The Maze ransomware is behind a series of attacks on schools in the United States. Due to the COVID-19, classes are being held online, so hackers have found a new target.
Last week, Fairfax County Public Schools in Virginia reported a ransomware attack. The Maze gang appears to be behind the attack, after posting a file of stolen data on its leak site. This attack follows other ransomware attacks targeting schools in Toledo, Ohio, and Clark County.
The Maze gang has claimed responsibility for these attacks and has threatened to expose the stolen files if the ransom is not paid.
Last week, another ransomware attack in Hartford, Connecticut, which delayed the start of the new academic year.
Katie Nickels, an executive at security firm Red Canary, said attacks against educational systems are common. However, ransomware attacks at the start of a new school year, which relies on online classes, are causing a lot of problems.
“I am so outraged by these ransomware operators,” she said. “Schools are trying to get back to normal. Teachers and students are already facing enough challenges.”
Nickels also tweeted that there is a "special place in hell for ransomware carriers who attack hospitals or schools."
According to Nickels, schools are an “easy target” for ransomware operators, especially now that education is largely done remotely. Now, hackers have more opportunities to attack. Red Canary said ransomware operators could take advantage of remote learning, as video conferencing platforms like Zoom and Microsoft Teams are being used by students and teachers who were previously unfamiliar with all this technology.
According to StateScoop 's Ransomware Attacks Map , at least 129 schools have been targeted since 2013. Nickels believes ransomware attacks on schools won't stop anytime soon. Hackers are constantly evolving their methods, and authorities need to be prepared to catch the criminals.
“I’m trying to think of a way to put an end to this,” he said. “Stopping cyberattacks is a huge challenge. It takes law enforcement cooperation around the world.”
“There aren’t really international laws or rules about what’s acceptable in cyberspace, but I feel like there should be,” Nickels said.
As we read in StateScoop, the reopening of schools has attracted the attention of hackers. “This shows us that attackers are taking advantage of every opportunity they have,” he added. “They will use it to make money. It is very disturbing to see ransomware attacks on schools right now.”
