Safe Web Browsing Training

What the training consists of

1. 

   1. Identifying fake websites and malicious links

   1:52

   Fake websites often imitate real ones with a slightly changed name or an extra word added to a brand name. The first lesson shows how to check a web address before clicking, and what makes a website look genuine once it is open, such as proper contact details and real photos rather than stock images.

2. 

   2. Handling pop-ups and fake warnings

   1:12

   Some pop-ups claim the computer is infected or demand immediate action. The second lesson explains why the safe move is to close the tab or the browser without clicking anything in the pop-up, and how genuine messages, such as a bank’s session warning, look different.

3. 

   3. Recognising secure websites (HTTPS and HTTP)

   1:10

   The third lesson explains HTTPS, the padlock in the address bar, which means a website encrypts what is typed into it so attackers find it much harder to read on the way.

4. 

   4. Safe data entry practices

   1:01

   Finally, colleagues learn why a reused password is a risk when entering data online, and how the browser’s automatic form filling (autofill) can share more than a form needs.

Why it matters

Anyone can put a website online, and fake ones are made to look real. One click on the wrong link or pop-up, or data typed into the wrong form, can lead to malware, identity theft, exposed business secrets or a company data breach.

What your colleagues learn

• The browser does not catch everything. It can warn about websites already on its list of known dangerous ones, but a website that is not on the list gets no warning.
• Fake warnings are written to cause panic. They push for a click or a phone call before anyone stops to question them.
• HTTPS has to be checked on the page where data is typed in. Some websites use it on some pages only, and the login or contact form can be on a page without it.
• Filling in a form means trusting the people behind the website. Before typing anything in, it is worth asking what would happen if this data fell into the wrong hands, and whether it is needed at all.