1. News
  2. Increased Cybersecurity Threat from Russian State-Sponsored Actors

Increased Cybersecurity Threat from Russian State-Sponsored Actors

Awareness and Recommended Actions

Feb 04, 2022

Please be aware of the increased risk of malicious cybersecurity activity targeted at higher education institutions in recent weeks as a result of the increased geo-political tensions between Russian, Ukraine and Ukraine鈥檚 western allies (including Canada).

Below you will find the measures Queen鈥檚 has in place to protect against such threats, and the actions you can take to further minimize risk. 

Measures Queen鈥檚 has in place

Queen鈥檚 works in partnership with national cybersecurity groups such as the Canadian Centre for Cyber Security (CCCS) and the Canadian Shared Security Operations Centre (CanSSOC) to stay fully informed about emerging cybersecurity threats, to ensure we are proactively applying best practices, and to take recommended actions against specific threats to minimise our threat exposure and to be able to respond effectively to attacks. 

The volume of suspicious traffic from Russia has increased significantly over the past two weeks. In addition to existing cyber controls, IT Services, in collaboration with other IT units at Queen鈥檚, has taken proactive steps to protect against this new threat; for example, a number of Russian IP addresses confirmed as malicious have been blocked at our perimeter. 

Actions you can take to minimize risk

In order for Queen鈥檚 defenses to be as effective as possible, there are also steps that you as a community member should take: 

  • Enrol your work device in the endpoint protection program. This secures endpoint devices (e.g., desktops, laptops, mobile devices) from being exploited by malicious actors and campaigns, and ensures that only healthy devices connect to the Queen鈥檚 network to access data and applications. 
  • Take Queen鈥檚 Cybersecurity Education and Awareness Course.
  • Stay vigilant against phishing and social engineering attacks (i.e, tricking users into making security mistakes). You can refer to this infographic on how to identify a phishing email for guidance. 

Additional information

  • Canadian Centre for Cyber Security (CCCS): 
    • [2022-01-20]
       
  • US Cybersecurity and Infrastructure Agency (CISA): 
    • [2022-01-11]
       
  • Media: 
    • [2022-01-24]
    • [2022-01-24]

 
If you have security concerns or would like assistance with any of the recommended actions, contact the IT Support Centre by calling 613-533-6666 or by visiting the online and clicking on Get IT Help (log in with your NetID and password to fill out the form). 
 
Cybersecurity is everyone鈥檚 responsibility, please take the necessary steps to protect your intellectual property, Queen鈥檚 systems and data, from this active threat.

Thank you for your prompt action.
Nancy Ross Vice-Principal (Research) 

Marie-Claude Arguin Chief Information Officer and Associate Vice-Principal (Information Technology Services)

Article Category
Security