K-12 CYBERATTACKS DRAMATICALLY ON THE RISE.
In an alert from the FBI and the Cybersecurity and Infrastructure Security Agency (CISA), officials said that data from the Multi-State Information Sharing and Analysis Center (MS-ISAC) shows that 57 percent of ransomware incidents reported to the MS-ISAC involved K-12 schools, “Unfortunately, K-12 education institutions are continuously bombarded with ransomware attacks, as cybercriminals are aware, they are easy targets because of limited funding and resources”. Cyber-actors will attack ports 445 (SMB) and 3389 (RDP) to gain network access, they then move laterally throughout a network (often using SMB), escalate privileges, access and exfiltrate sensitive information, harvest credentials or deploy a wide variety of malware.
