Port66
04-08-2014, 13:23
TLP: WHITE
CIS CYBER ALERT
TO: ALL MS-ISAC Members and Fusion Centers
DATE ISSUED: 4/4/2014
SUBJECT: Potential for Increased Targeting of Educational Institutions
For your situational awareness, the Center for Internet SecurityUS entity (CIS) is alerting you to a potential increase in targeting of educational institutions by malicious actors.
On April 3, 2014, the hacktivist collective Anonymous announced “OpSafeEdu” targeting educational institutions. The announcement outlines Anonymous’ issues with “lax security on educational websites,” the violation of student’s civil liberties, and abuse of students, specifically mentioning pedophilia. Anonymous does not list specific targets, but does mention the Department of Education. It is highly likely that Anonymous will not distinguish between public and private educational institutions when identifying targets in this operation. Of note, anyone can claim to be a member of Anonymous and anyone, member or not, may suggest targets and operations. Individual participants choose which operations they want to support, currently resulting in numerous operational suggestions and limited activity.
· In March 2014, Anonymous targeted a private university, purportedly to raise awareness about the university’s lack of cyber security. The operation resulted in Anonymous compromising one of the university’s servers and releasing information. Anonymous also attempted to engage individuals at the university, via a phishing email, with the hope they would confirm the breach and the university’s security issues.
In addition to potential Anonymous targeting, CIS observed the following activity regarding educational institutions in 2014:
· Network Time Protocol (NTP) Distributed Denial of Service (DDoS) attacks. (For more information, refer to the CIS Cyber Alert “Increase in NTP DDoS Attacks Targeting Schools” disseminated on March 5, 2014.)
· Website defacements
· Content Management System (CMS) vulnerabilities
RECOMMENDATIONS:
· CIS will continue to monitor for potential threats to SLTT governments and notify entities of potential targeting. However, if you are aware of Anonymous targeting or threats within your jurisdiction, you should report the activity to CIS.
TLP: WHITE
Traffic Light Protocol (TLP): WHITE information may be distributed without restriction, subject to copyright controls.
http://www.us-cert.gov/tlp/ (http://www.us-cert.gov/tlp/)
This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.
. . .
Greetings Citizens of The World.
We Are Anonymous. We are Op Safe Edu
We have watched as YOUR children and their data are made vulnerable by lax security on Educational websites. We will not tolerate this violation of children's information and will punish and expose any school found guilty of security weaknesses within its systems. In the interests of child protection, we will not stop or relent until an acceptable universal standard of security is deployed across all school websites.
We have watched as YOUR children's privacy is eroded and their civil liberties are diluted with the increasing use of biometric scanning. This is an extreme form of grooming. When teachers introduce this theft of children's data as a 'fun new experience' to children of such young ages, it is a breach of their trust and dissolves the child's ability to recognise further invasions and threats to their privacy and civil liberties. We will seek to inform every parent and child they have the right to remain the gatekeepers of their own data and Just Say NO to biometric scanning!
We have watched as YOUR children's boundaries are crossed and further privacy violations occur with the slime ball voyeuristic use of surveillance cameras in toilets and changing areas. This practice is entirely unacceptable and we are already seeing paedophile teachers arrested for viewing such material. Where we find schools that are operating surveillance in areas where the privacy of children must be respected, we, Anonymous will become their nightmare. You may have the cameras on societies vulnerable, but how secure is the Department of Education when we, #Anonymous are watching YOU?
We have watched for some time as the abuse(s) of YOUR children within mainstream Education increase. From vile paedophiles operating in nurseries, upwards to correctional torture schools to children being punished and excluded for mental health conditions, simply being different, individuals and lulz – serious crimes like having a packet of crisps in a lunchbox!
We will not tolerate such ludicracy, discrimination and evil operating and you can expect to find us, Anonymous within your midst wherever such abuses occur.
To the Department of Education, You will begin to understand it was not a good idea to make OUR children vulnerable or to turn schools into regime camps that resemble prisons and that are more conducive with the police state than positive learning environments.
To the people, parents and children, We will fight for the right for every child to be educated in a safe, secure, equal and abuse free environment. We will seek to empower ALL that acquiescence to such boundary crosses are not the only choice, that complicit, compliant and controlled does not have to be the norm and you can take back and keep the power!
We Are Anonymous
We Are Legion
We Do Not Forgive
We Do Not Forget
Op Safe Edu – Engaged.
Expect Us
CIS CYBER ALERT
TO: ALL MS-ISAC Members and Fusion Centers
DATE ISSUED: 4/4/2014
SUBJECT: Potential for Increased Targeting of Educational Institutions
For your situational awareness, the Center for Internet SecurityUS entity (CIS) is alerting you to a potential increase in targeting of educational institutions by malicious actors.
On April 3, 2014, the hacktivist collective Anonymous announced “OpSafeEdu” targeting educational institutions. The announcement outlines Anonymous’ issues with “lax security on educational websites,” the violation of student’s civil liberties, and abuse of students, specifically mentioning pedophilia. Anonymous does not list specific targets, but does mention the Department of Education. It is highly likely that Anonymous will not distinguish between public and private educational institutions when identifying targets in this operation. Of note, anyone can claim to be a member of Anonymous and anyone, member or not, may suggest targets and operations. Individual participants choose which operations they want to support, currently resulting in numerous operational suggestions and limited activity.
· In March 2014, Anonymous targeted a private university, purportedly to raise awareness about the university’s lack of cyber security. The operation resulted in Anonymous compromising one of the university’s servers and releasing information. Anonymous also attempted to engage individuals at the university, via a phishing email, with the hope they would confirm the breach and the university’s security issues.
In addition to potential Anonymous targeting, CIS observed the following activity regarding educational institutions in 2014:
· Network Time Protocol (NTP) Distributed Denial of Service (DDoS) attacks. (For more information, refer to the CIS Cyber Alert “Increase in NTP DDoS Attacks Targeting Schools” disseminated on March 5, 2014.)
· Website defacements
· Content Management System (CMS) vulnerabilities
RECOMMENDATIONS:
· CIS will continue to monitor for potential threats to SLTT governments and notify entities of potential targeting. However, if you are aware of Anonymous targeting or threats within your jurisdiction, you should report the activity to CIS.
TLP: WHITE
Traffic Light Protocol (TLP): WHITE information may be distributed without restriction, subject to copyright controls.
http://www.us-cert.gov/tlp/ (http://www.us-cert.gov/tlp/)
This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.
. . .
Greetings Citizens of The World.
We Are Anonymous. We are Op Safe Edu
We have watched as YOUR children and their data are made vulnerable by lax security on Educational websites. We will not tolerate this violation of children's information and will punish and expose any school found guilty of security weaknesses within its systems. In the interests of child protection, we will not stop or relent until an acceptable universal standard of security is deployed across all school websites.
We have watched as YOUR children's privacy is eroded and their civil liberties are diluted with the increasing use of biometric scanning. This is an extreme form of grooming. When teachers introduce this theft of children's data as a 'fun new experience' to children of such young ages, it is a breach of their trust and dissolves the child's ability to recognise further invasions and threats to their privacy and civil liberties. We will seek to inform every parent and child they have the right to remain the gatekeepers of their own data and Just Say NO to biometric scanning!
We have watched as YOUR children's boundaries are crossed and further privacy violations occur with the slime ball voyeuristic use of surveillance cameras in toilets and changing areas. This practice is entirely unacceptable and we are already seeing paedophile teachers arrested for viewing such material. Where we find schools that are operating surveillance in areas where the privacy of children must be respected, we, Anonymous will become their nightmare. You may have the cameras on societies vulnerable, but how secure is the Department of Education when we, #Anonymous are watching YOU?
We have watched for some time as the abuse(s) of YOUR children within mainstream Education increase. From vile paedophiles operating in nurseries, upwards to correctional torture schools to children being punished and excluded for mental health conditions, simply being different, individuals and lulz – serious crimes like having a packet of crisps in a lunchbox!
We will not tolerate such ludicracy, discrimination and evil operating and you can expect to find us, Anonymous within your midst wherever such abuses occur.
To the Department of Education, You will begin to understand it was not a good idea to make OUR children vulnerable or to turn schools into regime camps that resemble prisons and that are more conducive with the police state than positive learning environments.
To the people, parents and children, We will fight for the right for every child to be educated in a safe, secure, equal and abuse free environment. We will seek to empower ALL that acquiescence to such boundary crosses are not the only choice, that complicit, compliant and controlled does not have to be the norm and you can take back and keep the power!
We Are Anonymous
We Are Legion
We Do Not Forgive
We Do Not Forget
Op Safe Edu – Engaged.
Expect Us