Incybrix Hosts Cyber Security Awareness & CTF Program at Westminster College

At Incybrix, our commitment to fostering cybersecurity awareness and education is central to our Social Responsibility Policy. On 28th of August, we were excited to organize a comprehensive Cyber Security Awareness & Capture the Flag (CTF) Program at The Westminster College, led by our esteemed representatives Mr. Er. Apil Chand and Mr. Kabir Poudel. This event aimed to provide students with essential cybersecurity knowledge and the opportunity to apply their skills in real-world scenarios.

The program was structured into two engaging parts:

1. 1. Social Engineering Attack Demo & Internet Security Awareness (1.5 hours)
   2. Capture the Flag (CTF) Competition (2 hours)

The first part of the event focused on Social Engineering Attacks, which exploit human psychology to gain unauthorized access to sensitive information. The session began with an overview of key social engineering techniques, such as phishing—deceptive emails designed to trick individuals into disclosing personal information. Vishing, or voice phishing, was also covered, illustrating phone scams that manipulate victims into sharing sensitive data. Spear phishing, a more targeted form of phishing that uses personal details to appear authentic, and baiting, which offers incentives to lure victims into downloading malware or providing private information, were discussed as well.

A live demonstration then showcased a phishing attack scenario, illustrating how attackers create convincing emails that lead victims to malicious websites. This demo emphasized the risks of clicking on untrusted links, which can result in social media credential leakage and potential account takeover. A phishing email simulation was presented, crafted to appear as if it came from a reputable organization, with a deceptive link included. When interacting with this untrusted link, the demo showed how victims could be redirected to a counterfeit login page designed to capture sensitive information like usernames and passwords. This demonstration clearly highlighted the dangers of entering credentials on fake sites, which can lead to social media credential theft and unauthorized access to accounts.

The session continued with practical tips for maintaining internet security. Attendees were encouraged to use strong, unique, and complex passwords, with password managers recommended for secure password storage. The importance of two-factor authentication (2FA) was stressed, adding an extra layer of protection to online accounts. Additionally, participants learned about safe browsing practices, such as identifying secure websites, avoiding risky links, and using VPNs when on public Wi-Fi. Social media safety was also addressed, focusing on managing privacy settings and being cautious about sharing personal information online.

The segment concluded with an interactive Q&A session, where students asked questions and shared their experiences, reinforcing the need for vigilance in maintaining cybersecurity.

The second part of the event featured an Individual Capture the Flag (CTF) Competition, where students independently faced a series of cybersecurity challenges, giving them the chance to apply their knowledge in a practical and competitive setting.

The CTF challenges covered a wide range of cybersecurity topics. In the Web Exploitation category, participants explored vulnerabilities in web applications, learning how to identify and exploit weaknesses in security. Cryptography challenges required solving encryption puzzles, offering insight into cryptographic techniques and methods used to decode encrypted data. OSINT (Open Source Intelligence) tasks involved gathering and analyzing publicly available information to uncover hidden flags, while steganography challenges focused on detecting and extracting hidden information embedded within various files and media. A miscellaneous category included a variety of challenges that tested participants across different cybersecurity concepts, demanding a broad set of skills.

In terms of structure, the competition was designed for individual participation, encouraging each student to work independently and hone their problem-solving and critical thinking abilities. Hints were available for particularly tough problems, but using them incurred a small point penalty, adding a strategic layer to the competition as participants needed to weigh the value of the hint against the loss of points. The competition provided an engaging and hands-on way for students to sharpen their cybersecurity skills.