Phillip Hay analyzes threats to e-learning. He found that the education sector saw a 87% increase in spam and phishing attacks between March and April 2020 as students shifted to online learning during COVID-19. His recommendations include only using approved school software on school-managed accounts, maintaining online etiquette, and educating students and staff about safe online practices like strong passwords and avoiding suspicious links. Hay warns that cyber attacks will likely continue targeting remote workers and students through increasingly sophisticated social engineering techniques.

1. Potential vulnerabilities to
e-learning - Mimecast
Phillip Hay, Threat intelligence analyst - Mimecast

2. Phillip Hay
Threat Intelligence Analyst - Mimecast

4. Scale of Detected Attacks in Last Month
Detected Attacks on Higher Education
657.71 Detections
6.88 per user
Peak - Saturday 4TH (50623)
Detected Attacks on Government Public Admin
609.44K Detections
4.02 per user
Peak – Thursday 9 Apr (22667)

5. Detected Attacks on Higher Education
Detected Attacks in the last 12 Months
3.95M Detections
41.32 per user
Dec 19
COVID-19

6. Full Time Education at Home
• A change in “traditional ways” of learning for the foreseeable future.
• A new style of school community began as students registered online and in school forums
• New set of opportunities for criminals
What we see:
• Education sector accounts for 2.8% of observed attacks Mar - Apr 2020 ( 87% Spam)
• Increased Phishing Attacks – Data Over Sharing
• Threat Actor Reconnaissance
• Opportunist Attacks
Considerations:
• What access to technology is required?
• What software and features are required?
• Privacy and terms of agreement?
• Who will ensure security and technical support?
• Only use approved software and systems
• How will you communicate with students?

7. Recommendations for e-Learning
• Maintain online etiquette following school or college policies.
• If possible, avoid using social media platforms.
• Staff and students should understand the importance of a strong password
• Only use approved school software with school administered accounts.
• Double-check URLs and Links – If suspicious, do not click!
• Students may be exposed to email for the first time, ensure they know how to use it safely.
• Personal accounts should not be used - Potential compromise and abuse.
• Ensure students and staff understand what being safe online means, talk about it.

8. • Cyber-attacks are highly likely to continue targeting companies,
governments and individuals with:
• Increasingly sophisticated tactics and techniques
• Using progressively more complex social engineering
techniques
• The most vulnerable members of our society will remain
particularly susceptible to attack
• Increased number of people working and schooling from home
increases the attack surface.
• Increased amount of electronic communications, spam and
phishing attempts
Future Concerns

9. Questions?

10. Thank you
Phillip Hay
Threat intelligence analyst -
Mimecast
customerservices@jisc.ac.uk
jisc.ac.uk