Skip to content
Free · Scenario lab

Phone Hacked Triage Lab: Real Signs or Normal?

Your battery drains, a pop-up says you have viruses and a friend gets a text you never sent. Is the phone hacked, or just a phone? Work through it, make the calls, and see which signs matter. Prefer to read first? Start with the guide to knowing if your phone is hacked.

No download, no card
Template & sample scenario. A fictional rehearsal built on common real-world patterns, not a record of any real organisation, audit or deal. Generated from a PlayCISO template as a starting point: it is not legal, audit, certification, investment or professional advice. Review, adapt and validate it for your organisation before you rely on it.

You are Marcus Lee. Your phone has been acting strangely for a few days: the battery, a pop-up, a text from a friend. Across 11 decisions you sort real warning signs from ordinary phone trouble, check the right things first, and decide when to reset the phone and what to tell Harbour Credit Union. Many of these signs have boring causes, and a few do not. Everything here is fictional. Each call is scored 0 to 10, with the reason based on Apple and Google help pages and FTC guidance.

This is the guided version: a yellow flash shows where to click and a bar says what to do. Switch to Free play any time.

GuidedPress the highlighted Start button. You can edit the names above first, or keep the samples.

Make it yours

Replace the sample names so the scenario and the debrief you export are about your organisation.

TL;DR

What this lab is

5 points
  • A scenario lab: a fictional person's phone shows odd battery drain, pop-ups, an unknown app and texts they did not send. You decide what is a real sign and what is normal.
  • You make 11 scored decisions: weak versus strong signs, fake virus pop-ups, unknown apps, unexpected login codes, who else has access, built-in checks, safe mode, where to change passwords, factory reset and the bank call.
  • It covers both iPhone and Android, and the reasoning follows Apple Support, Google Android Help and FTC guidance, linked from the blog guide.
  • Free to play. You get a final score and grade, a shareable scorecard and next-step links. A downloadable debrief is available with a paid plan.
  • Defensive and educational only. Every person, bank and app is fictional and no real accounts or links appear.

Frequently asked questions

Is this a real phone or real attack?

No. The people, bank and apps are fictional and nothing connects to your phone or accounts.

Does fast battery drain mean my phone is hacked?

Not by itself. Battery wear, a recent update and heavy apps are common causes. It is one clue to weigh with others, such as an app you do not recognise or codes you did not request.

Can a pop-up really tell me my phone has a virus?

A web page cannot scan your phone. Pop-ups claiming to have found viruses are scare tactics. Close the page and do not call any number shown.

When should I factory reset?

When checks leave the phone unexplained or unwanted apps keep returning. Back up your own files first and restore selectively. Google says a reset removes all data from the phone.

How is it scored?

Each decision scores 0 to 10 and the final score is the share of the maximum. Every answer comes with a short reason.

The tools people use most on PlayCISO.

All tools
🖤 Black Friday: new customers get 3 months of Pro for $5, then $5/month. Ends 30 Nov. Claim 3 months for $5 →