Cybersecurity, Malware & Data Protection

Cybersecurity is the discipline and practice of defending computer networks, devices, software programs, and electronic data from unauthorized access, digital attacks, theft, or damage. • What is Malware? (Malicious Software): Any software intentionally designed to cause damage to a computer, server, client, or computer network: 1. Computer Virus: - A malicious program that attaches itself to legitimate host files or executable software. It activates and replicates only when the infected host program is executed by the user, corrupting files and degrading system performance. 2. Computer Worm: - A standalone self-replicating malware program that spreads automatically across local networks and the Internet without needing to attach to a host file. Consumes network bandwidth and crashes servers. 3. Trojan Horse: - Malware disguised as a harmless, desirable software application (e.g. a free game, screensaver, or media player). Once downloaded and installed, it secretly opens backdoors allowing hackers to access the victim's computer. 4. Spyware & Keyloggers: - Software that secretly installs itself to monitor user activities, track browsing history, and record keystrokes (keylogger) to steal passwords and credit card credentials. 5. Ransomware: - Dangerous malware that encrypts all files on a computer, demanding an extortion payment (ransom) in cryptocurrency before providing a decryption key.

Not all cyber threats rely on complex code; many manipulate human psychology: • What is Phishing? A fraudulent technique where cybercriminals send deceptive SMS messages, emails, or fake web links impersonating trusted institutions (banks, MTN MoMo, WAEC) to trick victims into revealing sensitive personal data (PINs, passwords, Ghana Card numbers). • Telltale Signs of a Phishing Attempt: 1. False Urgency: Demands immediate action ('Account will be blocked in 1 hour!'). 2. Suspicious Web Links: Misspelled domain URLs (e.g. 'www.momo-gh-verify.com' instead of official telecom portals). 3. Requests for Confidential Credentials: Legitimate banks NEVER ask customers for secret PINs via phone calls, SMS, or emails! 4. Poor Grammar and Spelling: Scams often feature awkward English phrasing.

Defending personal digital accounts requires proactive security hygiene: • 1. Strong Password Construction: - Length: At least 8 to 12 characters. - Complexity: A robust mixture of UPPERCASE letters, lowercase letters, numbers (0–9), and special symbols (@, #, $, %, !). - Unpredictability: Never use personal names, birth years ('kofi2008'), or sequential numbers ('123456'). - Example of Strong Password: 'Tr0p!c@l#Accr@2026'. • 2. Two-Factor Authentication (2FA): - Requires two separate verification steps before logging in: 1. Password + 2. A temporary one-time SMS code (OTP) sent to your mobile phone. • 3. Antivirus Software & Firewalls: - Antivirus: Software that continuously scans hard drives, memory, and downloads to detect, quarantine, and eliminate malware (e.g. Windows Defender, Kaspersky). - Firewall: A security filter that monitors incoming and outgoing network traffic, blocking unauthorized hacking connections. • 4. Regular Data Backup: - Always maintain duplicate copies of essential files on an external hard drive or cloud storage (Google Drive). If ransomware attacks, files can be restored without paying a dime!

Under Ghana's Cybersecurity Act (Act 1038) and the Electronic Transactions Act: - Engaging in cyber fraud (sakawa), hacking computer systems, stealing data, or circulating non-consensual private imagery is a severe felony carrying heavy prison sentences. - Good Digital Citizenship: Respecting others' intellectual property, avoiding pirated software, and protecting national cyber infrastructure.