Topic Library — Hackers (Year 1 Foundations)

School: Minister Destiny Testimony Schools Track: Adult Class: Topic Library — Year 1 (Foundations) Presented by: Minister Destiny Marie Morgan, Muslim Ordained Minister

This lesson is educational information and is not legal advice. Laws and agency procedures vary by state and by case. If someone is in danger right now, call 911. If you have a real case, talk to a lawyer — legal aid organizations help many people for free or at low cost.

Before you start

• This school never asks your name. Your progress is saved only in your own browser on this device — the school collects and keeps nothing. If you pass this unit's quiz (80% or higher, retakes allowed), you earn a downloadable certificate with a blank line — you write your own name on it after you save it. Quiz answers are not shown; if you miss a question, re-read the lesson and try again.
• A note on what this unit is and is not: it explains hackers the way good public alerts and civics lessons do — who they are, what their attacks look like from the victim's side, why targets are chosen, what the law says in general, and how defenders do their work. It contains no instructions, techniques, or tools for breaking into anything. Understanding the weather is not the same as learning to make storms.

The lesson

Part 1. What a Hacker Is — and Is Not

The word "hacker" carries two very different meanings, and sorting them out is this unit's foundation.

In its older, technical sense, a hacker is simply someone deeply skilled at understanding computer systems — how they work, where their limits are. That skill itself is neutral, like skill with locks or finance. Everything depends on permission and purpose.

A criminal hacker is a person who accesses systems, accounts, or data without authorization — to steal money or information, to spy, to disrupt, to extort, or to use other people's computers as tools. When news reports say "hackers breached a company," this is the meaning in play. Criminal hacking is not a personality type; many operations are run like businesses, with shifts, scripts, and specialists for each stage.

A security researcher — often called an ethical hacker — uses the same family of skills with authorization: hired or invited by organizations to probe their own defenses under agreed rules, so weaknesses are found and fixed by the owners before criminals find them. Researchers also discover flaws independently and report them to the maker through channels companies maintain for exactly that purpose. The bright line between the two figures is not talent, curiosity, or tools. It is consent: the researcher works on systems they own or are authorized to test, and discloses what they find to the owner.

Discard the movie version in both directions: the criminal is rarely a lone genius, and the researcher is not a movie hero either — both are mostly methodical people running known plays. What separates them is permission, not talent.

Part 2. Common Attack Patterns, in Plain Words

Described at alert level — what the attack looks like to its target, never how to perform one:

• Phishing. Fake messages impersonating trusted institutions, luring people to fake sites or into revealing codes and passwords. It remains the front door of most intrusions, because it attacks the person, not the machine — see the Awareness unit for its full anatomy.
• Credential reuse. Passwords stolen from one breached service are tried automatically against many others. No new "hacking" occurs at your account at all — the criminal simply logs in with a key you cut twice.
• Malware. Harmful software — delivered through attachments, downloads, fake updates, and compromised sites — that can steal information, spy, or give an attacker control of a device. Your defenses are behavioral: updates, caution with unexpected files and links, reputable security software, and never installing what a stranger's message instructs.
• Ransomware. A form of malware that locks an organization or person out of their own files and systems and demands payment for their return. It has closed hospitals' systems, schools, and city services for days. Public guidance is consistent: prevention runs through updates and — decisively — current backups kept separate, which is why the Awareness unit treats backups as a first-class habit. Victims are urged to report to ic3.gov; paying, authorities warn, rarely guarantees recovery and funds the industry.
• Exploiting unpatched flaws. When makers publish a security update, they effectively announce a flaw existed. Attackers race to find systems whose owners haven't applied the fix. Yesterday's update notice is today's map for criminals — the entire reason "install updates promptly" appears in every unit.
• Impersonation and insider help. Some intrusions begin with a phone call to an employee, a fake IT request, or a bribed or coerced insider. Technology fails last in these stories; trust fails first.

Notice what this list does not contain: magic. Every pattern here leans on a human-scale weakness — a reused password, a skipped update, a moment of manufactured urgency, an unexamined trust. That is the hopeful fact at the center of this unit: ordinary habits close the doors real attacks actually use.

Part 3. Why Homes, Businesses, and Public Systems Get Targeted

Targets are chosen for return on effort, and the returns come in a few currencies:

• Money, directly: bank and payment access, payroll diversion, ransom payments, fraud against customers whose data was harvested.
• Data itself: personal information — names paired with identifiers, health and financial records — is sold and reused for identity theft, targeted scams, and further intrusions. A small office's files can be worth as much per record as a giant's; attackers shop by softness, not size.
• Access as a stepping stone: a home computer conscripted into a network that attacks others; a small vendor whose login opens a big client; your email account, used to reset everything else and impersonate you.
• Disruption and pressure: hospitals, schools, utilities, and local governments are targeted partly because downtime hurts publicly and immediately, raising pressure to pay. The victim is chosen for how much the community needs it back.
• Ideas and advantage: research, designs, and negotiations are targets for espionage by sophisticated, sometimes state-backed actors.

Hold onto the through-line: small and local is not protection, and big and famous is not immunity. Attackers sort the world by softness and value. The defense is the same at every scale — patched, backed up, uniquely passworded, and skeptical at the moment of pressure.

Part 4. Warning Signs an Account or Device Has Been Touched

Compromise announces itself quietly. Learn the tells, and teach them to your household:

• Account tells: password or account details changed without you; sign-in alerts from places or devices you don't recognize; messages sent from your account that you didn't write; friends asking about strange requests "you" made; money, orders, or settings you cannot explain.
• Device tells: sudden slowness or crashes; programs or extensions you never installed; settings — especially security settings — changed on their own; pop-ups that persist outside the browser; a device running hot while idle.
• Absence tells, the subtle kind: expected security alerts or statements stop arriving; you are locked out of accounts you didn't change; recovery emails or phone numbers on accounts are no longer yours.

Any one tell can have an innocent explanation. Two together are a working assumption of compromise — and the response is the Awareness unit's Part 6, in order: contain from the real site (passwords changed, email first; two-factor authentication on; other sessions ended), protect money through your bank's real number, preserve what you can of the evidence, report at ic3.gov and ftc.gov, and warn your contacts, who are now the attacker's next target list. Do not wipe or "start over" in a panic before preserving what can be saved — and do not let shame delay the first hour, when containment is cheapest.

And learn one second-wave caution: after a real incident becomes known, victims are often contacted again — fake "recovery services," fake support callers, fake investigators — by the same or copycat criminals. Treat every post-incident approach as suspect until verified through channels from before the incident.

Part 5. The Law in General and Careers in Defense

The law, in general terms. Accessing computers, accounts, or data without authorization is a crime under federal law in the United States and under the laws of the states, and related conduct — wire fraud, identity theft, extortion — carries its own serious offenses. Penalties depend on the conduct, the damage, and the person's history, and they can include substantial prison time and restitution; this lesson states no specifics because specifics vary and change. What matters here: "I was curious," "the security was weak," "everyone does it," and "I didn't take anything" are not recognized shields — authorization is the line the law watches, exactly the consent line from Part 1. Young people especially should hear this plainly: skills and curiosity are assets with a lawful, well-paid market — and the same acts done without permission can end that future before it starts. Anyone facing real questions about a real situation needs a lawyer, not a lesson.

Careers in defense. The defending side is one of the economy's great open doors, and it is wider than the stereotypes: security analysts who monitor and respond; system and network administrators who build things correctly in the first place; specialists who test defenses with authorization; people who design awareness training; incident responders; digital investigators who support law enforcement; and policy and compliance professionals. Entry routes include degrees, community-college programs, industry certifications, military service, apprenticeships, and self-teaching backed by lawful practice environments that educators provide for exactly that purpose. The character traits the field hires for are the ones this school practices: honesty about errors, calm in incidents, precise documentation, and respect for authorization.

If a learner in your life lights up at this subject — the puzzle of how systems work — feed that spark deliberately toward the consent side of the line: school programs, lawful practice environments, mentors in defense work. Curiosity aimed at permission becomes a career; curiosity left to wander can become a record.

Part 6. Protecting Yourself and Helping After an Incident

Everything in this unit converges on a short standing practice:

1. Run the Awareness habits as your default — unique passphrases or a manager, two-factor authentication, prompt updates, verified backups, the stop-and-verify response to pressure. You now know why each works: it closes a named attack pattern.
2. Keep the household informed. Family members who can name phishing, the code rule, and the warning signs are a defense no product sells. Elders and teens are the most-targeted — and the most-teachable.
3. When an incident happens, be the neighbor this library describes: believe the victim, skip the blame, help with the contain–report–recover order, and share the warning — factually — with your circle, because the same operation is working your street this week.
4. Report as a civic act. ic3.gov and ftc.gov reports are how the patterns behind your incident get mapped, warned about, and prosecuted. The person who reports protects strangers they will never meet.
5. Support the defenders' ecosystem: choose services that take security seriously, install their updates, answer their breach notices promptly, and — in your workplaces and community organizations — treat the person asking for a security budget or a backup system as the adult in the room.

So the unit ends where it began, with the balanced verdict: hackers, as a word, describes skill; criminals and defenders describe choices. The difference was never the keyboard. It is permission, purpose, and what a person does with what they find.

Words to know — Hackers

• Hacker — a person deeply skilled with computer systems; the word alone says nothing about legality — permission decides that.
• Criminal hacker — a person who accesses systems, accounts, or data without authorization, to steal, spy, disrupt, or extort.
• Security researcher — a skilled specialist who, with authorization or through responsible reporting channels, finds weaknesses so owners can fix them.
• Ethical hacker — another name for an authorized tester of defenses; works under agreed rules for the owner.
• Malware — harmful software designed to steal information, spy, damage, or seize control of a device.
• Ransomware — malware that locks victims out of their files or systems and demands payment for their return.
• Data breach — an incident in which stored information is stolen or exposed from a system's holder.
• Vulnerability — a weakness in software, hardware, or practice that an attacker could use to gain access.
• Patch — a maker's fix for a vulnerability, delivered as an update; unpatched systems remain open.
• Defender — any professional who prevents, detects, and responds to attacks — analysts, administrators, testers, responders.

Myths vs facts — Hackers

• Myth: Hackers are lone geniuses breaking in live, keystroke by keystroke. Fact: Most intrusions are industrial and patient — reused passwords, unpatched systems, and convincing messages, run at scale.
• Myth: Small organizations and ordinary people aren't worth attacking. Fact: Selection is automated and opportunistic; attackers shop by softness, not fame. Data, access, and ransom pressure exist at every size.
• Myth: Paying a ransom reliably gets everything back and ends the matter. Fact: Public guidance warns payment guarantees nothing and funds the industry. Backups are the real ransom-proofing.
• Myth: Ethical hackers and criminal hackers are separated by skill level. Fact: They are separated by consent — authorization and disclosure to the owner.

Think it through — Hackers

Over a weekend, a small dental practice in town — two dentists, six staff — finds its scheduling and records system locked, with a message demanding payment to restore it. The office manager, Tanya, tells a friend, "We're tiny. Why would hackers bother with us? And the IT fellow we use says paying quietly might be fastest." The practice has backups, but no one has checked them in over a year. What does this lesson say to Tanya?

Walk it through: (1) Correct the size myth with Part 3: the practice was not chosen for its fame but for its softness and its data — health and personal records are valuable per record, and a practice that cannot schedule or bill is under immediate pressure to pay, which is itself a selection criterion. Defense, not obscurity, is the shield. (2) Name the attack from Part 2: ransomware, most likely delivered through phishing or an unpatched opening — the investigation will determine which, and that determination matters for what must be fixed before systems return. (3) Answer the "pay quietly" suggestion with the lesson's guidance: authorities consistently warn that payment guarantees no restoration, funds the operation, and marks the payer; the practice should be reporting to ic3.gov and working with law enforcement and qualified professionals it chooses itself. (4) Face the backup fact honestly: an unchecked year-old backup is the unit's exact cautionary tale — backups must be current, separate, and verified, and whatever state theirs are in now decides how hard the recovery is. (5) Look forward with Part 5's lens: when the practice rebuilds — updates enforced, unique credentials, two-factor authentication, tested backups, staff who can smell phishing — it becomes a hard door on its street.

Try this — Hackers

• ☐ I can explain, in plain words, the difference between a criminal hacker and a security researcher — and name the line between them: consent.
• ☐ I can name the common attack patterns — phishing, credential reuse, malware, ransomware, unpatched flaws, impersonation.
• ☐ I have checked that my important accounts would survive one password leaking: unique passphrases plus two-factor authentication.
• ☐ I have verified — not just assumed — that my backups are current, by checking the latest backup date.
• ☐ I know the incident order: contain (email first), protect money, preserve evidence, report, warn my contacts.
• ☐ If a young person I know loves this subject, I can point them to the consent side: school programs, mentors, and lawful practice.

Resources to keep — Hackers

• 911 — if an incident involves threats to safety or a crime in progress.
• FBI Internet Crime Complaint Center — ic3.gov — report intrusions, ransomware, and internet crime.
• Cybersecurity & Infrastructure Security Agency — cisa.gov — public guidance including ransomware response resources.
• Federal Trade Commission — ftc.gov — report fraud and identity theft.
• Consumer Financial Protection Bureau — consumerfinance.gov — protecting money and accounts after credentials are taken.
• 988 Suicide & Crisis Lifeline — call or text 988 — when an incident becomes a personal crisis.

What you earned / what's next — Hackers

✅ Topic Library — Hackers complete (quiz score 80% or higher): You can define hacker by permission rather than by myth, describe the common attack patterns and the habits that close them, explain why targets of every size are chosen, spot the warning signs of compromise, and point curiosity toward the defended side of the field.

Your certificate

Minister Destiny Testimony Schools Certificate of Completion — Topic Library: Hackers

This certificate is presented by Muslim Ordained Minister Destiny Marie Morgan

Awarded to: ______________________________ (write your name here after you download — your name is never collected or stored by this school)

Date completed: ______________

Congratulations. You can see the digital weather clearly now — the patterns, the pressure, and the quiet habits that hold the roof. Stand on the consent side of the line. — Minister Destiny Marie Morgan

This is a certificate of educational completion from Minister Destiny Testimony Schools. It is not a state license, a government certification, or legal training for representing anyone.

What's next: You have completed the Fraud & Digital Safety cluster of the Topic Library — carry its habits into every other unit: verify, document, report, and protect each other.

Sources

• ic3.gov — FBI Internet Crime Complaint Center, annual Internet Crime Reports and alerts
• cisa.gov — Cybersecurity & Infrastructure Security Agency, "StopRansomware Guide"
• ftc.gov — Federal Trade Commission, "How to Recognize and Avoid Phishing Scams"

Minister Destiny Testimony Schools — Adult. Educational information only, not legal advice. Help lines: 911 in an emergency · 988 Suicide & Crisis Lifeline (call/text 988).