CS204 Cyber Law Assignment 1 for Fall 2026 is built around a phishing scenario. A university runs an online Learning Management System (LMS) where students log in with usernames and passwords to access lecture notes, assignments, quizzes and examination results. Several students receive suspicious emails claiming to be from the university IT department, asking them to click a link and enter their login credentials to avoid account suspension. Some students click the link and provide their usernames and passwords, and unauthorised individuals then access their LMS accounts and change some personal information. Question 1 asks five questions on this scenario.
The solution file linked below answers all five parts: the attack type, how the attackers gained access, two cybersecurity risks, two preventive measures, and why students must avoid suspicious links.
What Does the Solution File Cover?
What Type of Attack Is This?
The cyberattack is a Phishing Attack. Criminals send fake emails that appear to come from a trusted organization, such as a university IT department, to trick users into sharing personal information and login credentials. The urgency trick matters here: the emails warn of account suspension, which pushes students to act before thinking. Account protection of this kind also appears in the CS507 Assignment 1 solution on access control and multi-factor authentication.
How Did the Attackers Gain Access?
The attackers sent fake emails containing suspicious links and a suspension warning. When students clicked the links, they were redirected to fake login pages that looked like the university official website. Students entered their usernames and passwords, which the attackers collected and then used to access the LMS accounts without permission. Note the chain: the email itself did not break into anything; it harvested credentials, and the stolen credentials opened the accounts.
What Are Two Cybersecurity Risks?
First, personal information theft: attackers may access students personal details and change their information, which can lead to identity theft and privacy violations. Second, unauthorised account access: attackers may misuse LMS accounts to access confidential academic information, modify assignments, or view examination results without permission. Both risks follow directly from the scenario, where personal information was actually changed after the accounts were compromised.
What Two Measures Should the University Implement?
First, Multi-Factor Authentication (MFA): students must provide an additional verification method, such as an authentication code, along with their passwords, so a stolen password alone is not enough to enter an account. Second, cybersecurity awareness training: students must be educated about phishing emails, suspicious links and online security practices so they can recognise and report fraudulent messages. MFA blocks the attack technically, while training blocks it humanly, and the two together are much stronger than either alone. Online account safety also matters for web systems generally, as shown in the IT430 Assignment 1 solution on building secure web storefronts.
Why Should Students Avoid Suspicious Links?
Students should avoid clicking suspicious links because they may lead to fake websites designed to steal login credentials and personal information. Such links may also contain harmful software that can compromise their devices. Students should always verify the sender email address and access the university LMS through its official website instead of using unknown links. Typing the official address manually, or using a saved bookmark, removes the fake page from the path entirely.
How Do You Download the Solution File?
You can download the complete solution file from Google Drive using the link below. Read the five answers in order, since they follow the attack from identification to prevention, and make sure you can explain each step before submitting. Also check your work against the exact assignment file on VULMS, since question wording can vary.
Frequently Asked Questions
What is phishing?
Phishing is a social engineering attack in which criminals impersonate a trusted organization, usually by email, to trick people into revealing credentials or personal information. Fake login pages, urgent warnings and spoofed sender addresses are its classic signs.
How does multi-factor authentication stop phishing?
MFA requires a second factor, such as a code from an authenticator app, in addition to the password. Even if attackers harvest the password through a fake page, they cannot log in without that second factor, so the stolen password alone becomes useless.
How can students spot a phishing email?
Check the sender address carefully instead of trusting the displayed name, look for urgent threats such as suspension warnings, hover over links to see the real destination before clicking, and never enter credentials from an emailed link. When in doubt, open the official site directly and report the message to IT.
What should a student do after clicking a phishing link?
Change the password immediately from the official site, enable multi-factor authentication if available, report the message to the university IT department, and check the account for changed personal details or unfamiliar activity. Fast action limits what attackers can do with stolen credentials.
Last updated: November 2026.
