← Years 7–8 Digital Systems

Social engineering

Tricking people, instead of hacking systems, into giving away access or information, often by pretending to be someone trusted or creating urgency. Phishing is one type.

Part of: 7-8 Digital Technologies Vic Curric - Digital Systems and Security — Module 66, 9-10 Digital Technologies Vic Curric - Digital Systems and Security — Module 55, VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 13, IGCSE Computer Science 0478 — 5.3 Cyber Security — Module 22, ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 10, ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 27, QCE Digital Solutions Unit 4 — Complex Digital Data Exchange Problems and Solution Requirements — Module 30, WA Computer Science ATAR Year 11 — Cyber Security — Module 39

Understanding Social engineering in Years 7–8 Digital Systems

What it does: The attacker pretends to be a trusted IT person so the victim will hand over their password. The scary deadline pressures you to click quickly instead of stopping to check if the message is real. Social engineering targets people, not systems. The attacker uses trickery instead of technical hacking. Urgency makes people panic and act before they think. Attackers use it so you skip checking if the message is real. Slow down and check using a trusted way, like the official website or a trusted adult. Never use the details in the message. Social engineering involves tricking a person. A power cut is a hardware or power problem, not a trick.

Common mistakes: The caller has NOT been verified, so the program should refuse and report. The condition should be IF verified = false THEN. Never trust someone just because they say they are from IT. The message says 'Act now or lose it!', which is a pressure tactic. Urgency should be set to true so the program tells the user to slow down and check.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Social engineering to a class →

This module's key terms are also in a printable crossword (Modules 26–74) and word search (Modules 4–74).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Which best describes social engineering?
Tricking a person into giving away access or informationBreaking into a computer by hacking its software
Matches
Social engineering is when a hacker breaks through a firewall using code.
↓
Social engineering tricks people, not computer systems. Breaking through a firewall with code is hacking, not social engineering.
Applying
Meanings
Term
social engineering
Meaning
Tricking people, instead of hacking systems, into giving away access or information, often by pretending to be someone trusted or creating urgency. Phishing is one type.
Practice
IF sender pretends to be trusted
Testing
Gaps
tricks people
Check Answer
Spots
2verified ← false
3IF verified = true THEN

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Giant Squid' badge — Nested Navigator, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which best describes social engineering?
A. Tricking a person into giving away access or information ✓
B. Breaking into a computer by hacking its software
Social engineering targets people, not systems. The attacker uses trickery instead of technical hacking.
2. A caller says, 'I'm from the school IT team. Tell me your password so I can fix your account.' What is this?
A. A normal IT support request
B. Social engineering by pretending to be someone trusted ✓
Real IT staff never need your password. Pretending to be a trusted person is a common social engineering trick.
3. Which message uses urgency to pressure you?
A. 'Act now! Your account will be deleted in 10 minutes!' ✓
B. 'Our newsletter comes out on the first of each month.'
Urgency makes people panic and act before they think. Attackers use it so you skip checking if the message is real.
4. True or false: Phishing is one type of social engineering.
A. False
B. True ✓
Phishing tricks people with fake messages, so it is one type of social engineering.
5. What is the best response to an urgent message asking for your login details?
A. Stop, don't reply, and check with the real company or a trusted adult ✓
B. Reply quickly so nothing bad happens
Slow down and check using a trusted way, like the official website or a trusted adult. Never use the details in the message.

Match the Pairs

social engineering → Tricking people, instead of hacking systems, into giving away access or information
phishing → One type of social engineering that uses fake messages to trick you into giving information
Pretending to be someone trusted to get information → Hi, I'm from IT support. Tell me your password so I can fix your laptop.
Creating urgency so you act without thinking → URGENT: Your account will be deleted in 1 hour! Click here now!
Social engineering is when a hacker breaks through a firewall using code. → Social engineering tricks people, not computer systems. Breaking through a firewall with code is hacking, not social engineering.
If a message is from someone who seems to be a teacher or a friend, it is always safe to share your password. → Attackers pretend to be trusted people. You should never share your password, even if the message seems to come from someone you know.

Key Term

social engineering
Tricking people, instead of hacking systems, into giving away access or information, often by pretending to be someone trusted or creating urgency. Phishing is one type.

Fill in the Blanks

1. social engineering tricks people
Hint: Type the two-word name for tricking people instead of hacking systems.
2. Phishing is one type of social engineering
Hint: Type the name of the wider group of attacks that phishing belongs to.
3. Attacker pretends to be a trusted person
Hint: Type the word for someone you believe is reliable and safe to listen to.
4. Act NOW or lose your account! This tactic creates urgency
Hint: Type the word for pressure to hurry up and not think.
5. It targets people, not computer systems
Hint: Type who the attacker is trying to fool.

Spot the Error

Question 1
A caller ← "fake IT helpdesk"
B verified ← false
C IF verified = true THEN
D refuse and report it
Line C — The caller has NOT been verified, so the program should refuse and report. The condition should be IF verified = false THEN. Never trust someone just because they say they are from IT.
Question 2
A msg ← "Act now or lose it!"
B urgency ← false
C IF urgency THEN slow down
Line B — The message says 'Act now or lose it!', which is a pressure tactic. Urgency should be set to true so the program tells the user to slow down and check.
Question 3
A name ← "Principal Lee"
B email ← "lee@sch00l-help.net"
C IF email looks fake THEN
D PRINT "Reply with details"
Line D — The email pretends to be from the principal but uses a fake address. The safe response is PRINT "Do not reply", not sending personal details.
Question 4
A attack ← "phishing"
B target ← "a firewall"
C PRINT "Fools " + target
Line B — Social engineering, including phishing, tricks people rather than hacking systems. The target should be "a person", not a firewall.
Question 5
A msg ← "Locked in 1 hour!"
B IF msg has deadline
C PRINT "Urgency: red flag"
Line B — An IF statement needs THEN after its condition. The line should be IF msg has deadline THEN.

Student with a class code? Join your class →