
All West Midlands Regional Police forces have been alerted to a West Mercia based school whose email system has been compromised by unknown threat actors. After compromise, the threat actors sent an email from the school account containing an attachment, primarily to others in the education sector in an attempt to deceive recipients as to the true nature of the email.
Please make sure your staff are made aware of our training for school staff School E-learning Warwickshire | Cyber Crime Alerts which gives advice and guidance such as Multi-Factor Authentication, strong password security, regular password changes, and securing your systems by putting in place preventative measures which might prevent an attacker from obtaining sensitive data.
If you have already received a malicious e-mail and attachment or an e-mail from an unexpected or suspicious source and opened it and/or any attachment, please inform your IT Department as a matter of urgency and contact Action Fraud and the Information Commissioner’s Office. Your IT department will then be able to undertake work to ensure the security of your IT systems and safeguard sensitive data.
We strongly advise you remind staff around the importance of being vigilant in respect of phishing emails.
We understand the seriousness of this matter, and appreciate your assistance in ensuring the safety of your IT networks.