Header image

Credential exposure linked to European school bomb threats

Bomb threats targeting thousands of schools across Europe have been linked to university email addresses found in stolen-credential databases, according to a recent report by Security Affairs.

On Nov. 11, approximately 6,000 Italian schools received threatening emails signed by an individual using the alias Mikhail Andropov. Similar hoaxes were reported in Northern Ireland, Scotland and Ireland. Cybersecurity firm Hudson Rock discovered that two university email addresses associated with these threats appeared in historical infostealer data. 

One address originated from an Egyptian university, while the other belonged to a Taiwanese institution. The records indicate that these credentials were exposed years before the recent incidents, suggesting that while the accounts were compromised, there is no definitive proof that the stolen data was used to facilitate the specific bomb threats. 

The incident highlights the broader risks of credential exposure, where stolen information can be leveraged to disrupt public institutions and consume emergency resources. Experts emphasize that organizations must implement robust security measures, such as phishing-resistant authentication and active monitoring of sign-in patterns, to mitigate the impact of compromised accounts and prevent unauthorized access to communication systems.

Source: Security Affairs

Kelley Damore
Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.

Kelley Damore
Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.

Upcoming Events

No events found.