Email addresses used in European school bomb hoaxes spotted in old infostealer logs
Researchers say organizations should have detected and secured them sooner
The email addresses utilized to dispatch bomb threats that crippled over 7,000 Italian schools last week were uncovered in infostealer logs for more than a year, according to Hudson Rock researchers. The university email addresses used to send the threats were from Kafrelsheikh University in Egypt and Dayeh University in Taiwan.
The Egyptian email was captured by Vidar, a cybercrime tool that steals saved account credentials and passwords from infected computers, as early as October 2021. The Taiwanese email was found within the 284 million addresses included in the AlienTXTBASE infostealer dump, dated February 2025. While the exposure of these email addresses does not definitively indicate the culprits gained access to the accounts via the previous infostealer compromise, it does suggest sufficient time for the universities and Microsoft to take action against the accounts, which they should have been aware of.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
