← IGCSE Computer Science Paper 1

Phishing

Sending many fake emails that look genuine to trick users into clicking a link or replying with personal details, so criminals can steal passwords and bank details.

Part of: IGCSE Computer Science 0478 — 5.3 Cyber Security — Module 21, ACARA Digital Technologies Years 9–10 — Networked Systems and Access Control — Module 142, ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 28, WA Computer Science ATAR Year 11 — Cyber Security — Module 40

Understanding Phishing in IGCSE Computer Science Paper 1

What it does: Phishing is sent in bulk to a large number of people. Only a few need to fall for it for the attack to work. After the user clicks the link and types their details into the fake website, the criminal collects the password and bank details. Phishing relies on fake messages that look real. Flooding a server with traffic is a denial of service attack. Banks do not normally ask you to confirm your details through a link in an email. Phishing emails copy trusted companies to look genuine. Criminals use phishing to collect personal data such as passwords, card numbers and bank details, which they can then misuse.

Common mistakes: The fake website is only shown when the user CLICKS the link. If they ignore it, the phishing attack fails. It should be IF user CLICKS link THEN. Phishing emails pretend to come from a trusted company so that they look genuine. An unknown stranger would not be believed. It should be sender ← "trusted company".

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Phishing to a class →

This module's key terms are also in a printable crossword (Modules 520–546) and word search (Modules 510–546).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Which describes phishing?

Sending many fake emails that look genuine to trick users into giving personal detailsFlooding a web server with traffic until it stops working

Matches

Phishing = a virus that copies itself between computers

↓

This describes a worm or virus, not phishing. Phishing is fake emails or messages that trick people into giving away personal details.

Applying

Meanings

Term

phishing

Meaning

Sending many fake emails that look genuine to trick users into clicking a link or replying with personal details, so criminals can steal passwords and bank details.

Practice

FOR each address IN emailList

Testing

Gaps

Phishing sends fake that look genuine

Check Answer

Spots

3OUTPUT "Click to verify"

4IF user IGNORES link THEN

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which describes phishing?

A. Flooding a web server with traffic until it stops working

B. Sending many fake emails that look genuine to trick users into giving personal details ✓

Phishing relies on fake messages that look real. Flooding a server with traffic is a denial of service attack.

2. An email says it is from your bank and asks you to click a link to 'verify your account'. What is it most likely to be?

A. A phishing email ✓

B. A genuine security update

Banks do not normally ask you to confirm your details through a link in an email. Phishing emails copy trusted companies to look genuine.

3. What is the main aim of a phishing attack?

A. To steal passwords and bank details ✓

B. To speed up the victim's computer

Criminals use phishing to collect personal data such as passwords, card numbers and bank details, which they can then misuse.

4. Where does the link in a phishing email usually take you?

A. The real website, with extra security added

B. A fake website that looks like the real one ✓

The fake website copies the real company's design so the victim types in a username, password or card details without noticing.

5. How are phishing emails usually sent?

A. To a large number of people at once ✓

B. To one carefully chosen person only

Phishing sends a huge number of emails hoping that a few people will respond. Targeting one person is a different approach.

Match the Pairs

From: security@bank-verify.com → A fake sender address pretending to be a trusted company, a typical sign of a phishing email

Click here to confirm your password → A phishing message that persuades the user to follow a link to a fake website and enter personal details

Phishing sends a large number of fake emails to many users, hoping some will respond → send_email(fake_message, all_users)

The aim of phishing is to steal passwords and bank details from the victim → stolen_data = password + bank_details

Phishing = a virus that copies itself between computers → This describes a worm or virus, not phishing. Phishing is fake emails or messages that trick people into giving away personal details.

Phishing step 1: the user types their password into the real bank website → The first step is the criminal sending fake emails that look genuine. The user types their details into a fake website, not the real one.

Key Term

phishing

Sending many fake emails that look genuine to trick users into clicking a link or replying with personal details, so criminals can steal passwords and bank details.

Fill in the Blanks

1. Phishing sends fake emails that look genuine

Hint: Type the kind of message that phishing criminals send out in large numbers.

2. Fake email looks genuine

Hint: Type the word meaning real, so the user trusts the message.

3. User clicks a link to a fake website

Hint: Type the word for the clickable item in the email that leads to a fake site.

4. 1. Fake email from a trusted company 2. User clicks link to fake website 3. User types password into fake page

Hint: Type the secret login detail the user enters on the fake page, which the criminal steals.

5. Aim: steal passwords and bank details

Hint: Type the word for the type of financial details criminals want to steal.

Spot the Error

Question 1

A sender ← "fake bank"

B SEND email TO many_users

C OUTPUT "Click to verify"

D IF user IGNORES link THEN

E SHOW fake_website

Line D — The fake website is only shown when the user CLICKS the link. If they ignore it, the phishing attack fails. It should be IF user CLICKS link THEN.

Question 2

A aim ← "steal passwords"

B sender ← "unknown stranger"

C SEND email TO many_users

Line B — Phishing emails pretend to come from a trusted company so that they look genuine. An unknown stranger would not be believed. It should be sender ← "trusted company".

Question 3

A email ← "From: Your Bank"

B link ← "real-bank.com"

C SEND email WITH link

Line B — The link in a phishing email leads to a fake website that copies the real one. A link to the real bank would not steal anything. It should be link ← "fake-bank-login.com".

Question 4

A user ← CLICK link

B INPUT password, card_number

C SEND details TO bank

D criminal ← "steals money"

Line C — On the fake website, the details the user types are sent to the criminal, not to the real bank. It should be SEND details TO criminal.

Question 5

A aim ← "speed up computer"

B email ← "Urgent: confirm login"

C SEND email TO many_users

Line A — The aim of phishing is to steal personal data such as passwords and bank details, not to speed up a computer. It should be aim ← "steal bank details".

Student with a class code? Join your class →