Cyberattacks hit over 1,000 schools, colleges between June-Sept globally

Spear phishing attacks hit the education sector hard between June and September, affecting more than 1,000 schools, colleges, and universities, according to a global report

Topics
Cyberattacks

IANS  |  New Delhi 

Spear phishing attacks hit the education sector hard between June and September, affecting more than 1,000 schools, colleges, and universities, according to a global report.

Spear phishing is a personalised phishing attack that targets a specific organisation or individual.

Educational institutions are more than twice as vulnerable to a carefully-crafted business email compromise (BEC) attack than an average organisation, said the report by Barracuda Networks, a leading provider of cloud-enabled security solutions.

Using this form of attack, threat actors have taken hold of schools, resulting in devastating losses.

While the scale of attacks dropped by 10-14 per cent during July and August, the number substantially picked up in September, said the report.

"While online teaching and learning is a crucial part of the new normal, it is also important for students and teachers to act mindfully before, during and post the online classes," Murali Urs, Country Manager-India, Barracuda Networks, said in a statement.

"Neither every system has an updated antivirus protection, nor everyone is aware of how to respond to these attacks. Investing in the right cybersecurity solutions along with gaining proper knowledge on prevention methods is, therefore, the need of the hour."

The researchers also highlighted the advent of two more common types of attacks: email scams and service impersonation, against schools between July and September.

The report also revealed that Gmail accounts were the primary medium for cybercriminals to launch the aforementioned attacks - accounting for 86 per cent of all BEC attacks on the education sector.

Cybercriminals prefer to use well-known email providers like Gmail because they are free, easy to register, and have a higher reputation in the market.

They customised malicious email addresses using terms like 'principal', 'head of department', 'school', and 'president' to make them look realistic.

In fact, attackers even used convincing subject lines to quickly grab the victim's attention and thus create a sense of urgency.

Some of them include COVID-19 New Updates, COVID-19 School Meeting, COVID-19 Update, and Follow Up Right Now, among others, said the report.

--IANS

gb/bg

(Only the headline and picture of this report may have been reworked by the Business Standard staff; the rest of the content is auto-generated from a syndicated feed.)

Dear Reader,


Business Standard has always strived hard to provide up-to-date information and commentary on developments that are of interest to you and have wider political and economic implications for the country and the world. Your encouragement and constant feedback on how to improve our offering have only made our resolve and commitment to these ideals stronger. Even during these difficult times arising out of Covid-19, we continue to remain committed to keeping you informed and updated with credible news, authoritative views and incisive commentary on topical issues of relevance.
We, however, have a request.

As we battle the economic impact of the pandemic, we need your support even more, so that we can continue to offer you more quality content. Our subscription model has seen an encouraging response from many of you, who have subscribed to our online content. More subscription to our online content can only help us achieve the goals of offering you even better and more relevant content. We believe in free, fair and credible journalism. Your support through more subscriptions can help us practise the journalism to which we are committed.

Support quality journalism and subscribe to Business Standard.

Digital Editor

Read our full coverage on Cyberattacks
First Published: Fri, October 30 2020. 19:51 IST
RECOMMENDED FOR YOU
RECOMMENDED FOR YOU