Ransomware is a computer virus that blocks access to files by encrypting them. The encryption can be removed with a password that only the criminal knows, and there is no way to get around the encryption without that password.
The computer virus can get installed when someone clicks on a malicious link on a website, in an email, a compromised document, or any number of locations that links can be. The installation of the virus is often discrete and unknown to the computer user until an screen pops up showing the ransom warning.
Phishing is when a malicious email or website is made to look like it is from an official, trusted source. These emails and websites are tools used by criminals to trick people into sharing their passwords, usernames, confidential information, or to click on malicious links that will install ransomware and other viruses onto a computer.
The emails can look like they are coming from someone who works in the school district, whose name might have been pulled from the public directory. The websites can look like a login page for any of the online services that are used in the district, such as Google or Aeries. Multiple phishing attempts have already been blocked in MJUSD.
Identity theft is when a criminal successfully pretends to be someone else with information that has been gathered from a phishing attempt. Student information is a tempting target because a student will have clean financial history that allows criminals to open up credit accounts in the student's name.
The criminal can pretend to be someone in the school district, if they gained access to an email account. They could then send out more phishing attempts to cause more harm across the district.