One easy way to get a company’s secrets is to convince people within that company to just hand it over. At the Cyber Lab, these attacks are grouped under “social engineering challenges”, and they most often represent phishing scams. Cyber Lab teaches players how to distinguish between real and scam emails, genuine and imposter websites, and to tell if an offer over the phone is really a trick. One level showed a Google homepage next to an imposter site, and I had to spot the five differences between them before determining which was fake. The old logo, lack of an "https" padlock, and typos on the imposter’s page gave it away, but it was still a great fast lesson in how scammers dress up their schemes as trusted sites.