In this lesson, you will…
Recall the top 5 most common types of cyber attacks affecting schools including: phishing, ransomware, malware, social engineering and DDoS attacks.
INTRODUCTION
Why Cybersecurity Matters in Schools
In today’s digital-first learning environment, schools are more connected than ever. Unfortunately, this also makes them prime targets for cyber attacks.
It's important for school staff to be aware of cyberattacks because schools hold sensitive data about students, staff, and families that can be targeted by cybercriminals.
As cyber threats are becoming more advanced, knowing the threats is the first step toward defending against them.
ACTIVITY READING
Click to expand each section to learn more.
-
Definition: Fake emails, texts, or calls tricking users into clicking links or giving up sensitive information.
Example in Schools: A staff member receives an email that appears to be from the principal asking them to click a link and verify their login credentials.
-
Definition: Malicious software encrypts systems or files, demanding payment for release.
Example in Schools: A district's servers are locked down by ransomware, preventing access to grades, lesson plans, and attendance records.
-
Definition: Malicious code downloaded via fake apps or websites, sometimes hiding in software.
Example in Schools: A student unknowingly downloads a free game infected with malware that spreads across the school’s network.
-
Distributed Denial of Service (DDoS)
Definition: Floods the district’s servers with massive traffic, making systems unusable.
Example in Schools: During exam week, the school’s learning platform becomes inaccessible due to a DDoS attack.
-
Definition: Manipulating people into revealing confidential information through deception and trust exploitation.
Example in Schools: A caller pretending to be from IT support asks a teacher for their login credentials “to fix an urgent issue.”
PAUSE TO PROCESS
Take a moment to recall what you have learnt.
When you are ready, click the button to begin the activity.
REVISITING THE READING
Awareness and Prevention
Now, let’s see how we can prevent these cyber attacks.
Click to expand each section to learn more.
-
Always verify the sender’s email address and avoid clicking links from unknown or suspicious messages.
-
Regularly backup important files and ensure staff understand safe email practices like verifying email addresses and safeguarding personal information.
-
Keep antivirus software up-to-date and avoid downloading unverified software or attachments.
-
Implement network monitoring and DDoS mitigation services.
-
Verify unsolicited requests for information even if they seem urgent, convincing or come from someone you know.
JOIN THE CONVERSATION
Now that you have learnt about the five most common cyberattacks in schools, take a moment to reflect.
Which of these threats do you think poses the greatest risk to your school community and why?
Write two specific actions you can take to help your community prevent vulnerabilities.
Don’t worry if you still have questions, we will dive deeper into risks and prevention later in the course.