C RANSOM 1
The Locked Files
school office
Several employees report that documents have suddenly become unavailable. Shortly afterwards, a message appears demanding payment before access will supposedly be restored.
Trainee: Clear-cut incidents, three options, every piece of evidence matters, strong hints.
Recommended next
The Locked Files
school office
C RANSOM 1
school office
Several employees report that documents have suddenly become unavailable. Shortly afterwards, a message appears demanding payment before access will supposedly be restored.
C VIRUS 1
small business
A spreadsheet used by several staff has started behaving oddly. Colleagues who opened a copy of the same file report the same problem.
C WORM 1
college
A standalone unwanted program is detected on one machine. Shortly afterwards, similar activity appears on several connected devices, even though nobody transferred anything between them.
C TROJAN 1
home user
A user downloads a program that appears to be a legitimate utility for tidying up files. After installation, unexpected hidden behaviour is detected.
C ADWARE 1
library
Public computers in the reading room have started showing advertising that the library did not put there.
C PHISH 1
school office
An office administrator received a message about an account problem and wants to know whether it is genuine.
C PRETEXT 1
small business
A member of staff received a telephone call from someone claiming to work for the company's IT support team.
C QUID 1
college
A student was offered free technical help with a slow laptop, on one condition.
C SHOULDER 1
library
A library user reports that someone stood unusually close while they signed in at a public terminal.
C WHITE 1
online shop
A specialist was asked to review the security of a shop's website. The shop wants the activity classified correctly.