MODULE 2: DIGITAL CITIZENSHIP AND ONLINE SECURITY

ONLINE THREATS, SCAMS AND MALWARE

1. Malware (Malicious Software)

Malware is the primary catch-all term for any code written designed to damage, disable, or gain unauthorized access to
a computer system.
a) Computer Virus: A program that duplicates itself by attaching to a legitimate host program.
Example: A virus in a PDF that spreads only when the file is opened.
b) Computer Worm: A standalone program that spreads through networks automatically without needing a host.
Example: A program that exploits a messaging app to send copies of itself to your whole contact list.
c) Trojan Horse: Malware that disguises itself as useful software to trick you into installing it.
Example: A "Game Cheat" or "Antivirus Update" that secretly installs a keylogger.
d) Spyware: Software that secretly collects user information and habits.
Keylogger (Sub-type): A specific type of spyware that records every keystroke to steal passwords.
e) Ransomware: A type of malware that locks or encrypts files and demands payment for their release.

2. Deceptive Delivery
This category covers the methods used to reach victims. These are not necessarily "software" themselves, but are
methods used to deliver malware or steal data.
a) Email Spam: The practice of sending unsolicited bulk messages. While often just annoying ads, it is the most
common way to deliver Phishing and Malware.
b) Phishing: The attempt to steal sensitive data by pretending to be a trustworthy entity (like a bank or a friend).
o Email Spoofing (Sub-method): A technical trick where the "From" address is forged to make a Phishing
email look legitimate.
o Example: An email that looks like it's from "Your Bank" but links to a fake login page.

3. Infrastructure Attacks
This is a separate category because it doesn't rely on "bait" like a Phishing email; it attacks how your computer
navigates the web.
a) Pharming: Maliciously redirecting users to a fake website, even if they type the correct URL into their browser.
o How it works: It "poisons" the internet's address book (DNS) so that [Link] takes you to a
hacker's site.

ESSENTIAL SECURITY PRACTICES

1. Never Share Your Password.

• Your best friend asks for your password to help you level up in a video game, promising to keep it secret. It is
NOT okay. Sharing your password violates the Terms of Service and makes you vulnerable if her account is
compromised. Treat your password like the key to your home.
2. Create Secure and Unique Passwords.
• Your password should be at least 12 characters, mixing uppercase and lowercase letters, symbols, and
numbers.
• Avoid using real words, names, or common patterns (like password123).
• Tip: Use a combination of three or four unrelated words, like PurpleHorse!100Coffee.
3. Implement Strong Access Control (User Accounts).
• Always use a password, PIN, or biometric security (fingerprint/face ID) to lock your computer or phone.
• Use the Screen Lock Security feature to require a password whenever your computer goes idle.
4. Keep Your Defenses Up (Firewall and Antivirus).
• Firewall: This is software or hardware that acts as a barrier, protecting your computer from unauthorized network
entries, viruses, or worms from the Internet. Always keep it turned ON.
• Antivirus/Antimalware: Always have reputable software installed and ensure Automatic

ETHICS AND ACCOUNTABILITY IN THE DIGITAL WORLD

1. Cybercrime & Your Digital Footprint

Cybercrime is any illegal activity committed or assisted using a computer or the internet. To stay safe, you must be
aware of the "trail" you leave behind.
• Digital Footprint: This is the permanent trail of data you create while using the internet. It includes:
o Websites you visit and search history.
o Emails and messages you send.
o Photos, comments, or information you post online.
• Active vs. Passive: An active footprint is what you intentionally share (posts), while a passive footprint is data
collected about you without you realizing it (browsing history and location).
• Accountability: Remember, once it’s online, it’s almost impossible to completely delete. Your digital footprint
forms your online reputation, which future employers or schools may check.
2. Data Privacy and Personal Security
Being ethical online means respecting your own privacy and the privacy of others.
• Protecting Personal Data: Avoid oversharing sensitive information like your home address, phone number, or
passwords.
• Consent: Never share photos, videos, or private information of other people without their explicit permission.
• Phishing & Scams: Be accountable for your security by recognizing "Social Engineering"—tricks used by
hackers to get you to reveal passwords. Always verify the source before clicking links.

3. Intellectual Property (IP) and Copyright

When you create something original—like a poem, a drawing, or a research paper—you own it. This ownership is
called Intellectual Property.
• Copyright: The specific law that protects your work. If someone uses your work without your permission, it is
called Copyright Infringement, and it is punishable by law.
• Plagiarism: The ethical act of taking someone else's ideas or words and passing them off as your own. Even if it
isn't a "crime" in every context, it is a major breach of digital ethics.
• How to Avoid Infringement:
o Understand what is protected: Copyright covers creative works (photos, music, films, and writing), but it
does not protect basic facts or general ideas.
o Always Attribute: If you use a resource, give credit to the original creator.
o Know the Law (Philippines): Copyright lasts for the author's lifetime plus 50 years after their death.
o Fair Use: You can sometimes use copyrighted material without permission for specific reasons like
teaching, news reporting, or criticism, provided it is limited and non-commercial.

4. Digital Citizenship and Netiquette

Digital accountability involves how we treat others in virtual spaces.
• Netiquette: Short for "Internet Etiquette." It is the set of professional and social rules for acceptable online
behavior.
• The Golden Rule: Remember the human on the other side of the screen. If you wouldn't say it to someone's
face, don't post it online.
• Cyberbullying: Harassment, digital stalking, or "shaming" others online has real-world consequences. Being an
ethical user means standing up against online hate.
5. Information Literacy and Factchecking
In an era of "Fake News," accountability means being responsible for the truth.
• Verify Before Sharing: Before hitting "Share," check if the information comes from a reliable source. Sharing
misinformation can cause real-world harm.
• Critical Thinking: Ask yourself who created the content and why. Is it meant to inform, or is it meant to make you
angry or scared?

Summary Checklist for the Digital Citizen:

1. Is it legal? (Respecting Copyright and avoiding Cybercrime)
2. Is it private? (Protecting your footprint and others' data)
3. Is it respectful? (Practicing good Netiquette)
4. Is it true? (Checking facts before spreading information)