--- title: Incident response statistics and cases at educational... description: Kaspersky's Global Emergency Response Team (GERT) shares incident response statistics and case studies from Brazilian educational institutions between January... canonical: https://daily.dev/posts/incident-response-statistics-and-cases-at-educational-institutions-in-brazil-8wi0mfapi twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Incident response statistics and cases at educational institutions in Brazil | daily.dev og:description: Kaspersky's Global Emergency Response Team (GERT) shares incident response statistics and case studies from Brazilian educational institutions between January... og:url: https://daily.dev/posts/incident-response-statistics-and-cases-at-educational-institutions-in-brazil-8wi0mfapi og:image: https://api.daily.dev/og/posts/8wi0MfaPI.png og:image:alt: Incident response statistics and cases at educational institutions in Brazil og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Incident response statistics and cases at educational institutions in Brazil **[Securelist](https://daily.dev/sources/securelist)** · 10 min read · 0 upvotes · 0 comments ## Summary Kaspersky's Global Emergency Response Team (GERT) shares incident response statistics and case studies from Brazilian educational institutions between January 2025 and June 2026. Key findings show 40% of incidents were high-severity, primarily ransomware attacks using DragonForce and LockBit 3 (via leaked builder). Most common initial access vectors were valid accounts, exposed public-facing applications, and insiders. Three detailed cases cover a LockBit attack using PsExec for lateral movement, a DragonForce deployment via AnyDesk, and a Python keylogger used by an insider to steal credentials. Recommendations include enforcing MFA, eliminating shared accounts, isolating backups, patching legacy systems (many still run Windows 10 and Server 2016), and improving forensic visibility through artifacts like Amcache, Prefetch, and USN Journal. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Kaspersky Global Report by Kaspersky Security Services 2026](https://daily.dev/posts/kaspersky-global-report-by-kaspersky-security-services-2026-dqnqfkwr9) · Securelist · 0 upvotes · 0 comments - [Ransomware Data Theft Surged 275% in 2026: Schools, Hospitals, and Government Agencies Had Some of the Largest Claims](https://daily.dev/posts/ransomware-data-theft-surged-275-in-2026-schools-hospitals-and-government-agencies-had-some-of-t-ubuy7ea9q) · Security Boulevard · 0 upvotes · 0 comments - [Ransomware Threats In Europe H1 2026: A Deep Dive](https://daily.dev/posts/ransomware-threats-in-europe-h1-2026-a-deep-dive-srxtd3g9l) · Cyble · 1 upvotes · 0 comments - [The State of Ransomware](https://daily.dev/posts/the-state-of-ransomware-znlqyulhm) · Check Point Research · 0 upvotes · 0 comments - [Ransomware Tactics, Techniques, and Procedures in a Shifting Threat Landscape](https://daily.dev/posts/ransomware-tactics-techniques-and-procedures-in-a-shifting-threat-landscape-mybsrzy8h) · Google Cloud · 0 upvotes · 0 comments --- Tags: [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/incident-response-statistics-and-cases-at-educational-institutions-in-brazil-8wi0mfapi) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Incident response statistics and cases at educational institutions in Brazil","url":"https://daily.dev/posts/incident-response-statistics-and-cases-at-educational-institutions-in-brazil-8wi0mfapi","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/incident-response-statistics-and-cases-at-educational-institutions-in-brazil-8wi0mfapi"},"datePublished":"2026-08-03T13:02:30.524Z","dateModified":"2026-08-03T13:02:59.844Z","description":"Kaspersky's Global Emergency Response Team (GERT) shares incident response statistics and case studies from Brazilian educational institutions between January...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1660843aca75b197086774cb7367c0a3?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1660843aca75b197086774cb7367c0a3?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Securelist","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Securelist","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/e4b9f556af7a4e74a179787362dd5b07","url":"https://daily.dev/sources/securelist"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/incident-response-statistics-and-cases-at-educational-institutions-in-brazil-8wi0mfapi","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ransomware","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Securelist","item":"https://daily.dev/sources/securelist"},{"@type":"ListItem","position":3,"name":"Incident response statistics and cases at educational institutions in Brazil"}]} ```