CyberForge: Phish or Protect

Rules

There will be one round in the event.

Round 1 — Phish or Protect

• Time limit: 60 minutes.
• Phisher may scan only the authorized Target QR codes, select targets, and run a simulated phishing scenario (such as fake registration, certificate verification, or internship confirmation) only through the approved competition platform.
• Defender must observe the approved environment and detect suspicious interactions.
• All simulated forms must contain dummy fields only.
• Defenders should follow the sequence: Detect, Identify, Warn, Prevent, and Report.
• Defenders must explain why an interaction is suspicious. Simply saying “Don't click it” will not earn advice points.
• An incident report must be submitted for every intervention.
• Judges will evaluate performance and submissions. The judges’ decision will be final and binding.
• Only dummy/simulation information may be used. No real credentials, passwords, OTPs, financial information, or private data may be requested or collected.
• Each Phisher and Defender will participate individually without knowing the identity of the opposing participants during gameplay. Participants must not reveal or attempt to discover each other's identities while the game is in progress.

Registration Fee & Prizes

• Registration fee: ₹50 per participant.
• Registration is free for club members.

General Rules

• Participants must report 15 minutes before the reporting time.
• Use of mobile phones is allowed.
• All participants must adhere to ITM University rules and follow the instructions of organizers, judges, and volunteers.
• All phishing, social-engineering, and defensive activities must remain within the approved competition environment.
• Participants must not share or use real passwords, OTPs, banking details, financial information, or other sensitive personal information.
• Participants must not intentionally interfere with, manipulate, or assist another team's target or activity.
• Any attempt to gain an unfair advantage, tamper with competition materials, or access unauthorized information may result in disqualification.
• Participants must maintain professional and respectful conduct.
• All submitted emails, reports, and analysis must be the participants' own work.
• The organizers may stop any interaction that goes outside the approved simulation boundaries.
• In case of a tie, tie-breaker, e.g., faster correct detection will decide the winner.
• Decision of the judges will be final and binding.

Awards

• Best Social Engineering Strategy (Phisher Challenge)
• Best Human Firewall Team (Defender Challenge)
• First Prize: ₹2,100
• Second Prize: ₹1,100
• Third Prize: ₹500