Module 1 · How attacks actually start Lesson 1 of 15
Phishing, the door that is always open
A phishing message asks for an action, not for information: open this, approve this, pay this. The tell is usually the consequence of doing nothing being urgent.
The concept
Nearly every serious breach starts with one person clicking one link, and no firewall stops that. Phishing is a message that looks like it comes from somebody you trust — a bank, your college, your manager — and asks you to log in, open an attachment or pay an invoice. The tell is never the spelling; it is the pressure to act quickly and the fact that the request arrived at all.
Four checks catch most of them: read the actual address, not the display name; hover a link before clicking and read the domain to the right of the last dot; treat any unexpected attachment as hostile; and when a message asks for money, a password or a code, confirm through a channel you already trust rather than the one in the message.
Red flags:
urgency ("act within 24 hours")
a lookalike sender domain
a link whose visible text and real target differ
an unexpected attachment
any request for a password, OTP or card details
Verify out of band: call the person on a number YOU look up.
Never enter credentials from a link in an email.Common mistakes
The mistake is assuming you would never fall for one. Every phishing test in every company catches a third of the staff, including the security team, because the good ones arrive on a busy afternoon and look like work. Slow down on anything with an urgent request in it — that pause is the control.
Worked example
A message claiming your salary account will be frozen in two hours works because urgency stops people checking the sender domain. Reading the domain and hovering over the link before clicking takes four seconds and defeats most of it.
Your practice task
Collect five real phishing examples from public awareness pages and write the tell that would have caught each one.
Do this before moving on. Reading a solution teaches the shape of it; typing it teaches you.
Key takeaway
Nearly every serious breach starts with one person clicking one link, and no firewall stops that.
Keep your place in this course
A free account saves which lessons you have finished and unlocks the certificate. The lesson itself stays free to read.
Create free account or sign inCourse complete
You finished every lesson.
Your certificate is ready, and the projects you built are the proof to attach to an application.
Almost there
15 lessons left of 15
Finish every lesson to unlock the certificate. Each one ends in a practice task — do them and the final project brief writes itself.