Cyber Safety & Crime

Introduction

This chapter turns from etiquette and rights to active threats — the specific ways people are deliberately targeted or harmed online, and, in the next two topics, the software and law that respond to them.

Concept

A cyber crime is any illegal activity carried out using a computer or the internet, either as the target or as the tool. Common types CBSE covers:

• Phishing — fraudulent emails or messages, disguised as coming from a trusted source, designed to trick a person into revealing sensitive information like a password or bank details.
• Identity Theft — illegally obtaining and using someone else's personal information, usually for financial gain.
• Cyberbullying — using digital platforms to deliberately harass, threaten, or humiliate someone, repeatedly.
• Cyberstalking — repeatedly using the internet to follow, monitor, or harass a specific individual, often causing fear for their safety.

Explanation

Phishing and identity theft are closely connected in practice, not two unrelated crimes: a successful phishing attempt is very often exactly how identity theft actually begins — the stolen password or bank detail from a phishing message becomes the raw material for the identity theft that follows. Recognising a phishing attempt early is one of the most effective ways to prevent this entire chain.

Note: Cyberbullying and cyberstalking are both a form of harassment, but differ in pattern: cyberbullying is centered on public or semi-public humiliation (often visible to others, like a group chat or comment section), while cyberstalking centers on covert, ongoing monitoring of one specific person.

Summary

A cyber crime is any illegal activity using a computer or the internet as the target or the tool — phishing tricks a person into revealing sensitive information, identity theft misuses someone's personal information for gain, cyberbullying is repeated online harassment or humiliation, and cyberstalking is repeated, covert monitoring of a specific individual.

Create a process diagram for 'How Phishing Works'. Step 1 (The Hook): A hacker sends an email labeled 'URGENT: Bank Account Suspended'. Step 2 (The Trap): The user clicks the link and goes to a 'Fake Website' that looks exactly like the real Bank. Step 3 (The Bite): The user types their password into the fake site. Step 4 (The Catch): The password goes directly to the hacker, not the bank. Style: Flowchart with icons (Email, Mouse Click, Fake Bank, Hacker Laptop).

Introduction

Cyber crimes from the last topic often rely on a specific tool to actually carry out the harm — malicious software, or malware. This topic covers the three main kinds CBSE names.

Concept

Malware is any software deliberately designed to damage, disrupt, or gain unauthorised access to a computer system.

• Virus — attaches itself to a genuine program or file, and spreads by copying itself into other files or programs when the infected one is run — it needs a host file, and needs to be executed, to spread.
• Trojan (Trojan Horse) — disguises itself as a legitimate, useful program to trick a user into installing it, but secretly carries out a harmful action once run. Unlike a virus, a Trojan does not self-replicate.
• Adware — automatically displays unwanted advertisements, often bundled inside otherwise-legitimate free software; less directly destructive than a virus or Trojan, but a genuine privacy and nuisance risk, since it frequently also tracks browsing behaviour.

Explanation

The name "Trojan Horse" is a deliberate reference to the ancient Greek story — a gift that looked harmless (or even valuable) on the outside, but concealed something harmful within — which is exactly the distinguishing behaviour of this specific malware type: it relies entirely on deception to be installed voluntarily, rather than spreading on its own the way a virus does.

Note: "Virus" is often used loosely, in everyday conversation, to mean "any malware" — but on a CBSE exam, a virus specifically means malware that self-replicates by attaching to and spreading through other files. A Trojan and adware are both malware, but neither one is technically a virus.

Summary

Malware is software deliberately designed to cause harm or gain unauthorised access. A Virus attaches to a host file and self-replicates when run; a Trojan disguises itself as legitimate software to trick a user into installing it, but does not self-replicate; Adware displays unwanted advertisements, often while also tracking browsing behaviour.

Introduction

You now know what cyber crimes and malware look like. This closing topic covers practical habits that reduce your exposure to both, and the law that governs them in India.

Concept

Cyber Safety Practices

• Use strong, unique passwords for different accounts, and never share them.
• Be cautious of unexpected links or attachments, especially from an unfamiliar sender — a common phishing tactic from the last chapter.
• Keep your operating system and antivirus software updated, so known vulnerabilities are patched.
• Avoid oversharing personal information (your location, your school, your daily routine) publicly on social media.
• Log out of accounts on shared or public computers.

The Information Technology (IT) Act, 2000

The IT Act, 2000 is India's primary law governing cyber crime and electronic commerce. It provides legal recognition for electronic records and digital signatures, and defines specific offences (including hacking, identity theft, and cyber fraud) along with the penalties for them.

Explanation

Cyber safety habits and the IT Act address the same problem from two different directions: the habits are what an individual does to reduce their own personal risk, while the IT Act is the legal framework that defines these actions as offences and allows them to be reported and prosecuted after the fact — practising good habits reduces how often the law needs to be invoked at all.

Note: If you ever experience a cyber crime — being phished, having an account compromised, or being harassed online — it can be formally reported; treating it only as something to handle privately, without ever reporting it, is exactly the gap the IT Act exists to close.

Summary

Cyber safety practices — strong passwords, caution with unfamiliar links, updated software, and limited oversharing — reduce personal risk day to day. The IT Act, 2000 is India's law governing cyber crime and electronic commerce, giving legal recognition to electronic records and defining offences like hacking and identity theft along with their penalties.