Bomb threats targeting thousands of schools across Europe have been linked to university email addresses found in stolen-credential databases, according to a recent report by Security Affairs.
On Nov. 11, approximately 6,000 Italian schools received threatening emails signed by an individual using the alias Mikhail Andropov. Similar hoaxes were reported in Northern Ireland, Scotland and Ireland. Cybersecurity firm Hudson Rock discovered that two university email addresses associated with these threats appeared in historical infostealer data. One address originated from an Egyptian university, while the other belonged to a Taiwanese institution. The records indicate that these credentials were exposed years before the recent incidents, suggesting that while the accounts were compromised, there is no definitive proof that the stolen data was used to facilitate the specific bomb threats. The incident highlights the broader risks of credential exposure, where stolen information can be leveraged to disrupt public institutions and consume emergency resources. Experts emphasize that organizations must implement robust security measures, such as phishing-resistant authentication and active monitoring of sign-in patterns, to mitigate the impact of compromised accounts and prevent unauthorized access to communication systems.
Source: Security Affairs
