US institutions find network credentials, VPN access advertised for sale online

In the US, the FBI recently issued a warning to universities and colleges that their network credentials and virtual private network access information are being advertised for sale online. The credentials are harvested through a variety of methods – such as spear-phishing tactics and ransomware – and are being sold on online criminal marketplaces and public forums. “Universities, especially, should be providing students and staff with training to spot convincing phishing emails and the steps to undertake when opening various attachments or emails,” said software company CEO Steven Hope. “Students are an easy target, because unlike in a work environment, they often lack the necessary understanding to spot these types of attacks.” FBI| Forbes (USA)| Campus Technology Note: Archived stories may contain dead links or be missing source links.