Spot the phish
5 messages. Some are lying.
Emails, texts, and DMs that look like they just hit your phone. You call each one. Then we mark up what gave it away. Most people miss at least one, including the ones that turn out to be real.
Before you start
Where to look
You do not need to know security for this. You just need to know where to look, and it is the same four places every time.
Who actually sent it
The name at the top is just a label. Anyone can type whatever they want there. The address next to it is the part that counts.
Where the link really goes
Read a URL from the right, starting at the last dot before the first slash. Everything to the left of that is dressing.
What it wants from you
A password, a card, a code, a login. Real notifications tell you something happened. They do not ask you to hand something over.
Why it has to be now
Urgency is there so you skip asking anyone. A real deadline can wait for a question.
Spot the phish
Three are fake. Two are not.
Five messages that look like they just hit your phone. Call each one, then we mark up what you should have seen. A few minutes, no account.
- Email, message 1 of 5, not answered yetEmail
- Email, message 2 of 5, not answered yetEmail
- Text, message 3 of 5, not answered yetText
- Text, message 4 of 5, not answered yetText
- Discord, message 5 of 5, not answered yetDiscord
5 messages · a few minutes · no sign-in
Now the real version
Five fake messages is the demo. The club is the rest of it.
Creek Cyber is Cherry Creek High School’s cybersecurity club. We meet on Wednesdays after school. The rest of the year is locking down a machine someone is actively attacking, pulling a password out of a packet capture, breaking a cipher. We also compete in CyberPatriot and spend the spring on capture-the-flag events. No experience assumed. Most of us started with none.
- Next meeting
- Wednesday, September 163:30 – 5:00 PM · Library Tech Center
- Cost
- NothingNo form, no tryout, no laptop required
- Stay in the loop
- Text @creekcyberto 81010 on Remind
Questions before you turn up? Email creekcybersec@gmail.com.