{"id":21497,"date":"2023-03-16T16:10:11","date_gmt":"2023-03-17T00:10:11","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2023\/03\/16\/news-15228\/"},"modified":"2023-03-16T16:10:11","modified_gmt":"2023-03-17T00:10:11","slug":"news-15228","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2023\/03\/16\/news-15228\/","title":{"rendered":"Ransomware attack hits ANOTHER school"},"content":{"rendered":"<p>In what is likely&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.malwarebytes.com\/blog\/business\/2023\/01\/5-facts-about-vice-society-the-ransomware-group-wreaking-havoc-on-k-12-schools\" target=\"_blank\">Vice Society&#8217;s handiwork<\/a>, the UK&#8217;s largest state boarding school Wymondham College has announced it has become the victim of a &#8220;sophisticated cyberattack&#8221;. The school didn&#8217;t provide additional information, but Jonathan Taylor, chief of the school&#8217;s parent company Sapientia Education Trust, has revealed the school is yet to receive a ransom note.<\/p>\n<p>In an email to The Record, Taylor&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/therecord.media\/wymondham-college-cyberattack-uk-boarding-school\" target=\"_blank\">said<\/a>:<\/p>\n<blockquote>\n<p>&#8220;We are not aware of any data breach. A number of the College&#8217;s systems have been impacted, including access to some files and resources.&#8221;&nbsp;<\/p>\n<\/blockquote>\n<p>Taylor said the school remains open, saying the priority is &#8220;to ensure continuity of educational provision&#8221;.&nbsp;<em>The Norwich Evening News&nbsp;<\/em><a rel=\"noreferrer noopener\" href=\"https:\/\/www.eveningnews24.co.uk\/news\/23382856.wymondham-college-hit-sophisticated-cyber-attack\/\" target=\"_blank\">reports<\/a>&nbsp;disruption will likely continue until the Easter holidays as the attack targeted the College&#8217;s IT system.<\/p>\n<p>Wymondham College is working with the National Cyber Security Centre (NCSC), the UK&#8217;s authority for cyber incidents, to ensure an appropriate response. Taylor says the Department of Education has also been notified.<\/p>\n<p>The NCSC has&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.ncsc.gov.uk\/news\/alert-targeted-ransomware-attacks-on-uk-education-sector\" target=\"_blank\">warned<\/a>&nbsp;the UK education sector about increasing targeted ransomware attacks toward schools, colleges, and universities.&nbsp;However,&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/national.lgfl.net\/security\/securityaudit\" target=\"_blank\">latest research<\/a>&nbsp;from the London Grid for Learning (LGfL) reveals that only&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.ncsc.gov.uk\/blog-post\/uk-schools-build-cyber-resilience\" target=\"_blank\">53 percent<\/a>&nbsp;of UK schools feel prepared for a cyberattack.&nbsp;<\/p>\n<h2>How to avoid ransomware<\/h2>\n<ul>\n<li><strong>Block common forms of entry<\/strong>. Create a plan for <a href=\"https:\/\/www.malwarebytes.com\/business\/vulnerability-patch-management\">patching vulnerabilities<\/a> in internet-facing systems quickly; disable or <a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2022\/03\/blunting-rdp-brute-force-attacks-with-rate-limiting\">harden remote access<\/a> like RDP and VPNs; use <a href=\"https:\/\/www.malwarebytes.com\/business\/edr\">endpoint security software<\/a> that can detect exploits and malware used to deliver ransomware.<\/li>\n<li><strong>Detect intrusions<\/strong>. Make it harder for intruders to operate inside your organization by segmenting networks and assigning access rights prudently. Use <a href=\"https:\/\/www.malwarebytes.com\/business\/edr\">EDR<\/a> or <a href=\"https:\/\/www.malwarebytes.com\/business\/managed-detection-and-response\">MDR<\/a> to detect unusual activity before an attack occurs.<\/li>\n<li><strong>Stop malicious encryption<\/strong>. Deploy Endpoint Detection and Response software like <a href=\"https:\/\/www.malwarebytes.com\/business\/edr\">Malwarebytes EDR<\/a> that uses multiple different detection techniques to identify ransomware, and ransomware rollback to restore damaged system files.<\/li>\n<li><strong>Create offsite, offline backups<\/strong>. Keep backups offsite and offline, beyond the reach of attackers. Test them regularly to make sure you can restore essential business functions swiftly.<\/li>\n<li><strong>Don&rsquo;t get attacked twice.<\/strong> Once you&#8217;ve isolated the outbreak and stopped the first attack, you must remove every trace of the attackers, their malware, their tools, and their methods of entry, to avoid being attacked again.<\/li>\n<\/ul>\n<hr \/>\n<p>Malwarebytes removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.<\/p>\n<p style=\"text-align: center;\"><span class=\"blue-cta-bttn\" style=\"background-color: #0d3ecc; line-height: 50px; padding: 0 20px;\">TRY NOW<\/span><\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2023\/03\/ransomware-attack-hits-another-school\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<table cellpadding=\"10\">\n<tr>\n<td valign=\"top\" align=\"left\">\n<p>Categories: <a href=\"https:\/\/www.malwarebytes.com\/blog\/category\/news\" rel=\"category tag\">News<\/a><\/p>\n<p>Categories: <a href=\"https:\/\/www.malwarebytes.com\/blog\/category\/ransomware\" rel=\"category tag\">Ransomware<\/a><\/p>\n<p>Tags: Wymondham College<\/p>\n<p>Tags:  ransomware attack<\/p>\n<p>Tags:  ransomware<\/p>\n<p>Tags:  Vice Society<\/p>\n<p>Tags:  National Cyber Security Centre<\/p>\n<p>Tags:  NCSC<\/p>\n<p>Wymondham College is operating as normal, with a few expected distruptions that may be minimal but lasting.<\/p>\n<table width=\"100%\">\n<tr>\n<td align=\"right\">\n<p><b>(<a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2023\/03\/ransomware-attack-hits-another-school\" title=\"Ransomware attack hits ANOTHER school\">Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2023\/03\/ransomware-attack-hits-another-school\">Ransomware attack hits ANOTHER school<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/www.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[23134,23135,32,3765,20486,27461,28880],"class_list":["post-21497","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-national-cyber-security-centre","tag-ncsc","tag-news","tag-ransomware","tag-ransomware-attack","tag-vice-society","tag-wymondham-college"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/21497","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=21497"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/21497\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=21497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=21497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=21497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}