Educational Establishments Targeted as New Term Begins

Whilst no individual or organisation is ever safe from attack we are seeing schools and universities being hit hard as the new term begins and they open their virtual and physical doors to students. This may be as a result of malicious activity that has been taking place over the past several months and this is the opportune moment to inflict most damage/pressure or may just be a growing coincidence.

Review Phils 20 questions blog, ensure patching is up to date, backup regularly, use strong passwords and 2FA, Quad9 and deploy DMARC on your school domain if you can. All this is free to implement - support is available. Other suggestions and recommendations welcome!

K12 Schools Targetted by Maze Ransomware: https://statescoop.com/schools-maze-ransomware-k12-easy-target/

Newcastle University Cyber Attack FAQs (Ransomware): https://www.ncl.ac.uk/itservice/latest-news/faqs/

And in the UK NCSC have issued an alert and excellent guidance: https://www.ncsc.gov.uk/news/alert-issued-following-rising-attacks-on-uk-academia

NCSC (UK) has updated alert (23 March) following continued targeting with ransomware:
https://www.ncsc.gov.uk/news/support-for-uk-education-sector-after-growth-in-cyber-attacks

https://www.ncsc.gov.uk/news/alert-targeted-ransomware-attacks-on-uk-education-sector