Cybersecurity – JSS3 Digital Technologies Lesson Note (Third Term)

Cybersecurity is the practice of protecting phones, computers and data from people who want to steal or destroy them. In the real world, we lock our doors to keep thieves away. In the digital world, we use cybersecurity.

Behavioural objectives

By the end of the lesson, students should be able to:

1. Define cybersecurity.
2. Describe hacking, phishing and malware.
3. Identify the warning signs of a phishing message.
4. State four protective measures and explain how each one works.
5. Apply safe online habits in everyday situations.

What are the main threats in cybersecurity?

There are three main threats: hacking, phishing and malware. People who carry them out are often called “digital thieves”.

Hacking

• Meaning: using technical skill to break into an account or computer without permission.
• Everyday picture: it is like someone picking the lock on your front door.

Phishing (the “bait”)

• Meaning: a trick where someone sends a fake email or SMS that looks real.
• Who it pretends to be: your bank, Instagram or a wealthy relative.
• What the sender wants: you to click a link and type your password or bank details.
• The hook: “Your account will be deleted in 24 hours! Click here to save it.”

Malware (the “sickness”)

• Meaning: short for “malicious software”, which is a bad program made to cause harm.
• What it can do: spy on you, slow down your computer or delete your files.

What are the common types of malware?

Malware has several common types, and a virus is only one of them.

How do you spot a phishing attack?

You spot phishing by looking for red flags, like a “Digital Detective”. Phishing is a common way students get into trouble online.

• Sense of urgency: the message tries to make you panic so you do not think clearly, for example “URGENT: Your prize expires in 10 minutes!”
• Strange links: hover your mouse over a link before clicking. If the email says “Facebook” but the link goes to www.free-data-nigeria-123.com, it is a trap.
• Poor grammar: big companies rarely make spelling mistakes in official emails.
• Asking for secrets: a real bank or social media site will never ask for your password by email.

What should you do if you get a suspicious message?

1. Do not click any link or open any attachment.
2. Do not reply and do not give any personal details.
3. Tell a teacher or a parent.
4. Delete the message.
5. If you already typed a password, change it at once.

What are the protective measures against cyber threats?

Protective measures are habits and tools that keep your devices and accounts safe. Good habits protect you even if you are not a computer expert. Here are the “Big Four”.

1. Strong and unique passwords

• Avoid: simple words such as “password” or your own name.
• Use a pass-phrase: for example Blue!JSS3!Computer? It is easy for you to remember but hard for a computer to guess.
• Use a different password for each account: one stolen password then cannot open every account.
• Keep it private: never share your password with friends.

2. Two-factor authentication (2FA)

• Meaning: a second check, after your password, before you can log in.
• The “second lock”: a code sent only to your phone.
• Why it helps: even if a hacker steals your password, they cannot get in without the code.
• Importance: it is one of the most important steps you can take.

3. Keep software updated

• What to do: when your phone asks you to “Install Update”, do it.
• Why: updates usually contain “patches” that fix weak points hackers use to get in.

4. Use antivirus

• Role: it works like your computer’s immune system.
• What it does: it scans files and removes viruses before they cause damage.

Which measure stops which threat?

What are the safe online habits for JSS3 students?

Safe habits are daily rules that keep you safe online. Technology is a useful tool, but it can be dangerous if used carelessly.

• Public Wi-Fi warning: never log into your bank or private accounts on free Wi-Fi at a park or cafe. Hackers can “sniff” the network and see what you type.
• The “download” rule: never download “cracked” games or free movies from unofficial sites. These files often carry malware.
• Think before you click: if a deal looks too good to be true, such as “Click here for 10GB free data”, it probably is.
• Report it: if you think you have been hacked or see something suspicious, tell a teacher or a parent immediately. There is no shame in being tricked. The shame is in staying silent.

Class discussion

• Scenario: you get a WhatsApp message from your “best friend” asking for a code that was just sent to your phone. Should you send it?
• Answer: No. This is a common way hackers steal WhatsApp accounts. Call your friend on a normal phone call to check if it is really them.

Teacher’s note

• Digital reputation: remind students that their digital reputation is valuable.
• Link to the future: keeping accounts safe today protects their future.

Evaluation

1. Define cybersecurity.
2. Explain the difference between hacking and phishing.
3. List three red flags of a phishing message.
4. What is two-factor authentication, and why does it protect an account?
5. Why should you avoid logging into your bank account on free public Wi-Fi?

Assignment

Write a short safety poster for your class. Include one definition of phishing, three red flags, and the “Big Four” protective measures with one line on each.