Canadian extradited to US for allegedly hacking schools in at least four states
Canadian extradited to US for alleged 2016 school hacking and cryptomining.
Two Canadian nationals have been indicted by the U.S. Department of Justice for a hacking campaign that began in 2016. The suspects allegedly compromised computers in at least four U.S. educational institutions to mine cryptocurrency, using European servers and compromised victim machines to conceal their activities. One suspect has been extradited to the U.S. to face charges, while efforts are underway to extradite the second.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonTwo Canadian nationals exploited vulnerabilities in U.S. educational institutions' computer systems over multiple years, using compromised machines and foreign servers to mine cryptocurrency while evading detection. The extended duration of the campaign — beginning in 2016 — suggests that schools lacked adequate monitoring to detect unauthorized resource consumption or unusual outbound network traffic. Educational institutions are frequently under-resourced for cybersecurity, making them attractive targets for attackers seeking compute power. This case highlights that even non-sensitive targets like schools can be weaponized as infrastructure for financially motivated cybercrime, and that prolonged undetected access causes lasting harm.
What helps against this
How we list vendors- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Network detection and response (NDR)
Attackers moving between systems inside the network get seen.