--- title: "Incident response statistics and cases at educational institutions in Brazil" url: https://daily.dev/posts/incident-response-statistics-and-cases-at-educational-institutions-in-brazil-8wi0mfapi source_url: https://securelist.com/incidents-at-brazilian-educational-institutions/120803 type: article source: "Securelist" published: 2026-08-03T13:02:30.524Z updated: 2026-08-03T13:02:59.844Z tags: ["ransomware"] reading_time: 10 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Incident response statistics and cases at educational institutions in Brazil **[Securelist](https://daily.dev/sources/securelist)** · 10 min read · 0 upvotes · 0 comments ## Summary Kaspersky's Global Emergency Response Team (GERT) shares incident response statistics and case studies from Brazilian educational institutions between January 2025 and June 2026. Key findings show 40% of incidents were high-severity, primarily ransomware attacks using DragonForce and LockBit 3 (via leaked builder). Most common initial access vectors were valid accounts, exposed public-facing applications, and insiders. Three detailed cases cover a LockBit attack using PsExec for lateral movement, a DragonForce deployment via AnyDesk, and a Python keylogger used by an insider to steal credentials. Recommendations include enforcing MFA, eliminating shared accounts, isolating backups, patching legacy systems (many still run Windows 10 and Server 2016), and improving forensic visibility through artifacts like Amcache, Prefetch, and USN Journal. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Kaspersky Global Report by Kaspersky Security Services 2026](https://daily.dev/posts/kaspersky-global-report-by-kaspersky-security-services-2026-dqnqfkwr9) · Securelist · 0 upvotes · 0 comments --- Tags: [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/incident-response-statistics-and-cases-at-educational-institutions-in-brazil-8wi0mfapi)