This paper presents an on-line three-dimensional virtual world learning environment that has been developed aiming to contribute to the improvement of Information Security issues awareness. This learning environment simulates a number of information security threat scenarios, presented to users as games, selected by users as the most interesting ones. The environment enables students to experience the risks, be educated about them and combine skills and knowledge to overcome them, without exposing themselves and their data to real risk. This paper provides insight and focuses on the learning process and the learning outcomes of using this three-dimensional virtual world learning environment into a formal university education process for computer engineering students.