The Session That Stayed Open

Continue the story

Separate the account risk from the device problem

Part 1 recap: A false support page captured Camila's password. Daniel then noticed an unfamiliar session that was still active.

Understand

Follow the recovery actions in the correct order.

Trace evidence

Decide which problem is technical and which is a security risk.

Notice language

Find embedded questions, instructions and phrasal verbs in context.

Vocabulary preview

Open only the expressions you need

active session

A connection in which an account is currently signed in on a device.

public link

A web address that allows anyone with the link to open shared content.

remove access

Stop a person, device or link from opening an account or file.

back something up

Make a safe copy of digital information.

loose adapter

A connector that is not firmly attached to a device or cable.

up and running

Working normally after a problem or interruption.

Before you continue

What did the attacker probably share?

Choose one prediction, then read the first section.

Reading

3 sections

Section 1 of 3

Regain control

Camila kept the alert open while Daniel explained the next step. In the official app, she could see her phone and one unfamiliar computer. The unknown session had opened her cloud drive and created a public link only minutes earlier.

First, Camila rejected the session. She changed her password, signed out of every other device and turned on two-step verification. When Daniel asked her to look up the recent activity again, no new sign-ins appeared. However, the shared file was still online. Its name was Workshop Registration Update, but Camila had never created it. Inside was another false sign-in link. The account was safer, but the workshop group could still be at risk.

Reading pause: Why is changing the password not enough?

Section 2 of 3

Protect the group

Camila called Elena, the workshop coordinator. “Could you tell me whether anyone has opened the new registration file?” she asked. Elena checked the group chat. Two people had seen it, but nobody had used the link. She immediately warned everyone not to open it.

From the official app, Camila took down the public link and removed the false file. She backed up the real workshop agenda before checking the laptop with Daniel. The security scan found no malware. Next, Camila examined the projector cable and discovered a loose adapter. The connection failure had been a simple hardware problem; the false message was a separate attack that had arrived at the perfect moment.

Reading pause: Which evidence separates the technical problem from the security incident?

Section 3 of 3

Open the doors

The workshop began twenty minutes late. Before Camila turned the laptop's Wi-Fi back on, she installed the pending update and checked the account once more. Every unfamiliar session was gone, two-step verification was active and the shared link no longer worked. After she connected the adapter firmly, the projector was up and running.

Camila changed the opening activity. Instead of beginning with device functions, she showed the group how a real technical problem can make a false support message seem believable. She did not hide her mistake. She explained why people should open official apps independently, check unfamiliar sessions and warn others quickly. The interruption cost twenty minutes, but it gave the workshop a more useful first lesson: knowing how technology works also means knowing when not to trust it.

Final evidence: What shows that Camila turns her mistake into responsible action?

Language detective

Notice how the recovery is explained

“Could you tell me whether anyone has opened the file?”

Why this word order?

The embedded question uses statement order after the polite opener: subject before verb.

She changed her password, signed out and turned on verification.

What does the sequence show?

The past-tense action chain presents the recovery in a clear chronological order.

Camila looked up the activity, took down the link and backed up the agenda.

What do the phrasal verbs mean?

They mean examine information, remove something from public access and create a safe copy.

The projector was up and running.

Literal or idiomatic?

This fixed expression means the device was working normally again.

Reading check

Answer with evidence from Part 2

1. What had the unfamiliar session done?

It repaired the projector connection. It created a public link from Camila's cloud drive. It installed two-step verification.

2. Why was changing the password not enough?

The new password stopped the projector. Daniel did not know the new password. The dangerous shared link was still online.

3. How does Elena protect the workshop group?

She warns them before anyone uses the link. She asks them to test the false page. She cancels the workshop without explanation.

4. Which evidence shows that the projector problem was separate?

The attacker knew the workshop time. A loose adapter caused it and the scan found no malware. The account alert appeared on Camila's phone.

5. What does took down the public link mean?

Copied the link into a notebook Sent the link to Daniel Removed the link from public access

6. What does Camila do before turning Wi-Fi back on?

She installs the update and checks the account. She opens the false registration form. She removes two-step verification.

7. Which action best shows responsibility?

She hides why the workshop began late. She explains the mistake and teaches the safety lesson. She blames the loose adapter for the false file.

8. What is the best summary of Part 2?

Daniel remotely repairs every workshop device. The projector problem causes the account attack. Camila secures the account, protects others and separates two different problems.

This reading check stays on this page. It is not submitted and does not affect Grades.

Story complete

From warning to responsible action

You followed the incident from the false support message to the workshop's safer opening.

Return to Unit 3 activities Listen to Part 1 again