Don't Phish Me

home screen
welcome page
sample of game

Inspiration

The rising trend in cyber attacks, particularly phishing scams, inspired us to create "Don't Phish Me". We wanted to provide ways for users to educate themselves and others about cybersecurity in an interactive and engaging way, transforming the mundane task of identifying phishing emails into a captivating game.

What it does

"Don't Phish Me" gamifies the process of distinguishing between phishing emails and legitimate ones. Players progress through different randomized levels, where they must accurately identify and categorize emails to maintain their in-game cybersecurity status and advance.

How we built it

We built the game using React and TailwindCSS for the frontend to create a responsive UI, with a nostalgic 16-bit art style for graphics to evoke a retro gaming vibe with the assistance of AI image generation tools. For the backend, we used Express/Node.js, creating a database of email scenarios that range from obvious phishing attempts to more nuanced and tricky legitimate emails.

Challenges we ran into

One major challenge was designing email scenarios that were realistic yet varied enough to teach users about the wide range of phishing techniques. Balancing difficulty was also tricky; we wanted to challenge users without frustrating them. Additionally, implementing retro graphics in a modern web app required creative CSS styling and image management.

Accomplishments that we're proud of

We're proud of creating an educational tool that's also genuinely fun to play. The positive feedback on the game's ability to raise awareness and improve understanding of cybersecurity has been incredibly rewarding. Furthermore, integrating retro graphics seamlessly into a web application was a significant achievement for our team.

What we learned

Developing "Don't Phish Me" taught us a lot about the importance of user experience design in educational tools. We learned that engagement is key to learning, and games are a powerful medium for education. Technically, we gained experience in game design, particularly in crafting educational content that is both informative and engaging.

What's next for Don't Phish Me

We plan to expand the game with more levels, including scenarios with more sophisticated phishing techniques and adding mobile support to reach a wider audience. We're also exploring the idea of a community-driven platform where users can submit and rate email scenarios, fostering a constantly evolving educational tool.

We have hosted our site at DontPhish.Us