Oversharing fuels targeted attacks

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Maya posts a photo captioned 'My dog Biscuit is 5 today!' and later uses Biscuit5 as her password. What is the main risk?

A The photo will give her device a virus

B Attackers can read her post and guess her password

2. Which is the safer choice for a password?

A A random passphrase with no link to your life

B Your school name and the year you started

3. An email says 'Hi Sam, your Year 10 camp deposit at Northside High is overdue.' It uses details Sam posted online. What is this?

A Spear phishing using shared personal details

B A random spam message that knows nothing about Sam

4. Which post gives an attacker the MOST useful information?

A A photo of a sunset with no caption or location

B My school, my pet's name and my birthday in one post

5. What is your digital footprint?

A The trail of data you leave from posts, photos and accounts

B The storage space your phone uses for apps

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1oversharing		AThe post shares a pet name, year level, school and street all at once, giving attackers many facts to use in guessing passwords or targeted messages.
2digital footprint		Bpassword = "Biscuit2024"
3An attacker reads a public post naming your pet and tries that name as your password.		CPosting personal details online, like pet or school names, that attackers can use to guess passwords or write targeted messages.
4A scammer uses your school, your teacher and your sports team from public posts to write a message that looks real.		DThe trail of posts, photos, tags and details you leave online, which an attacker can search to learn facts about you.
5password = "Hillcrest7" # my school and year level		EThe password is built from a school name and year level that are probably public on social media, so an attacker could guess it.
6post = "Jack's pet is Rex, he is in Year 9 at Hillcrest High, and lives on Elm St!"		FHi Mia, Mr Ford asked me to send you the Hillcrest netball roster. Click here.

Definitions

oversharing

Fill in the Blanks

Complete each line of code by filling in the missing parts.

guess = petName _ schoolYear

if petName __ profilePost: print("Name found")

msg = _"Hi {name}, from {school}!"

footprint = ["photo", "tag", "check-in"] print(___(footprint))

if isPublic ___ hasPetName: risk = "high"

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A pet = "Rex"

B password = pet + 2024

C print(password)

Question 2

A post = "Bella at Oak High"

B shared = True

C if shared = True:

D print("Risk: guessable")

Question 3

A school = "Oak High"

B guess = school + "123

C print(guess)

Question 4

A details = ["pet", "school"]

B for d in details

C print("Attackers use", d)

Question 5

A footprint = ()

B footprint.append("school")

C footprint.append("pet name")

D print(len(footprint))

Answer Key

Oversharing fuels targeted attacks

Section A: Quick Questions

B — Attackers can read her post and guess her password

A — A random passphrase with no link to your life

A — Spear phishing using shared personal details

B — My school, my pet's name and my birthday in one post

A — The trail of data you leave from posts, photos and accounts

Section B: Match the Pairs

oversharing → Posting personal details online, like pet or school names, that attackers can use to guess passwords or write targeted messages.

digital footprint → The trail of posts, photos, tags and details you leave online, which an attacker can search to learn facts about you.

An attacker reads a public post naming your pet and tries that name as your password. → password = "Biscuit2024"

A scammer uses your school, your teacher and your sports team from public posts to write a message that looks real. → Hi Mia, Mr Ford asked me to send you the Hillcrest netball roster. Click here.

password = "Hillcrest7" # my school and year level → The password is built from a school name and year level that are probably public on social media, so an attacker could guess it.

post = "Jack's pet is Rex, he is in Year 9 at Hillcrest High, and lives on Elm St!" → The post shares a pet name, year level, school and street all at once, giving attackers many facts to use in guessing passwords or targeted messages.

Section C: Definitions

oversharing — Posting personal details online, like pet or school names, which attackers use to guess passwords and write convincing targeted messages.

Section D: Fill in the Blanks

guess = petName + schoolYear

if petName in profilePost:
    print("Name found")

msg = f"Hi {name}, from {school}!"

footprint = ["photo", "tag", "check-in"]
print(len(footprint))

if isPublic and hasPetName:
    risk = "high"

Section E: Spot the Error

B — Python cannot add a string (pet) to a number. 2024 must be in quotes, "2024", so the pet name and year join into a guessable password.

C — A single = assigns a value. An if statement needs == to compare, so the line should be if shared == True:.

B — The string "123" is missing its closing quote. It should be guess = school + "123".

B — A for loop line must end with a colon. It should be for d in details: so the indented print runs for each detail.

A — A tuple () cannot be changed, so append() fails. The digital footprint must start as a list: footprint = [].