Better tricked by us than by them.

Would you spot Jack before he gets into your account?

Jack wants into your phone and your accounts. The demo plays five scams, from “Hi Mum” to a parking meter QR code.

The demo needs no account and sends no data to us or anyone else. It sets no cookies.

Meet Jack, the attacker in this game

Jack wants into your phone and your accounts. Jack's trail starts in 1971, when the program Creeper moved through the ARPANET, a forerunner of the internet. A 2022 Verizon Data Breach Investigations Report found that about 93% of the breaches it studied were about money.

1971 → 1972

In 1972 the program Reaper deleted Creeper, and some call it the first antivirus program.

Slow Shelly still arrives before Jack

Slow as he is, Shelly gets to the scene before Jack does. In 1972 Ray Tomlinson wrote the program Reaper, which tracked Creeper down in the ARPANET and deleted it. Antivirus programs from G Data and McAfee followed in 1987. On 1 January 1991 the BSI, Germany's Federal Office for Information Security, started work in Bonn. Shelly stands for every person who looks a second time.

Shelly: I have been in your way for more than 50 years, Jack, and I am slow but never late.

More than 50 years of attack and defense

1971AttackCreeper moves through the ARPANETSee the source
1972DefenseReaper deletes CreeperSee the source
1988AttackThe Morris worm spreads across the internetSee the source
1988DefenseCERT Coordination Center is foundedSee the source
1991DefenseThe BSI starts work in BonnSee the source
2000AttackThe ILOVEYOU worm arrives by e-mailSee the source
2017AttackWannaCry ransomware attacks computers worldwideSee the source
2019AttackReported AI boss voice: 220,000 euros sentSee the source

Now it is your turn to play one of five stories.

You pick one of four answers and see the outcome at once. With the time limit, a story takes under 90 seconds, and without it, no countdown runs on the answer.

Security warning
Trojan found. All files will be deleted in 04:59
Fake alarm
Based on a real case Play Virus warning in the browser
Unknown number
Hi Mum, it's my new number. I dropped my phone and it broke.
Fake child
Based on a real case Play Hi Mum
Unknown number
Your parcel could not be delivered and goes back to the sender today.
Parcel deadline
Based on a real case Play Parcel text
Bank customer service
Good afternoon, this is the security team of your bank. We have just noticed two suspicious transfers from your account.
Fake bank call
Based on a real case Play Call from the bank
Pay for parking by phone
Scan the code and pay in seconds
Swapped code
Play QR code on the parking meter

Who makes SnappinQuiz and what is ready

The full game is in development, and the demo is the only part you can play.

A team version of SnappinQuiz is in preparation.

Toowoxx IT GmbH in Deisenhausen, Germany makes SnappinQuiz.
Read the legal notice
Hetzner hosts this site on servers in Germany.
Read the privacy policy
The pages set no cookies and the demo sends nothing.
Read the privacy policy
The cases behind the stories have public sources.
Read the sources

You can play the demo again, share it with someone you know, or write to the makers.

Play the demoWrite to the makers