Confidential data of educational institutions is at risk

During monitoring of the Kazakhstani segment of the internet for information security threats, the KZ-CERT Computer Incident Response Team discovered a file server accessible via the SMB (Server Message Block) protocol.

The file server belongs to one of the branches of a foreign educational institution and stores confidential data, including files with student and teacher login credentials for accessing the distance learning system, as well as various internal documents.

The threat is that the discovered files containing logins and passwords in open access may potentially be used by attackers to gain unauthorized access to personal accounts of students and teachers, which could lead to unauthorized modification of information (for example, changes to grades).

Source