Skip to content
Claim this template

Free course template · Global

Malware and ransomware: How infections spread and what to do

A ready-made course, live deck and two surveys for all employees. AhaSlides tracks progress, completion and scores for you. 30 minutes, 6 lessons. Last reviewed 21 October 2026; not legal advice.

Claim the templatePreview the courseDownload SCORM for your LMS

Free. No credit card. Edit everything.

Course outline at a glance

  • The free font
  • How did it start?
  • Checklist
  • Quiz

  • Common routes
  • What it does
  • Tabs
  • Accordion
  • Sorting activity
  • Matching quiz

  • Habits
  • Backups and updates
  • Process
  • Accordion
  • Scenario
  • Quiz

  • Signs
  • First minutes
  • Accordion
  • Process
  • Sorting activity
  • Multi-select quiz

  • Pressure tactics
  • What would you do?
  • Tabs
  • Scenario
  • Sorting activity
  • Quiz

  • Next steps
  • Process
  • Quiz

Try some questions from the course

Question 1 of 3

What is the most common way an infection starts?

 

Most malware needs a person to run it, often without knowing.

Lesson 1, How infections start, teaches this. See the outline

Question 2 of 3

Why are labels such as "salaries" a warning sign on a found drive?

 

Attackers use curiosity as bait. A tempting label is a reason to be careful.

Lesson 3, Safe habits, teaches this. See the outline

Question 3 of 3

A note on screen says to pay within a day. Who decides what to do about payment?

 

Payment is a serious decision with legal and practical risks. It is never a decision for an individual, and paying does not guarantee the files come back.

Lesson 5, Grey areas: pressure and payment, teaches this. See the outline

Try next questionClaim the template

Learners earn a certificate

Your organisation

Certificate of completion

This certifies that

Alex Morgan

has completed

Malware and ransomware: How infections spread and what to do

Completed on12 October 2026
Sample certificate with a placeholder learner name.

Style 1 of 6: Indigo serif

Everyone who finishes gets a certificate with their name, the course title and the completion date. Add your own logo, colours and signer.

Three pieces that work together

Learners prepare on their own, you answer questions live, and the surveys tell you what stuck. 7 fields to fill in with your own policy, contacts and locations; each one is highlighted inside the course.

Claim the template
The Malware and ransomware: How infections spread and what to do course as a learner first sees it

Completion is tracked for you

Learners sign in to take the course, so every start, finish and score is recorded in AhaSlides. No spreadsheet to keep.

  • Who has finished

    See who has not started, who is in progress and who has completed the course.

  • Every score

    Each learner's answers to the quizzes and activities in the course.

  • What landed

    Survey results show what people took away, and the 30-day check-in shows whether they use it.

Claim the template

6 lessons, about 30 minutes

What learners can do at the end of each lesson. Minutes are an estimate.

  • Lesson 1: How infections start · 6 min

    Before you begin · The free font · How did it start?

  • Lesson 2: Ways in · 5 min

    Common routes · What it does · Check

  • Lesson 3: Safe habits · 5 min

    Habits · Backups and updates · Try it

  • Lesson 4: Spotting the signs · 5 min

    Signs · First minutes · Check

  • Lesson 5: Grey areas: pressure and payment · 5 min

    Pressure tactics · What would you do? · Check

  • Lesson 6: Your checklist and the final assessment · 4 min

    Next steps · Practice

Claim the template

Often taught together

Courses teams often run alongside this one.

Browse all templates (opens in a new tab)

Common questions

Yes. The course, the live deck and both surveys are free. Claiming the template into your AhaSlides account is free too.

Yes. The course is self-paced and online, and the live deck lets you add a live session in the room or online.

At onboarding and in the annual refresher.

All employees, with an IT help desk variant as a note; run by L&D with IT.

Record completion in your own LMS or record system, so you can show who finished the course and when.

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply.

Your own details, each highlighted inside the course:
  • The route for reporting a security incident or suspected breach, and the time limit that applies
  • Link to the list of approved tools and services
  • Link to the next course in your security awareness path
  • Where course completions are recorded
  • Link to the self-paced course
Then edit anything else you like: wording, scenarios, your logo.
Visit the help centre (opens in a new tab)

Ready to run it?

Free. Copy the course, live deck and both surveys into your AhaSlides account in one click.

Claim the template