Module 6.3- Secure Web Browsing

Question 1

Understanding Malware

Answer 1

• malware is a broad term for malicious software designed to harm, exploit, or take control of a computer system without the user’s consent
• common types of Malware:
  1. Viruses
  2. Spyware
  3. Ransomware
  4. Adware
  5. Trojan Horses

Question 2

Viruses

Answer 2

• just like biological viruses, computer viruses attach themselves to legitimate programs or files and spread when those files are shared or opened
• they can corrupt or delete data, steal personal information, or hijack system resources

Question 3

Spyware

Answer 3

• this type of malware covertly monitors and collects information from your computer, like browsing habits or passwords without your knowledge
• it often comes bundled with other software

Question 4

Ransomware

Answer 4

• locks your files or system and demands payment (ransom) to restore access
• has become a major threat to businesses and individuals alike

Question 5

Adware

Answer 5

• while not always malicious, adware generates unwanted ads on your device and can slow down your browsing experience
• often bundled with free software downloads

Question 6

Trojan Horses

Answer 6

• trojans disguise themselves as legitimate software
• once installed, they create backdoors, allowing hackers to access and control your system
• e.g. if you download software from an untrusted site, you could unknowingly install a Trojan horse that provides remote access to your computer- once compromised, attackers can steal sensitive data or control your machine for malicious activities

Question 7

Safe Web Browsing Practices

Answer 7

1. Keep your Browser and Software up to date
2. Use strong, unique Passwords
3. Enable 2-Factor Authentication (2FA)
4. Beware of Phishing
5. Look for HTTPS
6. Use a Secure Wi-Fi Connection
7. Install Security Extensions

Question 8

Keep your Browser and Software up to date

Answer 8

• always make sure your web browser, OS, and any installed software are updated to the latest versions
• security patches are regularly released to fix vulnerabilities that attackers could exploit

Question 9

Use strong, unique Passwords

Answer 9

• one of the easiest ways to improve online security is by using strong, unique passwords for every account
• a password manager can help you keep track of them and generate secure passwords

Question 10

Enable 2FA

Answer 10

• many websites and services offer 2FA, which adds an extra layer of protection by requiring a second form of verification (like a code sent to your phone) in addition to your password

Question 11

Beware of Phishing

Answer 11

• phishing attacks attempt to trick you into providing personal information by impersonating legitimate websites or services
• always double-check URLs and avoid clicking on suspicious links in emails or messages
• if something seems off, verify it independently by going directly to the website

Question 12

Look for HTTPS

Answer 12

• always check that the websites you visit use HTTPS, indicated by the padlock icon in the browser’s address bar
• HTTPS encrypts data between your browser and the website, protecting it from being intercepted
• never enter sensitive information, like passwords or credit card numbers, on websites without HTTPS

Question 13

Use a Secure Wi-Fi Connection

Answer 13

• when browsing or entering sensitive information online, make sure you’re connected to a secure Wi-Fi network
• avoid using public WiFi for transactions like online shopping or banking, unless you’re using a VPN (Virtual Private Network) to encrypt your traffic

Question 14

Install Security Extensions

Answer 14

• tools like HTTPS Everywhere, Privacy Badger, or uBlock Origin can help block trackers, enforce secure connections, and reduce exposure to malware-laden ads
• e.g. if you’re doing online banking, make sure the website uses HTTPS and, if possible, enable two-factor authentication to further secure your login process

Question 15

Digital Certificates & HTTPS

Answer 15

• one of the key components of secure web browsing is understanding digital certificates and their role in establishing secure connections
• whenever you visit a website, especially one that requires sensitive information, you want to ensure that your connection is private and safe from eavesdroppers

Question 16

What are Digital Certificates?

Answer 16

• digital certificates are electronic documents used to verify the identity of a website or organisation
• when you visit a site that uses HTTPS, your browser checks the digital certificate to ensure that the site is legitimate and that your data will be encrypted

Question 17

How Digital Certificates & HTTPS work

Answer 17

• HTTPS (Hypertext Transfer Protocol Secure)- when a website uses HTTPS, it means that your connection to the site is encrypted, making it harder for attackers to intercept data like login credentials or credit card information
• SSL/TLS Certificates- digital certificates that authenticate a website
• SSL (Secure Sockets Layer) and its successor, TLS (Transport Layer Security), ensure that data transferred between your browser and the website is encrypted and secure

Question 18

Types of Certification

Answer 18

1. Domain Validated (DV)- these are the most basic certificates, verifying only that the owner of the domain has control over it
2. Organisation Validated (OV)- these provide more detailed verification, including information about the organisation owning the site
3. Extended Validation (EV)- EV certificates offer the highest level of trust and are often used by financial institutions
   - when you visit a site with an EV certificate, the browser’s address bar may display the name of the organisation in green

Question 19

Why do Digital Certificates matter?

Answer 19

• help ensure that you’re communicating with the intended website and that your data remains encrypted, preventing man-in-the-middle attacks where an attacker could intercept or alter your communications
• e.g. when you’re logging into your bank’s website, the presence of an EV certificate and HTTPS assures you that you’re interacting with the legitimate site and not a fraudulent copy