About this module
Your browser is where most cyberattacks begin: 73% of malware arrives through web browsing or email links.
This safe browsing training module gives you six habits that close those doors: checking the full URL for lookalike domains, hovering over links before clicking, downloading only from official sources, sticking to IT-approved extensions, separating work and personal sessions, and clearing shared devices.
You'll also learn why public Wi-Fi is unencrypted by default and how a VPN wraps your traffic in an encrypted tunnel. By the end, verification becomes automatic, because habit is what keeps you safe at speed.
Key takeaways
Your web browser is where most cyberattacks begin. Every link you click, every file you download is a potential entry point. A few consistent habits close most of those doors.
Seventy-three percent of malware reaches its target through web browsing or email links. The browser is the attacker's preferred delivery channel.
When you visit a website, your browser executes code from that server. Drive-by downloads can install malware without a click. Fake login pages copy trusted brands perfectly.
Your habits are the last line of defense.
First: always check the full URL. Look for HTTPS and make sure the domain is exactly right, not a lookalike.
Second: hover over every link before clicking. The real destination appears in your status bar. If it looks wrong, don't click.
Third: never download software from a site you didn't deliberately navigate to. Malware is routinely disguised as free tools.
Fourth: only use I.T.-approved browser extensions. Malicious ones can read everything you type, including passwords.
Fifth: keep work accounts on your work browser. Mixing personal and work sessions can expose credentials across both.
Sixth: if you use a shared device, always clear the cache and log out completely when done.
Six habits. Apply them consistently and you close most browser-based attack vectors.
Safe: download only from official vendor sites or your I.T. portal, verify the file type, and scan before opening.
Risky: clicking download on a pop-up, installing free tools from unknown sites, or opening attachments without verifying the sender.
When in doubt, ask I.T..
When in doubt, ask I.T. before downloading anything.
Public Wi-Fi is unencrypted by default. Anyone on the same network can intercept traffic between your device and the router. Your VPN must be on.
A VPN creates an encrypted tunnel. Even on public Wi-Fi, a network attacker sees only encrypted data. Enable your VPN before any public network session.
Four point one billion malicious URLs blocked daily. One in fifty websites contains malicious code. Forty-six percent of malware arrives via drive-by downloads.
Credential theft through fake login pages is three times more common than traditional malware.
Every link is a question: do I trust where this leads? The goal isn't paranoia. It's to make verification automatic. Habit is what keeps you safe at speed.
Six habits, consistently applied, close most browser-based risk. In Module Five, you'll learn how to keep your work devices secure.
