Malware & Monsters: Players Handbook

Your Guide to Collaborative Cybersecurity Learning

The Malware & Monsters Community

Welcome, Player

“Gotta Catch ’Em All… Before They Catch You!”

The collaborative cybersecurity learning experience where your expertise drives the adventure

About This Handbook

This handbook is your complete guide to participating in Malware & Monsters sessions - engaging, team-based security training experiences that put you at the center of realistic incident response simulation scenarios. Our approach develops security awareness and hands-on cybersecurity skills through collaborative learning experiences.

Whether you’re a seasoned security professional or curious newcomer, you’ll find that Malware & Monsters creates authentic learning through collaborative problem-solving, not lectures or presentations.

Legacy & Contemporary Threats: You’ll encounter both foundational cybersecurity incidents that shaped the field (like Code Red, Stuxnet, and Ghost RAT) and modern threats currently impacting organizations (like LockBit, FakeBat, and WannaCry). This historical perspective helps understand how attack techniques evolved and why certain defenses developed.

What Makes This Different?

Your expertise matters. Unlike traditional training where you passively receive information, Malware & Monsters puts your knowledge, experience, and instincts at the center of every scenario.

Real challenges, safe environment. Face realistic cyber threats in a collaborative setting where mistakes become learning opportunities and diverse perspectives create better solutions.

Team-based discovery. Work with incident response teammates to uncover, analyze, and respond to digital threats - just like you would in the real world.

How to Use This Handbook

If You’re New to Cybersecurity

If You’re an Experienced Practitioner

If You’re Looking for Quick Reference

  • Type Effectiveness Chart - Visual guide to malware type interactions (see handbook resources)
  • Role Quick Reference - At-a-glance role abilities and responsibilities (see handbook resources)
  • Common Game Terms - Definitions and terminology (see shared glossary)

What You’ll Learn

Through Malware & Monsters sessions, you’ll develop:

  • Collaborative incident response skills through realistic team scenarios
  • Technical knowledge about real malware families and attack techniques
  • Communication abilities for explaining technical concepts across disciplines
  • Strategic thinking about cybersecurity from multiple organizational perspectives
  • Confidence in your ability to contribute meaningfully to security teams

The Community Aspect

Malware & Monsters isn’t just a learning activity - it’s a growing community of cybersecurity professionals who believe in:

  • Collaborative learning over competitive individual achievement
  • Practical experience over theoretical knowledge alone
  • Diverse perspectives making everyone more effective
  • Continuous improvement through shared experiences and insights
Ready to Begin?

Each chapter builds naturally on the previous ones, but feel free to explore based on your interests and experience level. The most important thing is to jump in and start collaborating!

Getting Started

Your first Malware & Monsters experience will begin with character creation, where you’ll:

  1. Share your expertise with your teammates
  2. Choose your role based on interests and team needs
  3. Develop your character around your real skills and personality
  4. Face your first incident as a collaborative response team

No preparation required - just bring your curiosity, your experience (whatever level), and your willingness to work as part of a team.


Join the Community

  • Contribute scenarios and Malmon discoveries
  • Share insights from your sessions
  • Connect with other players and incident masters
  • Help grow the collaborative learning network

For community resources and connections, visit: [community website placeholder]

Educational Use Statement

Malware & Monsters is designed for educational purposes. All scenarios are based on publicly available threat intelligence and research. The game does not provide actual malware samples or detailed exploitation techniques that could be misused.