly to confirm the bill.