[aisle] Fwd: (U) 'Zoombombing': FBI warns of teleconferencing, online classroom hijacking during COVID-19 pandemic

Mon Mar 30 16:18:04 CDT 2020

My superintendent forwarded this to us today.  Some people have to ruin
even the best of things...

---------- Forwarded message ---------
From: Adam Dean <adean at triopiacusd27.org>
Date: Mon, Mar 30, 2020 at 3:28 PM
Subject: Fwd: (U) 'Zoombombing': FBI warns of teleconferencing, online
classroom hijacking during COVID-19 pandemic
To: <triopiags at triopiacusd27.org>, <supportstaff at triopiacusd27.org>, <
TriopiaJHHS at triopiacusd27.org>

All:

See online teleconferencing recommendations are below.  Thanks.

---------- Forwarded message ---------
From: Ray, Maria <Maria.Ray at illinois.gov>
Date: Mon, Mar 30, 2020 at 3:23 PM
Subject: (U) 'Zoombombing': FBI warns of teleconferencing, online classroom
hijacking during COVID-19 pandemic
To: <adean at triopiacusd27.org>

For the School Safety Information Sharing program. This is open source,
feel free to share.

*FBI warns of teleconferencing, online classroom hijacking during COVID-19
pandemic (March 30, 2020)*

*Two schools in Massachusetts have reported incidents involving hijackers
entering online learning during the coronavirus, COVID-19 pandemic.*

https://www.newscentermaine.com/article/news/health/coronavirus/fbi-warns-of-teleconferencing-online-classroom-hijacking-during-covid-19-pandemic/97-e6946c14-74d6-4fef-aaa1-6d1f58aa20e4

In the wake of the COVID-19 crisis, many people are turning to
video-teleconferencing (VTC) platforms to stay connected.

The FBI has received multiple reports of conferences being disrupted by
pornographic and/or hate images, and threatening language. Reports of VTC
hijacking (also called “Zoom-bombing”) are emerging nationwide.

Within the FBI Boston Division’s Area of Responsibility (AOR) which
includes Maine, Massachusetts, New Hampshire, and Rhode Island, two schools
in Massachusetts reported the following incidents:

   - In late March 2020, a Massachusetts-based high school reported that,
   while a teacher was conducting an online class using the teleconferencing
   software Zoom, an unidentified individual(s) dialed into the classroom.
   This individual yelled a profanity and then shouted the teacher’s home
   address in the middle of instruction.
   - A second Massachusetts-based school reported a Zoom meeting being
   accessed by an unidentified individual. In this incident, the individual
   was visible on the video camera and displayed swastika tattoos.

As individuals continue the transition to online lessons and meetings, the
FBI recommends exercising due diligence and caution in your cybersecurity
efforts.

*The following steps can be taken to mitigate teleconference hijacking
threats:*

   1. *Do not make meetings or classrooms public.* In Zoom, there are two
   options to make a meeting private; require a meeting password or use the
   waiting room feature and control the admittance of guests.
   2. *Do not share a link to a teleconference or classroom on an
   unrestricted publicly available social media post.* Provide the link
   directly to specific people.
   3. *Manage screensharing options.* In Zoom, change screensharing to
   “Host Only.”
   4. *Ensure users are using the updated version of remote access/meeting
   applications.* In January 2020, Zoom updated their software. In their
   security update, the teleconference software provider added passwords by
   default for meetings and disabled the ability to randomly scan for meetings
   to join.
   5. *Ensure that your organization’s telework policy* or guide addresses
   requirements for physical and information security.

*Other resources to keep Zoom safe if used for e-learning or meetings and
articles on the topic:*

*Zoom Blog: How to keep the Party Crashers Crashing Your Zoom Event* (March
20, 2020 by Zoom):
https://blog.zoom.us/wordpress/2020/03/20/keep-the-party-crashers-from-crashing-your-zoom-event/

*Prevent “Zoombombing’: Tips for Keeping Your Zoom Video Meeting Secure*
(March 30, 2020 by CBS Boston):
https://boston.cbslocal.com/2020/03/30/zoom-zoombombing-hack-security-tips/

*Vulgar “Zoombombing’ interrupts Salamanca School Board Online Meeting*
(March 27, 2020 by Olean Times Herold NY):
http://www.oleantimesherald.com/news/vulgar-zoom-bombing-interrupts-salamanca-school-board-online-meeting/article_f49b39ff-d796-5f6d-a7c3-147cce7e288e.html

*Beware of ‘Zoombombting:’ Screensharing Filth to Video Calls* (March 17,
2020 by Tech Crunch): https://techcrunch.com/2020/03/17/zoombombing/

*This information is being passed through as a courtesy to the originating
agency.  The STIC had no part in developing this information and has not
verified the contents to be factual.  If you have any questions reference
this information please contact the originating agency.*

Kind regard,

Mia A. Ray, M.S., M.A., NCC, LPC

School Intelligence Officer

Statewide Terrorism & Intelligence Center

Illinois State Police

Western Illinois University

Office - (217)558-2661

Cell - (309)259-0326

*Maria.Ray at illinois.gov <Maria.Ray at illinois.gov>*

isp.schoolsafety at illinois.gov <Isp.schoolsafety at illinois.gov>

"An investment in knowledge pays the best interest."

Interested in becoming a member of the School Safety Information Sharing
Program? Let me know! For more information about the program and archived
monthly newsletters, please visit:
http://www.illinois.gov/ready/plan/pages/schools-sharing.aspx

-- 
Adam Dean
Superintendent

Triopia CUSD #27
2204 Concord-Arenzville Road
Concord, IL 62631

217-457-2283 x1025

-- 

*Leslie Forsman*
*Pre-K through12th grade Librarian*
*Education to Careers Instructor*
*Quest Instructor*
*Triopia CUSD #27*
*2204 Concord Arenzville Road*
*Concord  IL  62631*
*217-457-2281, x1033*
*lforsman at triopiacusd27.org <lforsman at triopiacusd27.org>*
*"Hey, you live where the books are!" *
*(from a preK student who saw me outside of school).*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://list.railslibraries.info/pipermail/aisle/attachments/20200330/22dc9691/attachment.html>