{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,23]],"date-time":"2026-03-23T04:36:06Z","timestamp":1774240566533,"version":"3.50.1"},"reference-count":135,"publisher":"MDPI AG","issue":"2","license":[{"start":{"date-parts":[[2025,2,4]],"date-time":"2025-02-04T00:00:00Z","timestamp":1738627200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Computers"],"abstract":"<jats:p>Universities hold and process vast amounts of financial, user, and research data, which makes them prime targets for cybercriminals. In addition to the usual external threat actors, universities face a unique insider threat from students, who\u2014alongside staff\u2014may lack adequate cyber security training despite having access to various sensitive systems. This paper provides a focused assessment of the current cyber security threats facing UK universities, based on a comprehensive review of available information. A chronological timeline of notable cyber attacks against universities is produced, with incidents classified according to the CIA triad (Confidentiality, Integrity, Availability) and incident type. Several issues have been identified. Limited disclosure of attack details is a major concern, as full information is often withheld for security reasons, hindering institutions\u2019 abilities to assess vulnerabilities thoroughly and respond effectively. Additionally, universities increasingly rely on third-party service providers for critical services, meaning that an attack on these external providers can directly impact university operations and data security. While SQL injection attacks, previously a significant issue, appear to have declined in frequency\u2014perhaps reflecting improvements in defences\u2014other threats continue to persist. Universities report lower levels of concern regarding DDoS attacks, potentially due to enhanced resilience and mitigation strategies; however, ransomware and phishing attacks remain prevalent. Insider threats, especially from students with varied IT skills, exacerbate these risks, as insiders may unknowingly or maliciously facilitate cyber attacks, posing ongoing challenges for university IT teams. This study recommends that universities leverage these insights, along with other available data, to refine their cyber security strategies. Developing targeted policies, strengthening training, and implementing international standards will allow universities to enhance their security posture and mitigate the complex and evolving threats they face.<\/jats:p>","DOI":"10.3390\/computers14020049","type":"journal-article","created":{"date-parts":[[2025,2,4]],"date-time":"2025-02-04T10:57:53Z","timestamp":1738666673000},"page":"49","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["Analysing Cyber Attacks and Cyber Security Vulnerabilities in the University Sector"],"prefix":"10.3390","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1558-5115","authenticated-orcid":false,"given":"Harjinder Singh","family":"Lallie","sequence":"first","affiliation":[{"name":"Cyber Security Centre, Warwick Manufacturing Group, University of Warwick, Coventry CV4 7AL, UK"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-7500-9507","authenticated-orcid":false,"given":"Andrew","family":"Thompson","sequence":"additional","affiliation":[{"name":"National Grid, National Grid House, Warwick CV34 6DA, UK"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0389-4137","authenticated-orcid":false,"given":"Elzbieta","family":"Titis","sequence":"additional","affiliation":[{"name":"Cyber Security Centre, Warwick Manufacturing Group, University of Warwick, Coventry CV4 7AL, UK"}]},{"given":"Paul","family":"Stephens","sequence":"additional","affiliation":[{"name":"Faculty of Science, Engineering, and Social Sciences, Canterbury Christ Church University, North Holmes Road, Canterbury CT1 1QU, UK"}]}],"member":"1968","published-online":{"date-parts":[[2025,2,4]]},"reference":[{"key":"ref_1","unstructured":"Universities UK (2024, September 01). Higher Education in Numbers. Available online: https:\/\/www.universitiesuk.ac.uk\/latest\/insights-and-analysis\/higher-education-numbers."},{"key":"ref_2","unstructured":"Department for Science, Innovation and Technology (2024, September 01). Cyber Security Breaches Survey 2023: Education Institutions Annex, Available online: https:\/\/www.gov.uk\/government\/statistics\/cyber-security-breaches-survey-2023\/cyber-security-breaches-survey-2023-education-institutions-annex."},{"key":"ref_3","unstructured":"JISC (2023, May 20). Cyber Impact 2022: The Impact of Cyber Security Incidents on the UK\u2019s Further and Higher Education and Research Sectors. Observations, Advice and Questions to Ask. Available online: https:\/\/repository.jisc.ac.uk\/8732\/1\/cyber-impact-report-2022.pdf."},{"key":"ref_4","unstructured":"Clark, A. (2024, September 01). Cybersecurity in the UK. House of Commons Library. Available online: https:\/\/researchbriefings.files.parliament.uk\/documents\/CBP-9821\/CBP-9821.pdf."},{"key":"ref_5","unstructured":"JISC (2024, September 01). Cyber Security Posture Survey Results 2022. Available online: https:\/\/repository.jisc.ac.uk\/8955\/1\/cyber-security-posture-survey-2022-he-full-report.pdf."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Ogden, K., and Waltmann, B. (2024, September 01). Higher Education Finances: How Have They Fared, and What Options Will an Incoming Government Have? The Institute for Fiscal Studies. Available online: https:\/\/ifs.org.uk\/sites\/default\/files\/2024-06\/Higher-education-finances.pdf.","DOI":"10.1920\/re.ifs.2024.0325"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"102248","DOI":"10.1016\/j.cose.2021.102248","article-title":"Cyber security in the age of COVID-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic","volume":"105","author":"Lallie","year":"2021","journal-title":"Comput. Secur."},{"key":"ref_8","unstructured":"NCSC (2023, May 19). NCSC Annual Review 2021, Available online: https:\/\/www.ncsc.gov.uk\/collection\/ncsc-annual-review-2021."},{"key":"ref_9","unstructured":"Universities UK (2024, September 01). Cyber Security and Universities: Managing the Risk (2023 Update). Available online: https:\/\/www.universitiesuk.ac.uk\/sites\/default\/files\/field\/downloads\/2023-10\/279%20FINAL%20-%20Cyber%20Security%20and%20Universities%20%28002%29.pdf."},{"key":"ref_10","unstructured":"IBM (2024, September 01). Cost of a Data Breach Report 2023. Available online: https:\/\/www.ibm.com\/reports\/data-breach."},{"key":"ref_11","unstructured":"Jones, C. (2023, January 16). Universities a `Huge Target\u2019 for Nation-State Attackers, Warns NCSC. Available online: https:\/\/www.itpro.co.uk\/cyber-warfare\/34444\/universities-a-huge-target-for-nation-state-attackers-warns-ncsc."},{"key":"ref_12","unstructured":"Gilmore, J. (2021, February 09). Campus Alerting 80,000 Individuals to Cyberattack. Berkeley News. Available online: https:\/\/news.berkeley.edu\/2016\/02\/26\/campus-alerting-80000-individuals-to-cyberattack."},{"key":"ref_13","unstructured":"Holmes, A. (2021, February 09). A University Had to Hand Out Paper Passwords to 38,000 Students and Staff After Being Hacked. Business Insider. Available online: https:\/\/www.businessinsider.com\/university-giessen-hack-paper-passwords-germany-38000-students-2019-12."},{"key":"ref_14","unstructured":"Chapman, J., Chinnaswamy, A., and Garcia-Perez, A. (2018, January 8\u20139). The severity of cyber attacks on education and research institutions: A function of their security posture. Proceedings of the 13th International Conference on Cyber Warfare and Security (ICCWS 2018), Washington, DC, USA. Available online: https:\/\/www.proquest.com\/docview\/2018924640\/fulltextPDF\/EE26A6CDE8174190PQ\/1."},{"key":"ref_15","unstructured":"British Library (2024, September 01). Learning Lessons from the Cyber-Attack. Available online: https:\/\/www.bl.uk\/home\/british-library-cyber-incident-review-8-march-2024.pdf\/."},{"key":"ref_16","unstructured":"Kost, E. (2024, September 01). The State of University Cybersecurity: 3 Major Problems in 2024. UpGuard. Available online: https:\/\/content.upguard.com\/hubfs\/resources\/Whitepaper%20-%20State%20of%20University%20Cybersecurity.pdf."},{"key":"ref_17","unstructured":"Crossword Cybersecurity PLC (2024, September 01). Crossword Cybersecurity Research Finds 2.2 Million Top 100 UK University and Research Facility Credentials Breached. Available online: https:\/\/pressreleases.responsesource.com\/news\/104159\/crossword-cybersecurity-research-finds-million-top-uk-university-and-research\/."},{"key":"ref_18","unstructured":"Chapman, J., and Maguire, D. (2022). The Impact of Cyber Security Attacks on Colleges and Universities: Who, How and Why?. Campus Crime: Legal, Social, and Policy Perspectives, Charles C Thomas Pub Ltd."},{"key":"ref_19","unstructured":"McGowan, M. (2020, December 19). China Behind Massive Australian National University Hack, Intelligence Officials Say. The Guardian. Available online: https:\/\/www.theguardian.com\/australia-news\/2019\/jun\/06\/china-behind-massive-australian-national-university-hack-intelligence-officials-say."},{"key":"ref_20","unstructured":"Times, T.K. (2020, December 19). NK Suspected of Trying to Hack into Seoul University. The Korea Times. Available online: https:\/\/www.koreatimes.co.kr\/www\/nation\/2021\/08\/113_103011.html."},{"key":"ref_21","unstructured":"Ziv, A. (2021, August 23). Cyberattack Hits Israel\u2019s Bar Ilan University: \u2018Data Is Being Erased Right Now\u2019. Haaretz. Available online: https:\/\/www.haaretz.com\/israel-news\/tech-news\/.premium-cyberattack-on-israeli-university-data-being-erased-right-now-1.10119912."},{"key":"ref_22","unstructured":"Ehrlich, A.B.S. (2022, March 16). New Version of Apostle Ransomware Reemerges in Targeted Attack on Higher Education. Sentinel Labs Blog. Available online: https:\/\/www.sentinelone.com\/labs\/new-version-of-apostle-ransomware-reemerges-in-targeted-attack-on-higher-education\/."},{"key":"ref_23","unstructured":"Microsoft (2023, May 19). Microsoft Digital Defense Report 2022. Illuminating the Threat Landscape and Empowering a Digital Defense. Available online: https:\/\/cdn-dynmedia-1.microsoft.com\/is\/content\/microsoftcorp\/microsoft\/final\/en-us\/microsoft-brand\/documents\/microsoft-digital-defense-report-2022.pdf."},{"key":"ref_24","unstructured":"Chen, S. (2020, December 19). \u2018Islamic State Hackers\u2019 Attack Top Tier Chinese University\u2019s Website Urging Holy War. South China Morning Post. Available online: https:\/\/www.scmp.com\/news\/china\/policies-politics\/article\/1902268\/islamic-state-hackers-attack-top-tier-chinese."},{"key":"ref_25","unstructured":"Standard, S. (2020, December 19). IT Expert Reportedly Behind Hacking of UB Website. Sunday Standard. Available online: https:\/\/www.sundaystandard.info\/it-expert-reportedly-behind-hacking-of-ub-website."},{"key":"ref_26","unstructured":"QAA (2021, August 06). Emerging Cyber Security Threats to the Integrity of UK Teaching and Learning. Available online: https:\/\/www.qaa.ac.uk\/docs\/qaa\/guidance\/emerging-cyber-security-threats.pdf."},{"key":"ref_27","unstructured":"McKie, A. (2022, April 20). Australia Warns UK Over Essay Mills Hacking University Websites. Times Higher Education. Available online: https:\/\/www.timeshighereducation.com\/news\/australia-warns-uk-over-essay-mills-hacking-university-websites."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Singar, A.V., and Akhilesh, K.B. (2020). Role of Cyber-security in Higher Education. Smart Technol. Scope Appl., 249\u2013264.","DOI":"10.1007\/978-981-13-7139-4_19"},{"key":"ref_29","first-page":"371","article-title":"Emerging Issues in Cyber Security for Institutions of Higher Education","volume":"8","author":"Maranga","year":"2019","journal-title":"Int. J. Comput. Sci. Netw."},{"key":"ref_30","unstructured":"Fitzpatrick, E., and Riebe, N. (2020, December 19). Student Charged with Cyber Crimes in U of a Malware Breach. Canadian Broadcasting Corporation. Available online: https:\/\/www.cbc.ca\/news\/canada\/edmonton\/student-charged-with-cyber-crimes-in-u-of-a-malware-breach-1.3922790."},{"key":"ref_31","unstructured":"Mail, D. (2024, September 01). Purdue University Engineering Students `Hacked into Professors\u2019 Accounts to Change Their Grades\u2013Even Boosting an A to an A+\u2019. Daily Mail. Available online: https:\/\/www.dailymail.co.uk\/news\/article-2341689\/Purdue-University-engineering-students-hacked-professors-accounts-change-grades\u2013boosting-A-A.html."},{"key":"ref_32","unstructured":"Wiggins, N. (2024, September 01). Law Student Who Allegedly Hacked University of Queensland to Improve Grades Appears in Court. ABC News Australia. Available online: https:\/\/www.abc.net.au\/news\/2015-12-01\/student-allegedly-caught-hacking-into-uq-computer\/6990230."},{"key":"ref_33","unstructured":"McCarthy, R. (2024, September 01). University of Birmingham Exam Cheat Jailed After Hacking Computers to Boost Marks, Birmingham Mail. Available online: https:\/\/www.birminghammail.co.uk\/news\/midlands-news\/university-birmingham-exam-cheat-jailed-9105937."},{"key":"ref_34","unstructured":"Johnson, J. (2024, September 01). Gerogia Tech Student Gets Pretrial Intervention in Hack of UGa Computers. The Florida Times-Union. Available online: https:\/\/eu.jacksonville.com\/story\/news\/crime\/2015\/02\/25\/gerogia-tech-student-gets-pretrial-intervention-hack-uga-computers\/15652332007\/."},{"key":"ref_35","unstructured":"Vaas, L. (2024, September 01). Student Charged by FBI for Hacking His Grades More Than 90 Times. Sophos News. Available online: https:\/\/news.sophos.com\/en-us\/2017\/11\/01\/student-charged-by-fbi-for-hacking-his-grades-more-than-90-times\/."},{"key":"ref_36","unstructured":"Elena, C. (2024, September 01). Asean Scholar at SMU Jailed 16 Weeks for Hacking into Professor\u2019s Computer and Changing Grades. The Straits Times. Available online: https:\/\/www.straitstimes.com\/singapore\/courts-crime\/asean-scholar-at-smu-jailed-16-weeks-for-hacking-into-profs-computer-and."},{"key":"ref_37","unstructured":"Cluley, G. (2022, March 27). \u201cFoolish\u201d University Hacker Jailed After Selling Exam Papers to Fellow Students. Bitdefender. Available online: https:\/\/www.bitdefender.com\/en-gb\/blog\/hotforsecurity\/foolish-university-hacker-jailed-after-selling-exam-papers-to-fellow-students."},{"key":"ref_38","unstructured":"Dewey, P. (2022, March 16). Student Hacked into University System and Sold Exam Papers for \u00a320,000 Profit. Wales Online. Available online: https:\/\/www.walesonline.co.uk\/news\/wales-news\/student-hacked-university-system-sold-21528339."},{"key":"ref_39","unstructured":"Whittaker, Z. (2024, September 01). Tufts Expelled a Student for Grade Hacking. She Claims Innocence. TechCrunch. Available online: https:\/\/techcrunch.com\/2019\/03\/08\/tufts-grade-hacking\/."},{"key":"ref_40","unstructured":"Tang, L. (2024, September 01). NTU Graduate Jailed for Hacking Kopitiam Cards for Free Items, Causing $80,000 in Losses. TODAY. Available online: https:\/\/www.todayonline.com\/singapore\/ntu-graduate-jailed-hacking-kopitiam-cards-free-items-causing-s80000-losses."},{"key":"ref_41","unstructured":"Sullivan, K. (2021, April 28). Business Security Kit Used for Cyberattack on Highlands University. The Times. Available online: https:\/\/www.thetimes.co.uk\/article\/business-security-kit-used-for-cyberattack-on-highlands-university-250vfkl8k."},{"key":"ref_42","unstructured":"Macleod, M. (2021, July 26). College Cyber-Attack Is Still Causing Problems. Stornoway Gazette. Available online: https:\/\/www.stornowaygazette.co.uk\/news\/crime\/college-cyber-attack-is-still-causing-problems-3222428."},{"key":"ref_43","unstructured":"ITV (2024, September 01). Student Who Hacked University System and Made \u00a320k Selling Exam Papers Jailed for 20 Months. ITV. Available online: https:\/\/www.itv.com\/news\/wales\/2021-09-10\/student-hacker-who-made-20k-selling-exam-papers-jailed-for-20-months."},{"key":"ref_44","unstructured":"Vijayan, J. (2024, September 01). Teen Faces 38 Years in Jail for Grade-Tampering Hack. Computerworld. Available online: https:\/\/www.computerworld.com\/article\/1563975\/teen-faces-38-years-in-jail-for-grade-tampering-hack.html."},{"key":"ref_45","unstructured":"Stosh, B. (2024, September 01). High School Student Arrested for Hacking Report Card System and Changing Grades. FreedomHacker. Available online: https:\/\/freedomhacker.net\/2014-04-high-school-student-arrested-for-hacking-report-card-system-and-changing-grades\/."},{"key":"ref_46","unstructured":"Cimpanu, C. (2024, September 01). Student Hacks High School, Changes Grades, and Sends College Applications. BleepingComputer. Available online: https:\/\/www.bleepingcomputer.com\/news\/security\/student-hacks-high-school-changes-grades-and-sends-college-applications\/."},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Lapin, T. (2024, September 01). Teen Hacks School to Change Grades, Charged with 14 Felonies. New York Post. Available online: https:\/\/nypost.com\/2018\/05\/14\/teens-hacks-school-to-change-grades-charged-with-14-felonies\/.","DOI":"10.12968\/sece.2018.9.14"},{"key":"ref_48","unstructured":"Greenberg, A. (2024, September 01). This Teen Hacker Found Bugs in School Software That Exposed Millions of Records. Available online: https:\/\/www.wired.com\/story\/teen-hacker-school-software-blackboard-follett\/."},{"key":"ref_49","unstructured":"Wood, C. (2024, September 01). Student Hacker Grabbed Personal Data of Thousands of Maryland Students. EdScoop. Available online: https:\/\/edscoop.com\/student-hacker-grabbed-personal-data-of-thousands-of-maryland-students\/."},{"key":"ref_50","unstructured":"Samsel, H. (2024, September 01). Student Hacker Was Able to Breach Thousands of Student Accounts in Maryland District. Campus Security Today. Available online: https:\/\/campussecuritytoday.com\/articles\/2019\/12\/17\/student-hacker-was-able-to-breach-thousands-of-student-accounts.aspx."},{"key":"ref_51","unstructured":"Shibu, S. (2024, September 01). 16-Year-Old Arrested for Cyberattacks on School\u2019s Online Learning Systems. PCMag. Available online: https:\/\/uk.pcmag.com\/education-reference\/128478\/16-year-old-arrested-for-cyberattacks-on-schools-online-learning-systems."},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Weerasinghe, G.K. (2024, September 01). Student Who Hacked Exams Dept Web Arrested. Available online: https:\/\/archives1.dailynews.lk\/2022\/09\/09\/law-order\/286885\/student-who-hacked-exams-dept-web-arrested.","DOI":"10.55041\/IJSREM40786"},{"key":"ref_53","doi-asserted-by":"crossref","unstructured":"Dawson, P. (2020). Defending Assessment Security in a Digital World: Preventing e-Cheating and Supporting Academic Integrity in Higher Education, Routledge.","DOI":"10.4324\/9780429324178"},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"940","DOI":"10.1080\/02602938.2020.1719975","article-title":"Cheating in e-exams and paper exams: The perceptions of engineering students and teachers in Norway","volume":"45","author":"Chirumamilla","year":"2020","journal-title":"Assess. Eval. High. Educ."},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"8413","DOI":"10.1007\/s10639-022-10927-7","article-title":"A systematic review of research on cheating in online exams from 2010 to 2021","volume":"27","author":"Noorbehbahani","year":"2022","journal-title":"Educ. Inf. Technol."},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"106311","DOI":"10.1016\/j.chb.2020.106311","article-title":"Individual differences in susceptibility to cybercrime victimization and its psychological aftermath","volume":"108","author":"Cheng","year":"2020","journal-title":"Comput. Hum. Behav."},{"key":"ref_57","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1016\/j.diin.2006.03.001","article-title":"A two-dimensional circumplex approach to the development of a hacker taxonomy","volume":"3","author":"Rogers","year":"2006","journal-title":"Digit. Investig."},{"key":"ref_58","unstructured":"Coker, J. (2020, December 10). A Third of UK Unis Hit by Ransomware in Last 10 Years. Infosecurity Magazine. Available online: https:\/\/www.infosecurity-magazine.com\/news\/ulster-university-also-suffered\/."},{"key":"ref_59","unstructured":"Speed, R. (2021, June 22). University of Hertfordshire Pulls the Plug on, Well, Everything After Cyber Attack. The Register. Available online: https:\/\/www.theregister.com\/2021\/04\/15\/university_hertfordshire_cyber_attack\/."},{"key":"ref_60","unstructured":"ITV (2024, September 01). Teesside University Student Studying Cyber Security Posed as Amazon Tech Support to Con Woman. Available online: https:\/\/www.itv.com\/news\/tyne-tees\/2021-09-06\/teesside-university-cyber-security-student-posed-as-amazon-tech-support-in-scam."},{"key":"ref_61","unstructured":"Stempel, J. (2024, September 01). College Student Who Sought Trump Tax Returns in Cyber `Prank\u2019 to Plead Guilty. Reuters. Available online: https:\/\/www.reuters.com\/article\/technology\/college-student-who-sought-trump-tax-returns-in-cyber-prank-to-plead-guilty-idUSKCN1UW0KQ\/."},{"key":"ref_62","unstructured":"Infosecurity Magazine (2021, March 15). Hacktivist Campaign Targets Universities. Available online: https:\/\/www.infosecurity-magazine.com\/news\/hacker-collective-leaks-one-million-records-vows\/."},{"key":"ref_63","unstructured":"Leyden, J. (2020, December 10). DDoS Attack Downs University of London Learning Platform. The Register. Available online: https:\/\/www.theregister.com\/2015\/05\/22\/university_of_london_ddos_attack\/."},{"key":"ref_64","unstructured":"Mendoza, M. (2022, March 27). University of London Learning Platform Suffers from DDoS Attack. Tech Times. Available online: https:\/\/www.techtimes.com\/articles\/55166\/20150525\/university-of-london-learning-platform-suffers-from-ddos-attack.htm."},{"key":"ref_65","unstructured":"Havergal, C. (2020, December 10). Cyber Attack on Janet Network Disrupts University Internet Connections. Times Higher Education. Available online: https:\/\/www.timeshighereducation.com\/news\/cyber-attack-janet-network-disrupts-university-internet-connections."},{"key":"ref_66","unstructured":"Kerr, C. (2022, March 27). Universities Across the Country Have Lost Internet Following Cyber Attack. The Huffington Post UK. Available online: https:\/\/www.huffingtonpost.co.uk\/2015\/12\/08\/universities-across-the-country-have-lost-the-internet-following-cyber-attack_n_8749308.html."},{"key":"ref_67","unstructured":"Micklethwaite, J. (2020, December 10). University of Greenwich website `Hacked by Disgruntled Former Student\u2019. The Evening Standard. Available online: https:\/\/www.standard.co.uk\/news\/london\/university-of-greenwich-website-hacked-by-disgruntled-former-student-a3274671.html."},{"key":"ref_68","unstructured":"O\u2019Neill, P.H. (2021, August 21). Hacker Breaches University of Greenwich, Exposes 21,000 People\u2019s Data. Daily Dot. Available online: https:\/\/www.dailydot.com\/debug\/university-greenwich-student-hack\/."},{"key":"ref_69","unstructured":"Cimpanu, C. (2022, March 27). Hacker Rasputin Breaches over 60 Universities and Government Agencies. Bleeping Computer. Available online: https:\/\/www.bleepingcomputer.com\/news\/security\/hacker-rasputin-breaches-over-60-universities-and-government-agencies\/."},{"key":"ref_70","unstructured":"Gundert, L. (2021, July 12). Russian-Speaking Hacker Sells SQLi for Unauthorized Access to over 60 Universities and Government Agencies. Recorded Future. Available online: https:\/\/www.recordedfuture.com\/recent-rasputin-activity\/."},{"key":"ref_71","unstructured":"Perlman, E. (2020, December 12). Top UK University Hit by Major Cyber-Attack. Verdict Media Limited. Available online: https:\/\/www.verdict.co.uk\/top-uk-university-hit-by-major-cyber-attack\/."},{"key":"ref_72","unstructured":"Goud, N. (2020, December 12). University College of London Becomes a Victim of Ransomware Cyber Attack. Cybersecurity Insiders. Available online: https:\/\/www.cybersecurity-insiders.com\/university-college-of-london-becomes-a-victim-of-ransomware-cyber-attack\/."},{"key":"ref_73","unstructured":"Barry, C. (2020, December 12). What Can We Learn from the UCL Ransomware Attack?. Barracuda Blog., Available online: https:\/\/blog.barracuda.com\/2017\/06\/15\/what-can-we-learn-from-the-ucl-ransomware-attack\/."},{"key":"ref_74","unstructured":"Lyngaas, S. (2022, March 27). Suspected North Korean Hackers Target Universities Using Chrome Extension. CyberScoop. Available online: https:\/\/cyberscoop.com\/suspected-north-korean-hackers-target-universities-using-chrome-extension\/."},{"key":"ref_75","unstructured":"Netscout (2021, March 05). STOLEN PENCIL Campaign Targets Academia. Netscout ASERT Blog., Available online: https:\/\/www.netscout.com\/blog\/asert\/stolen-pencil-campaign-targets-academia."},{"key":"ref_76","unstructured":"The MITRE Corporation (2022, March 27). Silent Librarian. Available online: https:\/\/attack.mitre.org\/groups\/G0122\/."},{"key":"ref_77","unstructured":"Cimpanu, C. (2022, March 27). Iranian Hackers Charged in March Are Still Actively Phishing Universities. Bleeping Computer. Available online: https:\/\/www.bleepingcomputer.com\/news\/security\/iranian-hackers-charged-in-march-are-still-actively-phishing-universities\/."},{"key":"ref_78","unstructured":"Driz, S. (2022, March 27). Most Universities at Risk of DDoS Attacks. The Driz Group Cybersecurity Blog. Available online: https:\/\/www.drizgroup.com\/driz_group_blog\/most-universities-at-risk-of-ddos-attacks."},{"key":"ref_79","unstructured":"Muncaster, P. (2020, December 10). Edinburgh Uni Hit by Major Cyber-Attack. Infosecurity Magazine. Available online: https:\/\/www.infosecurity-magazine.com\/news\/edinburgh-uni-hit-by-major-cyber\/."},{"key":"ref_80","unstructured":"TEISS (2020, December 09). Warwick University Suffered Multiple Breaches Due to Poor Security Protocols. Available online: https:\/\/www.teiss.co.uk\/warwick-university-data-breaches\/."},{"key":"ref_81","unstructured":"Martin, A. (2020, September 09). Warwick University Was Hacked and Kept Breach Secret from Students and Staff. Sky News. Available online: https:\/\/news.sky.com\/story\/warwick-university-was-hacked-and-kept-breach-secret-from-students-and-staff-11978792."},{"key":"ref_82","unstructured":"Muncaster, P. (2022, March 27). Warwick Uni Under Fire After Reported Breach Cover-Up. Infosecurity Magazine. Available online: https:\/\/www.infosecurity-magazine.com\/news\/warwick-uni-under-fire-reported\/."},{"key":"ref_83","unstructured":"Ashford, W. (2022, March 27). Phishing Attack Highlights Cyber Security Need at Universities. Computer Weekly. Available online: https:\/\/www.computerweekly.com\/news\/252467214\/Phishing-attack-highlights-cyber-security-need-at-universities."},{"key":"ref_84","unstructured":"Calderbank, M. (2021, January 25). Lancaster University Hit by Cyber Attack, Hundreds of Students\u2019 Personal Data Stolen. Lancashire Evening Post. Available online: https:\/\/www.lep.co.uk\/education\/lancaster-university-hit-cyber-attack-hundreds-students-personal-data-stolen-650016."},{"key":"ref_85","unstructured":"Lancaster University (2022, March 27). Cyber Incident. Available online: https:\/\/www.lancaster.ac.uk\/news\/phishing-attack\/."},{"key":"ref_86","unstructured":"BBC News (2021, August 05). University of York Students Targeted in Data Hack. Available online: https:\/\/www.bbc.co.uk\/news\/uk-england-york-north-yorkshire-49182179."},{"key":"ref_87","unstructured":"University of York (2022, March 27). Data Breach Affecting a University System. Available online: https:\/\/www.york.ac.uk\/students\/news\/2019\/data-breach\/."},{"key":"ref_88","unstructured":"Monrad, J. (2021, January 25). Universities Fall into the Cross Hairs of Cyber Attackers. Infosecurity Magazine. Available online: https:\/\/www.infosecurity-magazine.com\/opinions\/universities-attackers\/."},{"key":"ref_89","unstructured":"Walsh, M. (2020, December 19). Seems Phishy: Back to School Lures Target University Students and Staff. Secureworks. Available online: https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/seems-phishy-back-school-lures-target-university-students-and-staff."},{"key":"ref_90","unstructured":"Proofpoint (2022, March 27). Threat Actor Profile: TA407, The Silent Librarian. Proofpoint. Available online: https:\/\/www.proofpoint.com\/uk\/threat-insight\/post\/threat-actor-profile-ta407-silent-librarian."},{"key":"ref_91","unstructured":"Kelion, L. (2020, December 10). Blackbaud: Bank Details and Passwords at Risk in Giant Charities Hack. BBC News. Available online: https:\/\/www.bbc.co.uk\/news\/technology-54370568."},{"key":"ref_92","unstructured":"Hellard, B. (2020, December 10). Blackbaud Admits Bank Account Details Were Lost in May Data Breach. IT Pro. Available online: https:\/\/www.itpro.co.uk\/security\/data-breaches\/357314\/blackbaud-admits-bank-data-lost-during-may-breach."},{"key":"ref_93","unstructured":"Cimpanu, C. (2020, December 21). Supercomputers Hacked Across Europe to Mine Cryptocurrency. ZDNet. Available online: https:\/\/www.zdnet.com\/article\/supercomputers-hacked-across-europe-to-mine-cryptocurrency\/."},{"key":"ref_94","unstructured":"Cyware (2022, March 27). Cyberattackers Targeting Supercomputers\u2013British Supercomputer ARCHER Exploited. Cyware. Available online: https:\/\/social.cyware.com\/news\/cyberattackers-targeting-supercomputers-british-supercomputer-archer-exploited-ddc26539."},{"key":"ref_95","unstructured":"Weston, S. (2022, March 27). Supercomputers Across Europe Taken Down by Crypto-Mining Malware. IT Pro. Available online: https:\/\/www.itpro.com\/security\/malware\/355677\/uni-of-edinburgh-supercomputer-taken-down-by-cryptocurrency-mining-malware."},{"key":"ref_96","unstructured":"Malwarebytes (2021, August 12). Silent Librarian APT Right on Schedule for 20\/21 Academic Year. Malwarebytes Labs Blog. Available online: https:\/\/www.threatdown.com\/blog\/silent-librarian-apt-phishing-attack\/."},{"key":"ref_97","unstructured":"Seals, T. (2021, February 13). Silent Librarian Goes Back to School with Global Research-Stealing Effort. Threatpost. Available online: https:\/\/threatpost.com\/silent-librarian-school-research-stealing\/160099\/."},{"key":"ref_98","unstructured":"Muncaster, P. (2020, December 10). Newcastle Uni Ransomware Attack Will \u201cTake Weeks\u201d to Mitigate. Infosecurity Magazine. Available online: https:\/\/www.infosecurity-magazine.com\/news\/newcastle-uni-ransomware-attack\/."},{"key":"ref_99","unstructured":"Hellard, B. (2022, March 27). Hackers Hold Newcastle Uni Student Data to Ransom. IT Pro. Available online: https:\/\/www.itpro.com\/security\/ransomware\/357022\/hackers-hold-newcastle-uni-student-data-to-ransom."},{"key":"ref_100","unstructured":"Shead, E. (2021, May 17). London Southbank Students Unable to Access Online Learning for a Full Month. The Tab. Available online: https:\/\/thetab.com\/uk\/london\/2021\/01\/08\/london-southbank-students-unable-to-access-online-learning-for-a-full-month-38309."},{"key":"ref_101","unstructured":"London South Bank University (2022, March 27). Due to the Recent Cyber Attack, the Process for New Students Setting Up Passwords and Accessing Timetables Looks a Little Different [...]. Available online: https:\/\/www.facebook.com\/londonsouthbankuni\/posts\/pfbid02e3mpvWBig1r9eWynbobSRBJheCcc4o9HZ3UdUPixfyd6Kh2RSLcPgL6JdGQSdiRTl."},{"key":"ref_102","unstructured":"Brewster, T. (2021, May 17). Hackers Break Into \u2018Biochemical Systems\u2019 at Oxford University Lab Studying COVID-19. Forbes. Available online: https:\/\/www.forbes.com\/sites\/thomasbrewster\/2021\/02\/25\/exclusive-hackers-break-into-biochemical-systems-at-oxford-uni-lab-studying-covid-19\/."},{"key":"ref_103","unstructured":"Reuters (2021, May 17). Oxford University Says Research Not Affected After Expert Flags COVID Lab Hack. Reuters. Available online: https:\/\/www.reuters.com\/article\/uk-health-coronavirus-britain-cyber-idUSKBN2AP2RP."},{"key":"ref_104","unstructured":"Meredith, R., and Rosato, E. (2021, May 17). Queen\u2019s University Takes `Precautions\u2019 After Cyber-Attack Attempt. BBC News. Available online: https:\/\/www.bbc.co.uk\/news\/uk-northern-ireland-56287355."},{"key":"ref_105","unstructured":"Madden, A. (2021, August 19). Health Service Disruption Fears as Trusts Block QUB Emails in Aftermath of Attempted Cyber-Attack. Belfast Telegraph. Available online: https:\/\/www.belfasttelegraph.co.uk\/news\/northern-ireland\/belfast\/health-service-disruption-fears-as-trusts-block-qub-emails-in-aftermath-of-attempted-cyber-attack-40502861.html."},{"key":"ref_106","unstructured":"Marzouk, Z. (2021, April 28). University of Northampton Hit by Cyber Attack. IT Pro. Available online: https:\/\/www.itpro.co.uk\/security\/cyber-attacks\/359003\/university-of-northampton-hit-by-cyber-attack."},{"key":"ref_107","unstructured":"Jay, J. (2021, April 28). Major Cyber Attack Crippled Northampton University\u2019s IT Network for Days. TEISS. Available online: https:\/\/www.teiss.co.uk\/university-of-northampton-cyber-attack\/."},{"key":"ref_108","unstructured":"Fishwick, B. (2021, June 22). University of Portsmouth Closes Campus Due to `Ransomware Attack\u2019 on IT Services Causing `Ongoing Disruption\u2019. The News. Available online: https:\/\/www.portsmouth.co.uk\/education\/university-of-portsmouth-closes-campus-due-to-ransomware-attack-on-it-services-causing-ongoing-disruption-3199053."},{"key":"ref_109","unstructured":"BBC News (2022, March 27). Portsmouth University `Cyber Incident\u2019 Reported to Police. Available online: https:\/\/www.bbc.co.uk\/news\/uk-england-hampshire-56805248."},{"key":"ref_110","unstructured":"Harkins, D. (2021, July 26). Hackers Hit IT Systems at Glasgow Caledonian University. The Times. Available online: https:\/\/www.thetimes.co.uk\/article\/hackers-hit-it-systems-at-glasgow-caledonian-university-2h3lphgt0."},{"key":"ref_111","unstructured":"Knowles, T. (2022, March 16). University of Sunderland\u2019s IT System Still Disabled a Week After Cyberattack. The Times. Available online: https:\/\/www.thetimes.com\/article\/university-of-sunderland-it-system-still-disabled-cyberattack-83n5zwkz9."},{"key":"ref_112","doi-asserted-by":"crossref","unstructured":"Tung, L. (2022, March 27). University Still Recovering From Major Cyberattack that Disrupted IT Systems. ZDNet. Available online: https:\/\/www.zdnet.com\/article\/university-still-recovering-from-major-cyberattack-that-disrupted-it-systems\/.","DOI":"10.1063\/pt.6.2.20221212a"},{"key":"ref_113","unstructured":"John, J. (2024, September 01). Imperial College Launches Investigation into February Cyber Attack. Available online: https:\/\/felixonline.co.uk\/articles\/imperial-college-launches-investigation-into-february-cyber-attack-2\/."},{"key":"ref_114","unstructured":"Speed, R. (2022, March 27). IT Outage at Scotland\u2019s Heriot-Watt University Enters Second Week. The Register. Available online: https:\/\/www.theregister.com\/2022\/03\/24\/heriot_watt_outage\/."},{"key":"ref_115","unstructured":"Speirs, K., and Delaney, J. (2022, March 27). Cyber Attack at Scots University Hampers Remote Learning for over a Week. Daily Record. Available online: https:\/\/www.dailyrecord.co.uk\/news\/scottish-news\/cyber-attack-scots-university-hampers-26549650."},{"key":"ref_116","unstructured":"Coker, J. (2024, September 01). University of Manchester CISO Speaks Out on Summer Cyber-Attack. Infosecurity Magazine. Available online: https:\/\/www.infosecurity-magazine.com\/news\/uni-manchester-ciso-cyber-attack\/."},{"key":"ref_117","unstructured":"University of Manchester (2024, September 01). Cyber Incident. Available online: https:\/\/www.manchester.ac.uk\/cyber-incident\/."},{"key":"ref_118","unstructured":"Cox, A. (2024, September 01). Scottish University UWS Targeted by Cyber Attackers. BBC News. Available online: https:\/\/www.bbc.co.uk\/news\/uk-scotland-glasgow-west-66327336."},{"key":"ref_119","unstructured":"Cross, M. (2024, September 01). Students `Locked Out\u2019 as BPP Hit by Cyber Attack. The Law Society Gazette. Available online: https:\/\/www.lawgazette.co.uk\/news\/students-locked-out-as-bpp-hit-by-cyber-attack\/5116859.article."},{"key":"ref_120","unstructured":"Armstrong, F., and Mann, E. (2024, September 01). Cambridge Faces Cyber Attack. Varsity. Available online: https:\/\/www.varsity.co.uk\/news\/27131."},{"key":"ref_121","unstructured":"Lawson, E. (2024, September 01). University Confirms `Cyber Security Incident\u2019. BBC News. Available online: https:\/\/www.bbc.co.uk\/news\/articles\/cgrlljz2pv5o."},{"key":"ref_122","unstructured":"Burhanuddin, O. (2024, September 01). University Publishing House Faces Cyber Attack. Varsity. Available online: https:\/\/www.varsity.co.uk\/news\/27854."},{"key":"ref_123","first-page":"1","article-title":"How safe is your data? Cyber-security in higher education","volume":"12","author":"Chapman","year":"2019","journal-title":"HEPI Policy Note"},{"key":"ref_124","unstructured":"Zurkus, K. (2020, December 10). STOLEN PENCIL Targets Academic Institutions. Infosecurity Magazine. Available online: https:\/\/www.infosecurity-magazine.com\/news\/stolen-pencil-targets-academic\/."},{"key":"ref_125","unstructured":"The MITRE Corporation (2021, March 05). Stolen Pencil. Available online: https:\/\/attack.mitre.org\/groups\/G0086\/."},{"key":"ref_126","unstructured":"Redscan (2024, September 01). New Redscan FOI Report Reveals the State of Cyber Security Across UK Universities. Available online: https:\/\/www.redscan.com\/news\/state-of-cybersecurity-uk-universities-foi-report\/."},{"key":"ref_127","unstructured":"McKie, A. (2024, September 01). Hackers Breach UK University Defences `Within Two Hours\u2019. Times Higher Education. Available online: https:\/\/www.timeshighereducation.com\/news\/hackers-breach-uk-university-defences-within-two-hours."},{"key":"ref_128","unstructured":"HM Government (2023, May 19). National Cyber Strategy 2022. Pioneering a Cyber Future with the Whole of the UK, Available online: https:\/\/assets.publishing.service.gov.uk\/government\/uploads\/system\/uploads\/attachment_data\/file\/1053023\/national-cyber-strategy-amend.pdf."},{"key":"ref_129","unstructured":"Loohuis, K. (2020, December 15). Maastricht University Pays \u20ac200,000 to Russian Hackers. Computer Weekly. Available online: https:\/\/www.computerweekly.com\/news\/252477997\/Maastricht-University-pays-200000-to-Russian-hackers."},{"key":"ref_130","unstructured":"Wu, D. (2023, January 21). UCSF Pays Hackers $1.14M to Recover Encrypted Data, Available online: https:\/\/www.govtech.com\/security\/ucsf-pays-hackers-1-14m-to-recover-encrypted-data.html."},{"key":"ref_131","unstructured":"Hernandez, E. (2021, February 09). Denver\u2019s Regis University Paid Ransom to \u201cMalicious Actors\u201d Behind Campus Cyberattack. The Denver Post. Available online: https:\/\/www.denverpost.com\/2020\/01\/28\/regis-university-ransomware-cyberattack\/."},{"key":"ref_132","unstructured":"ICO (2021, January 12). The University of Greenwich Fined \u00a3120,000 by Information Commissioner for \u201cSerious\u201d Security Breach. Available online: https:\/\/ico.org.uk\/action-weve-taken\/data-security-incident-trends\/data-security-draft\/."},{"key":"ref_133","unstructured":"ICO (2021, January 12). The University of Warwick Data Protection Audit Report. Available online: https:\/\/ico.org.uk\/media\/action-weve-taken\/audits-and-advisory-visits\/2617436\/university-of-warwick-audit-executive-summary-v1_2.pdf."},{"key":"ref_134","unstructured":"Button, M., Lewis, C., and Tapley, J. (2023, May 19). Fraud Typologies and Victims of Fraud: Literature Review. National Fraud Authority, Available online: https:\/\/assets.publishing.service.gov.uk\/media\/5a7ad8c2ed915d670dd7efad\/fraud-typologies.pdf."},{"key":"ref_135","unstructured":"David, C. (2024, September 01). Telling Users to `Avoid Clicking Bad Links\u2019 Still Isn\u2019t Working. NCSC, Available online: https:\/\/www.ncsc.gov.uk\/blog-post\/telling-users-to-avoid-clicking-bad-links-still-isnt-working."}],"container-title":["Computers"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-431X\/14\/2\/49\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T16:26:49Z","timestamp":1760027209000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-431X\/14\/2\/49"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,4]]},"references-count":135,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2025,2]]}},"alternative-id":["computers14020049"],"URL":"https:\/\/doi.org\/10.3390\/computers14020049","relation":{},"ISSN":["2073-431X"],"issn-type":[{"value":"2073-431X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,2,4]]}}}