School: Minister Destiny Testimony Schools Track: Adult Class: Certificate Topics — Year 1 (Foundations) · Home: Schools — Adult track Certificate behind this topic: "Cybersecurity Awareness: Malware" — LinkedIn Learning, earned by Minister Destiny Marie Morgan (May 30, 2025) Founded and presented by: Minister Destiny Marie Morgan, Minister
This lesson is educational information from Minister Destiny Testimony Schools. It teaches the public body of knowledge in this subject — the same ground Minister Destiny studied for her certificate — in this school's own words. It is not the original course, it does not award the original credential, and it is not legal or medical advice. If you are in danger right now, call 911.
Before you start
- This school never asks your name. Your progress is saved to your student record, so you can pick up on any device. If you pass this unit's quiz (80% or higher, retakes allowed), you earn a downloadable certificate with a blank line — you write your own name on it after you save it. Quiz answers are not shown; if you miss a question, re-read the lesson and try again.
- Malware sounds like a specialist's problem. It is not: it arrives in ordinary inboxes, downloads, and adverts, and the habits that stop it are ordinary habits, done consistently.
- Minister Destiny places this topic in Year 1 for a plain reason — understanding what malware wants turns a frightening word into a manageable set of doors you can close.
The lesson
Part 1. Malware Families in Plain Language — What Each One Wants
Malware means malicious software: programs written to do something on your device that you did not agree to. The families are named by behaviour. A virus attaches itself to files or programs and spreads when they are shared. A worm travels by itself across networks, hunting the next machine without needing anyone to carry it. A trojan poses as something useful — a game, a utility, a document — and relies on you to install it; once inside, it opens the way for other harm. Ransomware encrypts your files or locks your system and demands payment for the key. Spyware watches: browsing, messages, location, screens. A keylogger is spyware specialised in recording keystrokes, harvesting passwords and card numbers as you type them. A rootkit burrows deep to hide other malware and keep an attacker's access alive through restarts and casual cleanups. And a bot enrols your device into a botnet — a remote-controlled herd used to send spam, commit fraud, or flood a target offline — often so quietly that the only symptom is a slower machine or a higher data bill.
Ask of any malware story: what did it want? Money directly (ransomware, banking trojans), information (spyware, keyloggers), or your device's labour and reputation (bots). The want tells you what to protect and what to check afterward — accounts, in every case, because information gathered quietly today is used loudly weeks later.
Part 2. How It Gets In — the Infection Routes
Malware almost never breaks down a locked door; it is invited, delivered, or slipped through a crack. The invitation routes are familiar from the Phishing unit: malicious attachments (invoices, “secure documents,” documents that ask you to enable macros), malicious links leading to fake login pages or drive-by download sites, and phishing pages that drop a file after the form. The delivery routes are unsafe downloads — pirated software and media, “free” versions of paid programs, game cheats and cracks, and utilities from unofficial stores — a classic trojan channel, because the thing you wanted really is in the package, with company. Malvertising — poisoned adverts on otherwise legitimate sites — and fake update prompts (“Your Flash/video player is out of date”) exploit your good instinct to keep software current; real updates come from inside the program or its official store, never from a web page's pop-up. Finally, the cracks: unpatched software, where a known flaw in your browser, system, or router is exploited by a site or file you merely encounter; and removable media, the found USB drive whose curiosity tax is an infection. Every route has the same two-part defence: reduce what you invite (sources, attachments, downloads) and close the cracks (updates), which Parts 5 and 6 make concrete.
Part 3. Ransomware Up Close — Behaviour and Warning Signs
Ransomware earns a close look because its damage is life-changing for families and fatal for some small organisations. A modern incident usually unfolds in stages. First, entry — very often a phished credential, an attachment, or an exposed, unpatched remote-access service. Then a quiet period: the intruders explore, copy valuable files out (setting up the leak threat), and disable backups and security tools where they can. Only then comes the loud stage: encryption spreads, systems fail, and the ransom note appears, with a deadline and a negotiation channel. Demands are calibrated to the victim, which is why stolen financial documents matter during the quiet stage.
Part 4. Signs Your Device May Be Infected
Infection is often, not always, visible. Watch for clusters of these changes, especially ones that begin suddenly: new toolbars, home pages, or programs you did not install; pop-ups appearing when your browser is closed; your device running hot, slow, or crashing after a long period of normality; friends receiving messages or posts from your accounts that you did not send; security software disabled or unable to update; unexpected charges, password-reset emails you did not request, or login alerts from places you have never been; battery and data use climbing without a change in your habits. Any single symptom has innocent explanations — age and clutter explain most slowness — but a sudden cluster deserves investigation, and an account symptom (messages sent as you, resets you didn't request) deserves immediate action even alone, because that is the malware spending what it stole.
Part 5. The Layered Habits That Keep Malware Out
No single product keeps malware out; layers do. Layer one — updates. Turn on automatic updates for your operating system, browser, and apps, and restart when asked. This closes the cracks of Part 2 more cheaply than any other act. Layer two — reputable security software, kept current and allowed to scan; on modern systems the built-in protection is genuinely capable when left enabled. Layer three — safe sourcing. Get software from official stores and vendors, treat cracks, cheats, and pirated copies as pre-infected, and uninstall what you no longer use — every program is one more door to keep patched. Layer four — careful handling. Unexpected attachments stay closed until verified through a separate channel; documents never need macros to be read; downloads get a moment's thought about their origin. Layer five — accounts. Unique passwords in a password manager, multi-factor authentication, and limited daily use of administrator accounts mean that even a successful infection finds less to steal and less power to use. Layer six — backups, the ransomware answer. Keep copies of what you cannot replace on a separate drive or reputable cloud service, versioned so an encrypted copy does not overwrite the good one, disconnected or protected so the infection cannot reach them — and test a restore once, before the emergency grades your work.
Part 6. What to Do After an Infection
Act in order, and do not panic-clean randomly. (1) Disconnect the device from Wi-Fi and unplug network cables. This stops communication with the attacker and protects other devices and accounts accessible from it. (2) From a different, clean device, change the passwords that matter most — email first (it resets everything else), then banking and other financial accounts — and turn on MFA. Do not change passwords on the infected device if a keylogger is possible. (3) Scan and clean with your security software's full or offline scan. If ransomware has encrypted files, do not wipe anything until you have considered reporting and recovery options — and never pay as a first move. (4) Report: individuals report internet crime at ic3.gov and fraud at ReportFraud.ftc.gov; follow your workplace's incident route immediately if a work device or account is involved. (5) Restore or rebuild from a backup made before the infection, then update everything before reconnecting fully. (6) Watch for the spend: statements, credit reports, and login alerts for the following months, because harvested information is often used later.
Words to know — Malware — What It Is and How It Gets In
- Malware — malicious software: programs written to act on a device without the owner's agreement.
- Virus — malware that attaches to files or programs and spreads when they are shared or run.
- Worm — malware that spreads across networks by itself, without a carrier.
- Trojan — malware disguised as something desirable, installed by the victim, which opens the way for further harm.
- Ransomware — malware that encrypts files or locks systems and demands payment for access.
- Spyware — malware that secretly observes activity; a keylogger is the kind that records keystrokes.
- Rootkit — malware that hides deep in a system to conceal other malware and preserve an attacker's access.
- Botnet — a herd of infected devices under remote control, used for spam, fraud, or flooding attacks.
- Malvertising — poisoned advertising that delivers malware or scams through otherwise legitimate sites.
- Scareware — fake virus warnings designed to frighten you into calling a scam number or buying worthless “protection.”
Myths vs facts — Malware — What It Is and How It Gets In
- Myth: If my device seems fine, it cannot be infected. Fact: Spyware and bots are designed to be invisible. Prevention and updates protect the machines that “feel fine,” too.
- Myth: Only reckless downloading causes infection. Fact: Attachments, poisoned adverts, fake update prompts, and unpatched everyday software infect careful people's machines as well.
- Myth: Paying ransomware quickly is the pragmatic fix. Fact: Official guidance says do not pay — no key is guaranteed, payment funds further attacks, and stolen data is not returned on trust.
- Myth: A pop-up warning with a phone number is my security software helping me. Fact: That is scareware. Real protection reports inside its own window and never demands a call or gift-card payment.
- Myth: Antivirus alone makes updates optional. Fact: Security software and patching cover different doors. Unpatched software remains exploitable even with antivirus running.
Think it through — Malware — What It Is and How It Gets In
Tom downloads a “free” version of an expensive photo-editing program from a site he found through a forum. The program works, which reassures him. Over the next two weeks, his laptop fan runs constantly, two friends ask why he sent them a link to a cryptocurrency giveaway, and he receives a password-reset email for his email account that he did not request.
Walk it through: (1) Identify the probable route and family using Parts 1 and 2: a working-but-trojanised download from an unofficial source — the program functioning is part of the disguise, not evidence of safety. (2) Read the symptom cluster with Part 4: the fan suggests the device is doing work for someone else (a bot at labour), the messages sent as Tom are the malware spending access, and the reset email suggests credentials are being probed. Together they cross the “investigate now” line. (3) Apply Part 6 in order: disconnect the laptop; from his phone, change his email password first and turn on MFA, then banking; run a full scan — and accept that a rooted infection may need a clean rebuild from a pre-infection backup. (4) Close the future door with Part 5: official sources only, updates automatic, and a note to his two friends warning them to ignore the link — the honest timeline, shared, protects his network of people as well as his machine.
Try this — Malware — What It Is and How It Gets In
- ☐ Turn on automatic updates for your operating system, browser, and apps on one device today, and schedule the same for the rest
- ☐ Run a full scan with your security software and confirm it is enabled, current, and allowed to update itself
- ☐ Delete one pirated, cracked, or mystery program — and replace anything you truly need from its official source
- ☐ Set up or repair one backup of irreplaceable files, stored separately from the device, and open one restored file to prove it works
- ☐ Write your own after-infection order on a card by the computer: disconnect — clean device — email password and MFA — bank — scan — report
Resources to keep — Malware — What It Is and How It Gets In
- Cybersecurity and Infrastructure Security Agency (CISA) — cisa.gov — ransomware guidance including the StopRansomware resources and malware prevention tips.
- FBI Internet Crime Complaint Center (IC3) — ic3.gov — report ransomware and other internet crime; official guidance is not to pay ransoms.
- Federal Trade Commission Consumer Advice — consumer.ftc.gov — what to do about malware and hacked accounts, in plain language, and reporting at ReportFraud.ftc.gov.
- National Cybersecurity Alliance — staysafeonline.org — everyday device-hygiene habits for non-specialists.
What you earned / what's next — Malware — What It Is and How It Gets In
✅ Malware — What It Is and How It Gets In complete (quiz score 80% or higher): You can tell the malware families apart by what they want, name the doors malware uses, spot a real symptom cluster without falling for scareware, and carry out an ordered recovery.
Your certificate
Minister Destiny Testimony Schools Certificate of Completion — Malware — What It Is and How It Gets In
This certificate is presented by Minister Destiny Marie Morgan, Minister
Awarded to: ______________________________ (write your name here after you download — your name is never collected or stored by this school)
Date completed: ______________
Congratulations. You now know what malware wants and where it knocks — and a household whose doors you understand is a household you can protect. Keep the rhythm: update, back up, verify. — Minister Destiny Marie Morgan
This is a certificate of educational completion from Minister Destiny Testimony Schools. It is not a state license, a government certification, or the original course credential.
What's next: Return to the Certificate Topics for your next Year 1 Foundations topic.
Sources
- StopRansomware Guide and malware prevention resources — Cybersecurity and Infrastructure Security Agency (cisa.gov) — ransomware stages, do-not-pay guidance, and backups.
- Ransomware and internet-crime reporting — FBI Internet Crime Complaint Center (ic3.gov) — reporting routes and recovery posture.
- Malware and hacked-account guidance — Federal Trade Commission Consumer Advice (consumer.ftc.gov) — symptom recognition and recovery steps.
- National Cybersecurity Alliance device-safety resources — National Cybersecurity Alliance (staysafeonline.org) — layered everyday habits.
Course Record — Malware — What It Is and How It Gets In
- Learning outcomes: On completing this unit, the student can:
- name the malware families — virus, worm, trojan, ransomware, spyware and keylogger, rootkit, bot — by what each wants and does
- describe the main infection routes: attachments and links, unsafe downloads, malvertising and fake updates, unpatched flaws, and removable media
- outline the stages of a modern ransomware incident and state the official do-not-pay, report, and recover-from-backup posture
- recognise a symptom cluster suggesting infection, and tell it from a scareware pop-up
- apply the six defensive layers, including tested, separate backups as the ransomware answer
- carry out an ordered after-infection response: disconnect, secure accounts from a clean device, scan, report, restore, and monitor
- Study time: Approximately 1.5 hours — an estimate covering reading, activities, and the test. Students move at their own pace.
- Assessment: A 10-question test drawn only from this unit's lesson. 80% or higher passes and earns the unit certificate. Answers are not shown; your score is saved to your student record, and retakes are allowed.
- Level: Certificate Topics — Year 1 (Foundations) · Adult school · working rank on completion path: Freshman → Sophomore.
- Version: Version 1.0 — October 2026.
Minister Destiny Testimony Schools — Adult. Educational information only. Help lines: 911 for emergencies · 988 Suicide & Crisis Lifeline (call/text 988).