Phishing for a password · البرمجة مع مارتن

Phishing for a password = a disguise that wants a key

You already know the word phishing from التحضير. Here it is aimed at a password: a message, a page or a voice that looks like school, a game, “Microsoft”, a friend — and they want you to type a password somewhere it does not belong.

Phishing for a password almost always:

rushes — “the account will be deleted in 10 minutes”
wants a secret — a password, a PIN, an SMS code
arrives outside the official page — a link in chat, mail, SMS

A real school does not take your password in Discord. A real game does not want a password in an Instagram message.

⚠️

Do not check it by typing a password “just to try”. If you are not sure, you open the service yourself. You do not go back into the message.

Signs — without clicking

A weird sender — gmail with the school name in the name.
The link leads somewhere else than the button text promises.
Spelling in a rush — not proof on its own, but a plus point.
“Do not tell your parents” — always stop.

The method: put the phone down → screenshot → a parent → you open the service yourself, if you need to.

💡

If a friend sends “look, school sent us a link”, you still do not click. You say: “I will open Bakaláři myself.” A good friend will wait.

What to say out loud

A message: “Verify the account, type the password.”

“I do not send a password in chat. I will show a parent.”

“It is from a teacher, really.”

“A teacher does not send it to me like this. I will ask at school.”

A friend: “Just for a minute, so I can look.”

“I do not lend the account. Go to the teacher.”

After a click

Tell a parent immediately.
Recover the password officially.
2FA, if it is possible.
A screenshot for a teacher, if it is about school.

Changing a password is boring. Silence is worse.

How it fits the projects

🏫 Campaign for the class. Poster: A password in chat = always no.

🏠 Family rules. You already have a sentence about passwords — today say it out loud to the whole family.

Hunter — similar traps with SMS and QR codes.

Now you 💪

With a parent, read one old message or an example (a teacher can give an anonymous one). Look for rush and “type the password”. Without clicking anything live from strangers.

A screenshot or paper: three phishing signs (rush, a secret, a weird link).
Practise the sentence: “I do not send a password in chat.”
ملاحظة this sentence for the class campaign on the poster.

✅

Check: You spot phishing for a password by rush and a secret. You open the service yourself. A click = say it immediately.

What to take from this lesson

A password in chat = always no.
Rush + a secret = phishing.
Checking = I open the service myself.
I clicked = a parent + password recovery.