{"id":14311,"date":"2022-09-10T14:42:54","date_gmt":"2022-09-10T14:42:54","guid":{"rendered":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/"},"modified":"2022-09-10T14:42:55","modified_gmt":"2022-09-10T14:42:55","slug":"la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown","status":"publish","type":"post","link":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/","title":{"rendered":"LA school district was warned of ransomware threat before recent shutdown"},"content":{"rendered":"

Source: https:\/\/www.theverge.com\/2022\/9\/9\/23344349\/lausd-warned-ransomware-threat-trickbot<\/a>
\n
<\/br><\/code><\/p>\n

\n

The Los Angeles Unified School District (LAUSD) is now slowly moving back to capacity after a ransomware attack<\/a> launched over Labor Day weekend, which prompted an unprecedented shutdown of computer systems in an attempt to contain the effects of the malicious software. The attack on LAUSD, the second-largest school district in the US, put officials on high alert, with fears over lockouts from school management systems and unauthorized access to student data triggering a response from federal, state, and local partners.<\/p>\n

But it\u2019s not the first time LAUSD systems have been exposed to ransomware \u2014 and not the first warning the district has received about ransomware. The same systems narrowly avoided being hit with another similar attack in February 2021 after a system compromise, as confirmed by Hold Security CEO Alex Holden.<\/p>\n

Holden told The Verge<\/em> that his company discovered a device on LAUSD\u2019s systems that had been compromised by the TrickBot<\/a> banking Trojan, which is able to steal financial credentials from a target system and can also be used to install more damaging malware such as ransomware. (The 2021 intrusion was first highlighted by journalist Jeremy Kirk on Twitter<\/a>.)<\/p>\n

LAUSD was notified through a third party, Holden says, and presumed to have taken action. Soon afterward, the compromised device disappeared from the TrickBot botnet. Holden described the incidents as a \u201cclose call\u201d for the school district, adding, \u201cUnfortunately, this time it turned out differently.\u201d<\/p>\n

LAUSD has a total of more than 600,000 students, meaning the potential impact of the attack is huge. In a press release<\/a> issued on September 7th, the district said that it was still moving toward full operational capacity but had encountered difficulties regaining access to systems.<\/p>\n

On Tuesday, the district said that it had reset more than 53,000 student and employee passwords. But this prudent step also created further problems.<\/p>\n

\u201cWhile the District\u2019s ability to intercept the attack by deactivating all our systems was the swift, decisive and prudent action to avoid a catastrophic breach, the recovery from the disruption has proven more challenging than initially anticipated,\u201d the statement reads. \u201cPassword resets have and remain Los Angeles Unified\u2019s biggest challenge, as students and employees must complete resets at District sites.\u201d<\/p>\n

Despite the password difficulties, LAUSD has still managed to return many other systems to an operational state. Earlier in the week, LAUSD superintendent Alberto Carvalho tweeted that some critical systems had been restored within two hours.<\/p>\n

But experts say that full recovery from such an attack is not something that can be done quickly. Jon Miller, CEO and co-founder of anti-ransomware platform Halcyon, told The Verge<\/em> that even seemingly restored systems can still be vulnerable.<\/p>\n

Attackers often find targets using compromised login credentials, Miller said, or find other ways to bypass security products installed on the network. In some cases, these techniques give hackers persistent access to networks when a fix is attempted.<\/p>\n

\u201cEven if a victim has backups, they will need weeks and months of expensive recovery and incident response that must be completed to ensure the network is safe to run fully again,\u201d he said.<\/p>\n

LAUSD may be one of the largest school districts in the nation, but it\u2019s far from alone in dealing with ransomware attacks. Doug Levin, who maintains a database<\/a> of publicly disclosed school cybersecurity incidents, was able to point The Verge<\/em> to four other school ransomware incidents that had taken place within a month of the LAUSD attack.<\/p>\n

According to Levin, factors that make schools vulnerable range from resource constraints to a failure of school leadership to keep up with digital transformations in the learning environment. But policymakers were also responsible for leaving schools to set their own standards for cyber preparedness.<\/p>\n

\u201cOn the cybersecurity policy side, the needs of school districts for support have been largely overlooked,\u201d Levin said.<\/p>\n

Nonetheless, in the aftermath of the attack, federal officials warned that ransomware attacks on schools may increase<\/a>.<\/p>\n

A joint cybersecurity advisory from the FBI, Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned that federal agencies have \u201cobserved … actors disproportionately targeting the education sector with ransomware attacks.\u201d<\/p>\n

Cyberattacks on schools may increase in the 2022\u20132023 school year as ransomware groups see opportunities for successful attacks, the advisory said, with K-12 institutions being attractive targets due to the amount of sensitive student data they handle.<\/p>\n<\/div>\n


<\/br><\/code><\/p>\n

Source: https:\/\/www.theverge.com\/2022\/9\/9\/23344349\/lausd-warned-ransomware-threat-trickbot<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Source: The Los Angeles Unified School District (LAUSD) is now slowly moving back to capacity after a ransomware attack launched over Labor Day weekend, which prompted an unprecedented shutdown of computer systems in an attempt to contain the effects of the malicious software. The attack on LAUSD, the second-largest school district in the US, put […]<\/p>\n","protected":false},"author":1,"featured_media":14312,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","om_disable_all_campaigns":false,"pagelayer_contact_templates":[],"_pagelayer_content":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[15,8],"tags":[16],"class_list":["post-14311","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-policy","category-technology","tag-policy"],"yoast_head":"\nLA school district was warned of ransomware threat before recent shutdown - Science and Nerds<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LA school district was warned of ransomware threat before recent shutdown - Science and Nerds\" \/>\n<meta property=\"og:description\" content=\"Source: The Los Angeles Unified School District (LAUSD) is now slowly moving back to capacity after a ransomware attack launched over Labor Day weekend, which prompted an unprecedented shutdown of computer systems in an attempt to contain the effects of the malicious software. The attack on LAUSD, the second-largest school district in the US, put […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/\" \/>\n<meta property=\"og:site_name\" content=\"Science and Nerds\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-10T14:42:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-10T14:42:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/\",\"url\":\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/\",\"name\":\"LA school district was warned of ransomware threat before recent shutdown - Science and Nerds\",\"isPartOf\":{\"@id\":\"https:\/\/scienceandnerds.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg?fit=1200%2C628&ssl=1\",\"datePublished\":\"2022-09-10T14:42:54+00:00\",\"dateModified\":\"2022-09-10T14:42:55+00:00\",\"author\":{\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e\"},\"breadcrumb\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg?fit=1200%2C628&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg?fit=1200%2C628&ssl=1\",\"width\":1200,\"height\":628},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/scienceandnerds.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"LA school district was warned of ransomware threat before recent shutdown\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/scienceandnerds.com\/#website\",\"url\":\"https:\/\/scienceandnerds.com\/\",\"name\":\"Science and Nerds\",\"description\":\"My WordPress Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/scienceandnerds.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/scienceandnerds.com\"],\"url\":\"https:\/\/scienceandnerds.com\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LA school district was warned of ransomware threat before recent shutdown - Science and Nerds","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/","og_locale":"en_US","og_type":"article","og_title":"LA school district was warned of ransomware threat before recent shutdown - Science and Nerds","og_description":"Source: The Los Angeles Unified School District (LAUSD) is now slowly moving back to capacity after a ransomware attack launched over Labor Day weekend, which prompted an unprecedented shutdown of computer systems in an attempt to contain the effects of the malicious software. The attack on LAUSD, the second-largest school district in the US, put […]","og_url":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/","og_site_name":"Science and Nerds","article_published_time":"2022-09-10T14:42:54+00:00","article_modified_time":"2022-09-10T14:42:55+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/","url":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/","name":"LA school district was warned of ransomware threat before recent shutdown - Science and Nerds","isPartOf":{"@id":"https:\/\/scienceandnerds.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#primaryimage"},"image":{"@id":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg?fit=1200%2C628&ssl=1","datePublished":"2022-09-10T14:42:54+00:00","dateModified":"2022-09-10T14:42:55+00:00","author":{"@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e"},"breadcrumb":{"@id":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#primaryimage","url":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg?fit=1200%2C628&ssl=1","contentUrl":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg?fit=1200%2C628&ssl=1","width":1200,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/scienceandnerds.com\/2022\/09\/10\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/scienceandnerds.com\/"},{"@type":"ListItem","position":2,"name":"LA school district was warned of ransomware threat before recent shutdown"}]},{"@type":"WebSite","@id":"https:\/\/scienceandnerds.com\/#website","url":"https:\/\/scienceandnerds.com\/","name":"Science and Nerds","description":"My WordPress Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/scienceandnerds.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/scienceandnerds.com"],"url":"https:\/\/scienceandnerds.com\/author\/admin\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/09\/la-school-district-was-warned-of-ransomware-threat-before-recent-shutdown_631ca26f3f4d5.jpeg?fit=1200%2C628&ssl=1","_links":{"self":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/14311"}],"collection":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/comments?post=14311"}],"version-history":[{"count":1,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/14311\/revisions"}],"predecessor-version":[{"id":14313,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/14311\/revisions\/14313"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/media\/14312"}],"wp:attachment":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/media?parent=14311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/categories?post=14311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/tags?post=14311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}