Malicious Code Types

Overview

This 60-minute lesson is the fourth in a six-lesson unit on Cyber Security Essentials designed for GCSE students (ages 14-16). It focuses on understanding malicious code (malware), its types, and protective strategies in alignment with the National Curriculum for England’s Computing programmes of study for Key Stage 4.

National Curriculum Links

Subject: Computing
Key Stage: 4 (GCSE)
Relevant Programme of Study:

Understand the principles of information security, including confidentiality, integrity, and availability of data
Recognise methods of cyber security threats and how to protect computer systems
Use appropriate techniques to detect and prevent cyber security risks

Specific Learning Objectives:

Define "malicious code" and understand its purpose
Identify various types of malware: viruses, trojans, spyware, worms, ransomware
Explain how malware spreads and infects systems
Describe strategies and tools to protect against malware infections
Develop critical thinking about recognising suspicious software or activity

Learning Objectives

By the end of this lesson, students will be able to:

Define malicious code and articulate why it is harmful.
Identify and describe four common types of malware: viruses, trojans, spyware, and ransomware.
Explain how malware enters and affects computing devices.
Recommend at least three effective methods to protect against malware.
Analyse a given scenario to identify potential malware threats.

Resources Needed

Interactive whiteboard or projector
Computers or tablets with internet access
Pre-prepared malware info sheets and scenario cards
Printed “Malware Protection Toolkit” checklist
Quiz platform/software for formative assessment (e.g., Kahoot or Mentimeter)
USB drives or simulated device for demonstration (optional)
Whiteboard markers and flipchart paper

Lesson Structure

1. Starter Activity (10 minutes)

Objective: Activate prior knowledge and engage curiosity about malware.

Begin with a quick poll/question: “Have you or your family ever experienced a computer or phone virus? What happened?”
Show a short, age-appropriate animated video explaining what malicious code is (2-3 mins).
Follow with a Think-Pair-Share: Students discuss what they know about malware types and how they think malware could affect their personal data/devices.
Share some responses, linking to today's objectives.

2. Introduction & Explanation (15 minutes)

Objective: Define malicious code and introduce key malware types.

Present an overview slide with the definition of malicious code: software designed to disrupt, damage, or gain unauthorized access to computer systems.
Break down into four main types with clear UK spelling and examples:
- Viruses: Self-replicating programs that attach to files
- Trojans: Disguised as legitimate software but harmful
- Spyware: Secretly monitors user actions and steals info
- Ransomware: Locks files and demands payment for release
Use real-world examples relevant to teens (e.g., fake apps, phishing emails) to illustrate each malware type.
Demonstrate a safe, simulated malware infection on a test computer/tablet (e.g., triggering a pop-up that mimics ransomware).

3. Group Activity: Malware Scenario Analysis (15 minutes)

Objective: Apply knowledge to recognise different malware forms and protection techniques.

Divide the class into 6 groups of 5 students.
Give each group a “Malware Scenario Card” describing a different infection case (e.g., suspicious email attachment, unknown app installation).
Task: Identify the type of malware involved and suggest two ways to protect or respond to the infection using the checklist provided.
Groups record answers on flipchart paper or shared document.
Each group briefly presents their scenario and protection advice.

4. Protective Measures & Discussion (10 minutes)

Objective: Highlight anti-malware strategies linking theory to practice.

Present slides discussing key protection methods:
- Use of reputable antivirus and anti-malware software
- Regular software updates and patching
- Strong password usage and multi-factor authentication
- Avoiding suspicious links/apps and backups
Facilitate a class discussion on why each measure reduces risks and how students can practically implement these strategies.

5. Plenary Quiz & Reflection (10 minutes)

Objective: Assess understanding and allow personal reflection.

Conduct an interactive quiz using Kahoot/Mentimeter with questions on malware types and protection (e.g., “Which malware demands payment?” Answer: Ransomware).
End with a reflection prompt: “Write down one new thing you learned today and one way you will protect your devices in future.”
Collect reflections to inform any follow-up lessons or student support.

Assessment

Formative: Observation during group discussions and scenario analysis activity
Summative: Answers in plenary quiz and end-of-lesson reflection notes used to gauge comprehension
Teacher to provide individual feedback where misconceptions arise

Differentiation

Support: Provide simplified malware descriptions or vocabulary sheets for students needing assistance
Challenge: Ask higher-ability students to research lesser-known malware (e.g., worms, rootkits) as a homework extension
Pair tech-savvy students with peers who might need help during activities

Homework / Extension

Research a recent malware attack reported in the news and prepare a 2-minute verbal summary describing its impact and how people could have protected themselves.

Reflection Points for Teachers

Did students understand the practical risks of malware beyond textbook definitions?
Were group discussions productive and inclusive?
Did the interactive quiz effectively reinforce key points?
How confident are students in recognising suspicious software or behaviour following this lesson?

This detailed and differentiated lesson plan aims to make malware tangible and relevant for GCSE students while fully meeting the National Curriculum computing standards on cyber security, ensuring learners gain critical skills and knowledge in today’s digital world.

Teaching Instructions