Start free →
Cybersecurity · Lesson 1
0 XP
Lesson 1 of 2012 minBeginner

Your phone is a house.

Before we touch a single hacking tool, I want you to understand one simple idea. Once this idea clicks, everything else in cybersecurity becomes easy to follow. Promise.

Your teacher says

Don't worry if you've never studied computers. I'll explain everything from the beginning, in simple words. Just read slowly and try every activity. That's it.

Think of your phone like your house

Picture your house. Maybe it's in Tolichowki, Mehdipatnam, Old City or Kukatpally. Inside your house you keep things that matter: gold, cash, documents, family photos.

Now look at your phone. It's the same thing.

A thief doesn't break down a strong door. He looks for the window someone forgot to close, or he knocks and pretends to be the electricity man so you open the door yourself.

Cybersecurity is simply the work of locking the doors, checking the windows, and noticing when a stranger is trying to get in. That's the whole job, at a bigger scale: for a bank, a hospital, or a company in HITEC City instead of your house.

The 3 things we protect

Every security expert in the world thinks about the same three things. They're called the CIA triad. (Nothing to do with spies, don't worry.) Learn these three. You'll use them in every interview.

CConfidentiality

Only the right people can see it. Your private Instagram DMs getting leaked? That's confidentiality broken.

IIntegrity

Nobody secretly changes it. Someone edits your marks on the college portal from 82 to 28? Integrity broken.

AAvailability

It works when you need it. The results website crashes on results day and nobody can open it? Availability broken.

Quick check+10 XP

A scammer changes the UPI ID on a shop's QR code sticker, so customers pay him instead of the shop owner. Which one did he break?

Integrity. Nothing was leaked and nothing stopped working. The information on the sticker was changed without permission. That's an integrity attack. This really happens at shops, so always check the name that appears in your UPI app before you pay.

Three words that confuse everyone

People mix these up all the time, even working professionals. Tap each card to flip it.

Interview tip

If an interviewer asks "What's the difference between a threat and a vulnerability?", answer with the house example. It shows you truly understand it, not that you memorised it.

Game: spot the scam

Most attacks on normal people in India don't use fancy hacking. They use tricks on your mind. This is called social engineering. Look at each message and decide: real or scam?

+91 70xx xx3318Dear user your SIM KYC is expired. Your SIM will be blocked in 24 hours. Call our executive immediately 7xxxxxxx1811:02 am

Scam. Telecom companies don't send KYC warnings from personal numbers. The "executive" will ask you to install a screen-sharing app or share an OTP, and then empty your account.

VM-HDFCBK123456 is your OTP for a transaction of Rs 2,499.00 at AMAZON. Valid for 5 mins. Do not share this OTP with anyone. -HDFC Bank4:47 pm

Real, if you just ordered on Amazon. It comes from a bank sender ID (like VM-HDFCBK), not a 10-digit number, and it tells you not to share the OTP. But if you did not make this payment, someone has your card details: call your bank immediately.

Priya HR · TelegramHello! Part-time job from home. Just like YouTube videos and earn ₹3,000/day 🤑 First task is free, then deposit ₹1,000 to unlock VIP tasks. Interested?9:31 pm

Scam: the famous "task scam". They pay you small amounts first so you trust them, then ask for bigger "deposits" and disappear. Rule: a real job never asks you to pay.

Remember this forever

Scams almost always have three things: hurry ("tonight", "24 hours"), fear or greed (block, cut, ₹3,000/day), and a request (call, click, pay, share OTP). If you see all three, stop. If you or your family get cheated, call the cyber crime helpline 1930 immediately or report on cybercrime.gov.in.

Where can this take you?

Big companies, banks and hospitals all need people to protect their "houses". Many of them run a Security Operations Centre (SOC): a team that watches alerts all day and investigates anything suspicious. Hyderabad has a lot of these jobs, especially around HITEC City and Gachibowli.

The most common first job is SOC Analyst (Level 1). In India, freshers usually start somewhere around ₹3.5 to 6 lakh a year, and it grows quickly with skills and certifications. (Salaries change with company and time, so treat this as a rough idea, not a promise.)

By the end of this course, you'll know exactly what a SOC analyst does, and you'll have practised it.

One rule before we go further

What you'll learn here can protect people, or harm them. Getting into someone's account, phone or website without permission is a crime in India under the IT Act, 2000, even if you were "just testing" or it was "just a prank". Real professionals only test systems when they have written permission. In this course we'll only practise on our own devices and on legal training sites.

Your task for today (10 min)

Lock the doors of your own house. On your phone: turn on two-step verification in WhatsApp (Settings → Account → Two-step verification), turn on two-factor authentication in Instagram and Gmail, and install any pending phone updates. Then do the same for one family member. You just did your first real security job.

Final check+20 XP

Your friend says: "I found my college's exam portal has a weak password page. Let's try logging in as the principal for fun." What do you say?

Exactly right. Finding a weakness and reporting it is what professionals do. It's called responsible disclosure, and it can even get you noticed. Breaking in "for fun" can get you arrested.

Lesson complete!

You now know what cybersecurity is, the CIA triad, the three tricky words, and how scams work. That's a strong start.

Next: How computers really work →