en en id en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en fr en en en en en en en en en en en en es en en en en en en en en en en en en en en en en en en en en
The FBI recently issued a Flash Alert warning higher education institutions, K-12 schools, and seminaries about increasing numbers of ransomware attacks affecting the education industry. According to the warning, “Since March 2020, the FBI has become aware of PYSA ransomware attacks against US and foreign government entities, educational institutions, private companies, and the healthcare sector by unidentified cyber actors.”
The ransomware attacks are initiated by gaining unauthorized access to networks either by exploiting Remote Desktop Protocol (RDP) credentials or phishing. The PYSA ransomware then extracts sensitive information and encrypts files with the .pysa extension. In some circumstances, the attackers sell the extracted information on the dark web. The FBI reports that some criminals also remove the malicious files after deployment, thus making it even more difficult for the victims to discover what has happened.
The FBI does not recommend paying any ransom as that emboldens and encourages more criminal conduct. Acknowledging that many educational institutions might choose to pay after determining few other options exist, the FBI points out that there is no guarantee paying any ransom will result in the return of the data.
The FBI also suggests schools implement mitigation steps as follows:
Regularly back up data, air gap, and password protect backup copies offline. Ensure copies of critical data are not accessible for modification or deletion from the system where the data resides.
Implement a recovery plan to maintain and retain multiple copies of sensitive or proprietary data and servers in a physically separate, segmented, secure location (i.e., hard drive, storage device, the cloud).
Use multifactor authentication where possible.
Regularly, change passwords to network systems and accounts, and avoid reusing passwords for different accounts. Implement the shortest acceptable timeframe for password changes.
Disable unused remote access/RDP ports and monitor remote access/RDP logs.
Audit user accounts with administrative privileges and configure access controls with least privilege in mind.
Install and regularly update anti-virus and anti-malware software on all hosts.
Only use secure networks and avoid using public Wi-Fi networks. Consider installing and using a VPN.
Consider adding an email banner to messages coming from outside your organizations.
Disable hyperlinks in received emails.
Focus on awareness and training. Provide users with training on information security principles and techniques as well as overall emerging cybersecurity risks and vulnerabilities (i.e., ransomware and phishing scams).
Tags: FBI, k-12, PYSA, ransomware, RDP, Remote Desktop Protocol, schools
Email this postTweet this postLike this postShare this post on LinkedIn
Kate Dion’s practice includes all aspects of civil and criminal litigation. She represents clients in complex commercial litigation, including allegations of patent infringement, breach of contract, misappropriation of trade secrets, unfair trade practices, tortious interference with business relations, and other business torts. Her…
Kate Dion’s practice includes all aspects of civil and criminal litigation. She represents clients in complex commercial litigation, including allegations of patent infringement, breach of contract, misappropriation of trade secrets, unfair trade practices, tortious interference with business relations, and other business torts. Her experience also includes counseling clients in government investigations, internal investigations, and white-collar criminal matters. In addition, she represents institutional clients and individuals in probate litigation. Read her rc.com bio here.
Read more about Kathleen Dion
Show more Show less
FBI Issues Notice to Health Industry Highlighting Risks of Unpatched Medical Devices
Password Manager LastPass Admits to Hack
Acronis Reports Ransomware Damages Will Exceed $30B by 2023
Follow us on Twitter Follow us on Twitter
Follow Us on Facebook Follow Us on Facebook
View Our Linkedin Profile View Our Linkedin Profile
Data Privacy + Cybersecurity Insider
Follow us on Twitter Follow Us on Facebook View Our Linkedin Profile RSS
Robinson+Cole is a law firm serving regional, national and global clients from nine offices throughout the Northeast. Our Data Privacy + Security Team brings together lawyers from the firm’s Intellectual Property and Technology, Commercial Litigation, and E-Commerce Groups.
Topics Select Category Artificial Intelligence Autonomous Machines Autonomous Systems Autonomous Vehicles Blockchain Cannabis CCPA Children’s Privacy Coronavirus Cybersecurity Data Breach Data Privacy Data Security Digital Assets Drone Privacy Drones e-Discovery Enforcement + Litigation Events Geolocation Guest Posts Health Information Privacy HIPAA and Health Information Information Governance Insurance Coverage International Privacy Laws Internet of Things Mergers & Acquisitions New + Now Privacy Tips Public-Private Partnerships with Cyber Security Safe Harbor Social Media State Laws Relating to Data Telehealth Telephone Consumer Protection Act Uncategorized Virtual Currency Websites
Archives Select Month September 2022 August 2022 July 2022 June 2022 May 2022 April 2022 March 2022 February 2022 January 2022 December 2021 November 2021 October 2021 September 2021 August 2021 July 2021 June 2021 May 2021 April 2021 March 2021 February 2021 January 2021 December 2020 November 2020 October 2020 September 2020 August 2020 July 2020 June 2020 May 2020 April 2020 March 2020 February 2020 January 2020 December 2019 November 2019 October 2019 September 2019 August 2019 July 2019 June 2019 May 2019 April 2019 March 2019 February 2019 January 2019 December 2018 November 2018 October 2018 September 2018 August 2018 July 2018 June 2018 May 2018 April 2018 March 2018 February 2018 January 2018 December 2017 November 2017 October 2017 September 2017 August 2017 July 2017 June 2017 May 2017 April 2017 March 2017 February 2017 January 2017 December 2016 November 2016 October 2016 September 2016 August 2016 July 2016 June 2016 May 2016 April 2016 March 2016 February 2016 January 2016 December 2015 November 2015 October 2015 September 2015 August 2015 July 2015 June 2015 May 2015 April 2015 March 2015