What is ransomware and how to protect against it

Ransomware is a combination of the words ransom and malware, and malware is a combination of malicious and software. Clear so far? Basically, malware is software containing a virus designed to cause problems to computers, networks and devices such as printers or interactive whiteboards.

The type of malware used in a ransomware attack usually encrypts (locks up) the data held on a network. In school, this could be within any software that sits on the school’s servers (in school) and not in the cloud (online), such as the MIS, payroll software or financial software. Cloud software is also vulnerable to attack but usually via an attack on the supplier and not the school.

Once cybercriminals lock the software and the data it holds, the school cannot access it, and they demand a ransom for it to be released. This ransom can run into thousands or millions of dollars or bitcoin.

How does ransomware enter a school? 

Like burglars, cybercriminals find ways to enter the school network through weaknesses and holes. Understanding where these weaknesses are and patching them up protects the school from attacks.

Five things staff can do to keep the school network protected 

Five ways schools can protect themselves from ransomware

• Train staff in the basics of cyber security, including the NCSC’s cyber security training for school staff, and include training on how to spot phishing emails.
• Install firewalls, configure these appropriately and keep them up to date.
• Change default passwords on all routers, devices and software.
• Apply the latest software updates to all software and devices. If any devices can’t be kept up to date and are still in use, remove them from the network.
• Commission an independent review of your systems, audit your cyber security culture and recommend improvements.

Get in touch to see how we can help protect your school