🎯 What you will learn
- By the end of this lesson you'll know what malware is and its main types.
- You'll understand why cracked games and mod APKs are dangerous.
- You'll know where you can download apps safely.
- You'll understand why updates and antivirus software matter.
- You'll know the signs of an infected device and what to do about it.
What is malware?
Malware (short for malicious software) is any program designed to damage your device, steal your data or spy on you. It can affect computers, phones, tablets and even smart home devices.
| Type | What it does |
|---|---|
| Virus / worm | Copies itself and spreads to other files or devices. |
| Trojan | Pretends to be a useful program (a game, a “cheat”, a tool), but secretly opens the door to an attacker. |
| Ransomware | Encrypts (locks) your files and demands money to “unlock” them. |
| Spyware / stalkerware | Spies on what you type, where you are, your messages and your camera. |
| Infostealer | Steals saved passwords, account cookies and digital wallets. |
| Adware | Floods your device with adverts and annoying pop-ups. |
Where does malware usually come from?
- Cracked games and programs (“cracks”, “keygens”, free copies of paid software) – one of the most common sources of infostealers today.
- Mod APKs – modified versions of Android apps with “unlimited money” or “free premium”.
- Game cheats and hacks – they often ask you to turn off your antivirus: a very bad sign.
- Attachments in emails or chats – .zip, .exe, .scr or .apk files, or Office documents asking you to “Enable Macros”.
- Fake adverts and fake “Download” buttons on film and download websites.
- Unknown USB sticks – a USB stick you've found or borrowed could contain a harmful program.
- Fake alerts such as “Your phone has 13 viruses! Download the cleaner now!”
How to download safely
- Only download apps from official stores: Google Play, the Apple App Store, the Microsoft Store, or the developer's official website.
- Before you download, check the developer's name, the number of downloads, the ratings and the latest reviews.
- Watch out for fake copies: apps with a name and icon very similar to a well-known app.
- Check the permissions: a torch app doesn't need your contacts and text messages.
- On Android, keep “Install unknown apps” turned off and Google Play Protect turned on.
- Don't be fooled by big “DOWNLOAD” buttons on suspicious websites – they're often adverts.
Updates: patching the holes
Programs sometimes have mistakes in them (vulnerabilities) that attackers take advantage of. Updates close these holes. That's why they're one of the most important protections you have.
- Turn on automatic updates for your system (Windows, macOS, Android, iOS) and your apps.
- Keep your browser up to date too – it's your main doorway to the internet.
- Very old devices that no longer get security updates are riskier; don't use them for banking or important accounts.
- Updates come from your device's Settings or from the official store – not from a pop-up on a website saying “Update Chrome now”.
Antivirus and backups
Windows now comes with Microsoft Defender built in, which is good protection for most home users as long as it's kept switched on and up to date. Android has Google Play Protect, while iPhones are protected mainly by the App Store and by updates.
- Don't install several antivirus programs at once – they get in each other's way.
- Beware of “antivirus” programs advertised with scary warnings – many of them are malware themselves.
- Make backups of your photos and documents: in the cloud (Google, iCloud, OneDrive) or on an external drive that you unplug after copying. This will save you from ransomware and from losing everything if your device goes missing.
Signs of infection and what to do
Signs that could point to malware:
- Your device becomes very slow, gets hot or the battery runs down quickly for no reason.
- Adverts pop up everywhere, even outside the browser.
- New apps appear that you didn't install.
- Your friends get messages from you that you didn't send.
- Your files have strange names and won't open, or a message appears demanding payment.
- Disconnect the device from the internet (Wi-Fi and mobile data).
- Tell an adult or the IT person at school.
- Run a full scan with your antivirus and delete any suspicious apps.
- From another, clean device, change your important passwords and turn on 2FA.
- For ransomware: don't pay; restore your files from your backup and report what happened.
- In serious cases, the device may need to be reset to factory settings.
📖 A real-life story
Valon, 15, from Prishtina, wanted a new game that cost €60. On a forum he found a free “cracked” version. The installer asked him to turn off Windows Defender “because it causes problems with the crack”. Valon did. The game never opened.
A week later, his Discord account was sending links to all his friends and he had lost his Steam account. The program had been an infostealer that stole the passwords saved in his browser. With his brother's help, Valon reinstalled Windows, changed all his passwords from his phone, turned on 2FA and contacted official support. Now he waits for the seasonal sales in the official stores – games are often much cheaper there.
✅ Do / Don't
✅ Do this
- Only download from official stores or the developer's official website.
- Check the developer, the ratings and the permissions before installing.
- Turn on automatic updates for your system and your apps.
- Keep your antivirus (e.g. Microsoft Defender, Play Protect) switched on.
- Back up your photos and documents regularly.
- Disconnect from the internet and tell an adult if you think your device is infected.
- Delete apps you no longer use.
- Wait for official sales instead of looking for cracked games.
❌ Don't do this
- Don't download cracked games or programs, keygens or mod APKs.
- Never turn off your antivirus to install something.
- Don't open .exe, .zip or .apk attachments you weren't expecting.
- Don't enable macros in documents from unknown sources.
- Don't plug USB sticks you've found or don't recognise into your computer.
- Don't believe “Your device has viruses!” alerts on websites.
- Don't pay ransomware demands.
👨👩👧 For parents and teachers
Many infections at home come from children looking for free games, cheats or films. Simple rules and an up-to-date system go a long way.
- Create a standard (not administrator) account on the computer for your child – that way, installing anything needs your approval.
- On Android, use Google Family Link so that downloads need your approval; on iPhone, use “Ask to Buy”.
- Check that automatic updates and Microsoft Defender/Play Protect are switched on.
- Set up automatic backups for the family's photos and documents.
- Talk about “free”: cracked games often end up costing far more than their actual price.
- At school, teachers can explain why the computers in the IT room don't accept unknown USB sticks.
🧠 Mini-quiz
Answer 3 questions. Get at least 2 right and the lesson is marked as completed in your passport.