MEDIACREST TRAINING COLLGE
Week 1 - Day 1
Introduction to Cybersecurity Fundamentals
What is Cybersecurity?
Definition:
Practice of protecting systems, networks, programs, and data from digital
attacks
Why It Matters:
Everything is connected to the internet (banks, hospitals, governments)
Cyber attacks cost billions of dollars annually
Personal data breaches affect millions (identity theft, fraud)
Critical infrastructure can be targeted (power grids, water systems)
Career Opportunity:
One of the fastest-growing fields globally
High demand, good salaries, diverse roles
Real-World Cyber Attacks
2017 - Equifax Breach
147 million people's personal data stolen
Names, Social Security numbers, birth dates, addresses
2021 - Colonial Pipeline Ransomware
Major US fuel pipeline shut down for 6 days
Gas shortage across US East Coast
Company paid $4.4 million ransom
Local Examples:
M-Pesa phishing scams
Fake 'You've won KES 500,000' messages
WhatsApp account takeovers
1. The Equifax Breach (2017): The "Unpatched" Open Door
Equifax is one of the three largest credit agencies in the world. Their business
is literally selling your reliability, yet they failed at the most basic
maintenance.
•The Tactic: Exploiting a Known Vulnerability. The hackers didn't use a "ZeroDay" (a brand new, secret bug). Instead, they used a vulnerability in a web
framework called Apache Struts. A patch (fix) for this bug had been released
two months before the breach. Equifax simply hadn't installed it.
•The Infiltration: Once inside, the attackers moved "laterally." They found a
file that contained usernames and passwords in plain text, which allowed
them to access 48 different databases containing personal info.
•Historical Impact: This was a turning point for Regulatory History. It proved
that "Big Data" was a massive liability. It led to a $700 million settlement and
forced a global conversation on whether private companies should even be
allowed to hold so much unencrypted sensitive data.
2. Colonial Pipeline (2021): The Digital Hostage Crisis
This wasn't just a hack; it was a demonstration of "Cyber-Physical" warfare. It
showed that you could cripple a nation's economy without firing a single bullet.
•The Tactic: The Leaked Password. You’d expect a "Ocean's Eleven" style hightech entry, but it was simpler. The attackers (a group called DarkSide) found a
password for an old Virtual Private Network (VPN) account that was no longer in
use but hadn't been deactivated. The account did not have Multi-Factor
Authentication (MFA). One password was all they needed.
•The "Double Extortion": DarkSide didn't just lock the files. They stole 100GB of
data first and threatened to leak it if the ransom wasn't paid.
•Historical Impact: This changed US National Security policy. President Biden
issued an Executive Order shortly after, treating cybersecurity as a top-tier
national defense issue, similar to physical terrorism. It also sparked a debate on
the ethics of paying ransoms (which only funds more attacks).
3. The Local Scams: The Psychology of "Social Engineering"
While the first two used code, these use human nature. In Kenya and East Africa,
the transition to a "cashless" society (via M-Pesa) happened faster than the
transition to "cyber-literacy.“
The "Kamiti" Tactics (The Prison Scams)
Many of these scams historically originated from within prisons like Kamiti
Maximum Security.
•The Tactic: Urgency and Authority. The "You've won KES 500,000" scam works on
the Dopamine Hit. When people are excited, their critical thinking drops. The
scammer then acts as a "Customer Care Agent" (Authority) to guide the victim
through a series of M-Pesa commands that actually "pull" money from the victim's
account instead of "pushing" a prize to it.
WhatsApp Takeovers: The "Trust Chain"
•The Tactic: Impersonation. The hacker first takes over a friend’s account. They
then message you: "Hey, I'm trying to log into my account on a new phone but I
accidentally sent my code to your number. Can you send it to me?" Because you see
your friend's name and photo, you don't realize that "code" is actually the TwoFactor Reset code for YOUR account. Once you send it, you are locked out, and
the cycle continues with your contacts.
Why these matter to a Historian:
We are currently in the "Wild West" era of the Digital Age.
•Equifax showed us that our identities are now permanent
digital commodities.
•Colonial Pipeline showed us that the "Front Line" of war is
now the power grid and fuel lines.
•Local Scams show us that the weakest link in any security
system is not the software—it’s the person holding the phone.
The CIA Triad
The Foundation of ALL Security
CIA stands for:
C - Confidentiality
I - Integrity
A - Availability
Every security decision balances these three principles
Think of it as a three-legged stool:
Remove one leg and everything falls apart
C - Confidentiality
Definition:
Information should only be accessible to authorized people
Real-Life Example:
Your M-Pesa PIN should only be known by YOU
Not your neighbor, not your friend
In Cybersecurity:
Encryption (scrambling data so only authorized users can read it)
Passwords and authentication
Access controls and permissions
Breach Example:
Someone hacking your email and reading private messages
Medical records leaked online
Definition:
I - Integrity
Information should be accurate and hasn't been tampered with
Real-Life Example:
Your bank balance shows correct amount
Not changed by unauthorized person
In Cybersecurity:
Digital signatures (proof data hasn't been altered)
Checksums and hash values
Version control systems
Breach Example:
Hacker changes money transfer from KES 1,000 to KES 100,000
Website defacement (changing content)
Manipulating medical prescriptions
A - Availability
Definition:
Information and systems should be accessible when needed
Real-Life Example:
ATM should work when you need to withdraw money
Hospital systems available during emergencies
In Cybersecurity:
Backups and redundancy
DDoS attack protection
Disaster recovery plans
System maintenance and updates
Breach Example:
Ransomware shuts down hospital - patients at risk
DDoS attack takes down e-commerce site during sales
Balancing the CIA Triad
Security is about finding the right balance
Too Much Security:
Inconvenient for users
Example: Requiring 10 passwords just to check email
People find workarounds (sticky notes with passwords!)
Too Little Security:
Vulnerable to attacks
Example: No password on admin account
The Goal:
Maximum security with reasonable usability
Risk-based approach (protect what matters most)
Threat Landscape - What We're
Fighting
Three Major Threat Categories:
1. Malware
2. Phishing
Fraudulent attempts to steal sensitive information
3. Social Engineering
Malicious software designed to harm systems
Manipulating people to give up confidential info
Note: These often work TOGETHER in attacks
Malware (Malicious Software)
Definition:
Common Goal:
Any software intentionally designed to cause damage
Steal data, disrupt operations, gain access, make money
How It Spreads:
Email attachments
Infected USB drives
Malicious websites
Software downloads
Exploiting vulnerabilities
Let's look at the main types...
Malware Types - Part 1
1. Virus
Attaches to clean files and spreads
Needs human action to execute (like opening a file)
Example: Macro virus in Microsoft Word documents
2. Worm
Self-replicating, spreads automatically
Doesn't need human help
Example: 2017 WannaCry ransomware worm
3. Trojan Horse
Disguises itself as legitimate software
User installs it thinking it's safe
Example: Fake antivirus that's actually malware
Malware Types - Part 2
4. Ransomware
Encrypts your files and demands payment
Example: Colonial Pipeline paid $4.4 million
5. Spyware
Secretly monitors your activity
Keyloggers record everything you type (passwords, credit cards)
Can track browsing, capture screenshots
6. Adware
Unwanted advertisements
Less dangerous but annoying
Browser pop-ups that won't stop
Can slow down your computer
Phishing Attacks
Definition:
Fraudulent attempt to obtain sensitive information
Pretending to be a trustworthy entity
The Name:
Like a fisherman using bait to catch fish
Attackers use fake emails/messages as 'bait'
What They Want:
Passwords and usernames
Credit card numbers
Bank account details
Personal identification information
Access to your accounts
Phishing Variations
Email Phishing:
Mass emails to thousands of people
'Your bank account has been suspended!'
Spear Phishing:
Targeted attack on specific person/company
Personalized and more convincing
Whaling:
Smishing:
Targeting high-level executives (CEO, CFO)
Phishing via SMS text messages
Vishing:
Phishing via voice calls
How to Spot Phishing
Warning Signs:
Urgent language ('Act NOW or lose your account!')
Spelling and grammar mistakes
Suspicious sender email (support@g00gle.com)
Requests for passwords or PIN numbers
Too good to be true offers
Generic greetings ('Dear Customer' instead of your name)
Suspicious links (hover to see real URL)
Local Examples:
'You've won KES 500,000 from Safaricom!'
'Your M-Pesa account suspended - call this number'
'Confirm KRA PIN to avoid penalties'
Social Engineering
Definition:
Manipulating people into giving up confidential information
or performing actions that compromise security
Key Concept:
Hacking the HUMAN, not the computer
Humans are often the weakest link in security
Why It Works:
Exploits human psychology (trust, fear, curiosity, greed)
People want to be helpful
People trust authority figures
Famous Example:
Kevin Mitnick rarely used technical hacking
He tricked people into giving him passwords and access
Social Engineering Tactics
- Part 1
1. Pretexting
Creating a fake scenario to gain trust
Example: 'I'm from IT, I need your password to fix your computer'
2. Baiting
Offering something enticing
Example: USB drive labeled 'Employee Salaries 2024' left in parking lot
Someone picks it up and plugs it in... infected!
3. Tailgating / Piggybacking
Following authorized person into restricted area
Example: 'Can you hold the door? I forgot my access card'
Dressed professionally, carrying coffee, looks legitimate
Social Engineering Tactics - Part 2
4. Quid Pro Quo
Offering service in exchange for information
Example: 'Free tech support' call asking for remote access
5. Authority / Impersonation
Pretending to be someone important
Example: Email from 'CEO' asking employee to transfer money urgently
Uses pressure and authority to bypass normal procedures
Defense:
Verify requests through different channel
Call the person directly (don't use number in email)
Follow procedures even when pressured
When in doubt, verify!
Who Are the Attackers?
Understanding the Enemy
Different attackers have different:
Skill levels
Motivations
Resources
Targets
Knowing who attacks and why helps us:
Understand threats we face
Implement appropriate defenses
Predict attack methods
Let's look at each type...
Who They Are:
Script Kiddies
Inexperienced hackers using pre-made tools
Usually young, learning
Skill Level:
Low technical skills
Just run tools others created (don't understand how they work)
Motivation:
Fun, curiosity, bragging rights
Impress friends
Danger Level:
Low to Medium
Can still cause damage by accident
Example:
Teenager using downloaded DDoS tool to attack school website
Who They Are:
Medium to High
Motivation:
Political beliefs
Social justice causes
Activism and awareness
'Fighting for a cause'
Danger Level:
Hackers with political or social agenda
Skill Level:
Hacktivists
Medium to High
Examples: Anonymous group attacking government websites to protest censorship
Defacing websites with political messages
Leaking documents to expose corruption
Who They Are:
Organized crime groups
Professional criminals
Skill Level:
High (well-funded, professional)
Motivation:
MONEY - financial gain
Stealing credit cards, bank accounts
Ransomware for payment
Selling stolen data on dark web
Danger Level:
Cybercriminals
High
Examples: Ransomware gangs demanding millions in Bitcoin
Credit card theft rings
Business Email Compromise (BEC) scams
Who They Are:
Current or former employees
Contractors with authorized access
Skill Level:
Insider Threats
Varies (but they have inside knowledge)
Motivation:
Revenge (angry employee)
Money (selling company secrets)
Ideology Unintentional (negligence, mistakes)
Danger Level:
VERY HIGH - Hardest to detect!
Already have access and trust
Example: Disgruntled employee stealing customer database before quitting
Contractor copying sensitive documents
Who They Are:
Government-sponsored hackers
APT = Advanced Persistent Threat
Skill Level: EXTREMELY HIGH
Nation-State Actors (APTs)
Best tools, unlimited resources, highly trained
Motivation:
Espionage (stealing secrets)
Cyber warfare
Political advantage
Sabotage critical infrastructure
Danger Level: EXTREMELY HIGH
Examples: Russian hackers targeting elections
Chinese hackers stealing trade secrets
Stuxnet worm attacking Iranian nuclear facilities
Who They Are:
Rival companies
Often hire professional hackers
Skill Level:
Medium to High (they pay for talent)
Motivation: Business advantage
Steal trade secrets
Product designs and formulas
Customer lists
Bidding information
Danger Level:
Corporate Competitors
Medium to High
Example: Corporate espionage to steal competitor's new product design
Stealing pricing strategies before negotiations
White Hat Hackers (The Good Guys!)
Who They Are:
Security professionals
Ethical hackers
Penetration testers
Skill Level: .High
Motivation:
Protect systems and people
Get paid legally
Make the internet safer
Job satisfaction
Danger Level:
NONE - They're the defenders!
Examples:
Penetration testers hired to find vulnerabilities BEFORE bad guys do
Bug bounty hunters reporting security flaws
Today's Summary
What We Covered:
✅ What cybersecurity is and why it matters
✅ CIA Triad - Foundation of all security:
Confidentiality, Integrity, Availability
✅ Threat Landscape:
Malware (viruses, worms, ransomware, spyware)
Phishing (fake emails and messages)
Social Engineering (hacking humans)
✅ Types of Attackers:
Script kiddies, hacktivists, cybercriminals,
insiders, nation-states, competitors, white hats
Before Next Class (Friday)
Homework Assignment:
1. Research the CIA Triad deeper
Watch YouTube videos, read articles
Think of 3 real-life examples for each (C, I, A)
2. Check your email inbox
Look for phishing attempts you might have received
Don't click anything! Just observe the red flags
3. Reflect on social engineering
Have you ever been tricked or almost tricked?
What tactics were used?
Next Class: Friday 7PM
Security Terminology + Lab Setup (VirtualBox & Kali Linux)
Bring your questions!
Questions?
0
advertisement
Related documents
Download
advertisement
Add this document to collection(s)
You can add this document to your study collection(s)
Sign in Available only to authorized usersAdd this document to saved
You can add this document to your saved list
Sign in Available only to authorized users