Security News > 2021 > April > High numbers of schools hit by phishing, account compromise and ransomware attacks
Most educational organizations experienced phishing attempts, while 33% were victims of an account compromise attack, and 27% were hit by ransomware in 2020, according to a new report from cybersecurity vendor Netwrix.
Fewer than half of non-education sector organizations experienced the same level of attack.
Of the educational organizations that experienced a ransomware attack, 49% said the attack went unnoticed for days, 19% said hours, and 32% said it took them just minutes to discover the attack.
Over a quarter of organizations said it took days to uncover an account compromise attack, 54% said hours, and 18% said they uncovered attacks in minutes.
About half of the organizations reported that understaffing, a lack of experienced staff, and/or not enough budget made them vulnerable to attacks.
"Because educational institutions are understaffed and lack funding for sufficient training, the sector struggles to adequately respond to the ever-changing cyber threat landscape. With IT teams forced to be reactive instead of proactive towards security, the current wave of PYSA ransomware attacks can easily lead to breaches," said Ilia Sotnikov, Netwrix's vice president of product management.
News URL
Related news
- Australian Organisations Targeted by Phishing Attacks Disguised as Atlassian (source)
- Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts (source)
- JPCERT shares Windows Event Log tips to detect ransomware attacks (source)
- Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials (source)
- Ransomware attack forces UMC Health System to divert some patients (source)
- DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks (source)
- Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks (source)
- Underground ransomware claims attack on Casio, leaks stolen data (source)
- Casio confirms customer data stolen in a ransomware attack (source)
- GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks (source)