Proton security quiz

The rise in popularity of cryptocurrencies has encouraged cybercriminals to find innovative ways to attack markets, users and any structure where cryptocurrencies are stored. Main purpose of this quiz is to raise awareness of cybersecurity in relationship with cryptocurrencies.

WebAuth wallet

Twitter ID (not required)

Level 1

Questions in this section will be easier.

Unkown person contacted you over social media, offering opportunity to make money. How do you act?

Describe how do you protect your crypto assets.

How to tell the difference between real and fake social media accounts?

I check number of users

I check if logo is original

I check links to social accounts from official website

Elon Musk tweeted in 2020 about doubling BTC. Explain what happened here? (e.g. fake/cloned account)

Unkown person send you a link to the website, where you can connect your wallet. How do you act?

I visit and connect my wallet

I visit and check if anything is suspicious

I don't open untrusted links, knowing that even by visiting, attacker can infect my computer/phone

There are two Marlons in a Telegram group. How do you spot fake one?

I check his avatar and nickname

I check user list to see his role in a group (creator, admin, mod) and username (@metalpaysyou)

Someone gave you a link to connect wallet. Which one is fake? (You can choose more then one answer!)

https://protonswap.com/

https://protonvvap.com/

https://protonswep.com/

https://protonswap.net/

https://protonswaap.com/

You have an issue with your Webauth wallet and decide to ask on Reddit about it. Someone with account name "offical suppoort" contacts you via chat. What do you do?

I provide them all information

That's very suspicious, I ignore that, knowing about support scams

Wow, you found new giveaway opportunity. The only thing that is required is to connect wallet with unkown website. How do you act?

Without hesitating i connect my wallet and wait for giveaway

I never connect my wallet to unkown and unofficial websites

Is it recommended to back up your private key in Webauth wallet?

No, I can recover it if I lose it

No, support will help me

Yes, if i lose it all my funds will be lost

Can Google ads lead to fake/phishing website? (if yes, you can provide an example)

How to verify the authenticity of application like WebAuth?

Only by visual matching

I check if name of the app is same as it should be

I check if all information match with the one from official website

What is cryptojacking attack?

What is clipboard hijacking attack?

What is the name of attack, where scammers send tiny amounts of coins to users wallets?

Level 2

Questions in this section will be harder.

You received an extortion email, saying that hacker knows all my info. He even proved, by showing one of your passwords. How is that possible? Explain possible ways how he got your password.

You received an email from hello@protonchain.com. How do you analyze if an email is from a real sender? What security protocols are important to consider them?

You received an email showing hello@protonchain.com, but email header shows like from the bottom source. Explain what attacker did here.

"hello@protonchain.com" <marlon@signed-user.com>

You recevied an email attachment (.docx) from unkown person. Can you infect your computer just by opening word document?

No, it is not executable file

Yes, document can contain macro code and it can infect my computer

What are the most common attack vectors for ransomware?

"One single vulnerability is all an attacker needs." – Window Snyder

Proton security quiz

Level 1

Level 2

Ready for Action?

Services

Tools

Other