Year 9 Unit 1 Lesson 6 Preventing Cyber Attacks

Lesson Title

Start

Lesson Warm Up

Task: “Spot the Risks”Read the scenario below and answer the questions in your notebook. Scenario:Alex gets an email saying they’ve won a free phone. The email asks them to click a link and enter their name, address, and password. Later, Alex uses the same password to log into a gaming account on a public computer at school. They also ignore a message telling them to update their apps. Questions

1. List two risky things Alex did.
2. What could happen because of these mistakes?
3. What should Alex have done instead?
4. Why is it dangerous to use the same password for multiple accounts?
5. What is one rule you follow to stay safe online?

Key Learning

💻 What is a Cyber Attack?A cyber attack is a deliberate attempt to:

• Access systems without permission
• Steal data or money
• Disrupt or damage networks

Cyber attacks are often motivated by:

• Financial gain
• Political reasons
• Causing disruption

👉 Cyber attacks can affect anything connected to a network

Key Learning

💰 Financial LossCyber attacks frequently result in financial loss. This may include:

• Direct theft (e.g. stolen bank details)
• Paying ransom demands
• Loss of business when systems are offline
• Cost of repairing and securing systems

👉 Large organisations can lose millions of pounds from a single attack

Key Learning

📉 Damage to ReputationIf an organisation is hacked:

• Customers may lose trust
• People may stop using the service
• The organisation may appear unreliable or unsafe

This can have long-term effects:

• Reduced income
• Difficulty attracting new users

👉 Reputation damage can last longer than the attack itself

Key Learning

⛔ Stopping Systems WorkingCyber attacks can stop systems operating normally. Examples:

• Websites crashing
• Networks going offline
• Files becoming inaccessible

This is a loss of availability, one part of the CIA triad. 👉 If systems fail, organisations may stop functioning completely

Key Learning

🔒 Loss of PrivacyA major impact is the exposure of personal information. This can include:

• Passwords
• Bank details
• Addresses and personal data

Once stolen:

• Data can be copied and shared
• It may be sold on illegal markets

👉 Victims lose control over their own information

Key Learning

🏛 Damage to National SecurityCyber attacks can target governments and national systems. They can:

• Steal classified information
• Disrupt infrastructure
• Interfere with communication systems

👉 This can affect military operations, emergency services, and public safety

Lesson Warm Up

Key Learning

👤 Effects on IndividualsCyber attacks can directly affect everyday people:

• Bank accounts emptied
• Identity theft
• Personal data used for fraud
• Loss of trust in digital systems

👉 Individuals may face both financial and emotional impact

Key Learning

🏢 Effects on OrganisationsBusinesses and schools can experience:

• Loss of access to data
• Financial damage
• Reputation damage
• Legal consequences

👉 Organisations depend on cybersecurity to continue operating

Key Learning

🏥 Impact on Essential ServicesCyber attacks can shut down critical systems such as:

• Hospitals
• Electricity grids
• Transport systems (trains, traffic lights)

Consequences:

• Delayed services
• Safety risks to the public

👉 Cybersecurity is essential for society to function safely

Key Learning

🎓 Cyber Attack on a SchoolA cyber attack on a school could result in:

• Loss of access to files and systems
• Student and teacher data being stolen
• Financial information of families exposed
• Disruption to lessons

👉 This shows cyber attacks affect real environments students use

Key Learning

📊 Personal Information as a TargetPersonal data is highly valuable because it can be:

• Used for identity theft
• Sold online
• Used in further scams

Examples include:

• Login details
• Payment information
• School or work records

👉 Data is often called the “new currency” of cybercrime

Key Learning

🔒 How Ransomware Attacks WorkRansomware is designed to extort money. Steps:

1. Infection (phishing email or vulnerability)
2. Spreads across system
3. Files are encrypted (locked)
4. Payment is demanded

👉 Victims must choose between paying or losing access to data

Key Learning

🦠 WannaCry Case Study (2017)WannaCry was a major global ransomware attack. What happened:

• Exploited a weakness in Windows
• Spread automatically across networks
• Infected over 200,000 computers

👉 It spread faster than most attacks due to automation

🏥 WannaCry ImpactThe attack had severe consequences:

• NHS systems in the UK were affected
• Hospitals could not access patient records
• Appointments and operations were cancelled

👉 This demonstrated how cyber attacks can impact real-world safety

Key Learning

🧠 Why WannaCry Was DangerousWannaCry spread rapidly because:

• It acted like a worm (self-spreading)
• Many systems were not updated
• It required no user interaction

👉 Poor security practices made the attack worse

🛑 WannaCry Kill SwitchA researcher discovered a kill switch:

• A hidden feature that stopped the spread
• Activating it slowed the attack significantly

👉 Most ransomware does not have this weakness

Key Learning

🦠 LockBit RansomwareLockBit is a modern ransomware group. Features:

• Targets large organisations
• Encrypts data and steals it first
• Demands payment to unlock and prevent leaks

👉 Represents new, more advanced cybercrime

⚠️ Why LockBit is More Dangerous

• No known kill switch
• Frequently updated to avoid detection
• Uses double extortion (pay twice)

👉 Harder to stop than older attacks like WannaCry

Lesson Warm Up

Lesson Warm Up

Key Learning

🛡 Reducing Cyber Attacks👩‍🏫 Staff TrainingUsers are trained to:

• Recognise phishing
• Avoid risky behaviour

👉 Prevents attacks starting through human error

Key Learning

🧪 Penetration Testing (Pen Testing)Ethical hackers:

• Test systems for weaknesses
• Identify vulnerabilities before attackers

👉 Helps organisations fix problems early

🎯 Key IdeaCyber attacks:

• Are increasing in scale and sophistication
• Have real-world consequences
• Affect individuals, organisations, and governments

Security aims to:

• Reduce risk
• Detect attacks early
• Limit damage

Lesson Warm Up

Lesson Warm Up

Key Learning

Cyber attacks can cause:

• Financial loss
• Reputation damage
• System failure
• Loss of privacy
• National security risks

👉 Cybersecurity protects people, systems, and society