The cyberattack on the crisis management system at the Cobb County School District last February was caused by a weak password created by an AlertPoint security system worker and not by the school district employee, the police said, according to The Atlanta Journal-Constitution.
"They are still working on this and it's obviously a difficult case to work because they had to track down how the breach occurred," said Sgt. Wayne Delk. Cobb schools officials said employees received a message alerting them of an AlertPoint system "malfunction," which prompted staff members to impose a code red lockdown.
"We do not yet know the motives of those attacking the district's AlertPoint system. However, it appears the crime was committed to disrupt education across the district, create district-wide chaos, and produce anxiety in the district's students, parents, and staff," according to the school district's statement. Delk is encouraging people and business to avoid using weak passwords and to change these often.
Jill Aitoro leads editorial for SC Media, and content strategy for parent company CyberRisk Alliance. She 20 years of experience editing and reporting on technology, business and policy.
Aside from featuring over 40 million signals from the DNS Research Federation's data platform and the Global Anti-Scam Alliance's comprehensive stakeholder network, the Global Signal Exchange will also contain more than 100,000 bad merchant URLs and one million scam signals from Google.
While some threat actors established fraudulent disaster relief websites as part of phishing attacks aimed at exfiltrating financial details and Social Security numbers from individuals seeking aid, others impersonated Federal Emergency Management Agency assistance providers to create fake claims that enabled relief fund and personal data theft.
Malicious GitHub pages and YouTube videos containing links for purported cracked office software, automated trading bots, and game cheats, have been leveraged to facilitate the download of self-extracting password-protected archives.