{
  "id": 19834808,
  "title": "Email addresses used in European school bomb hoaxes spotted in old infostealer logs",
  "url": "https://urgent.news/2026/11/13/email-addresses-used-in-european-school-bomb-hoaxes-spotted-in-old",
  "topic": "science",
  "section": "Science",
  "published": "2026-11-13T16:41:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/cyber-crime/2026/11/13/email-addresses-used-in-european-school-bomb-hoaxes-spotted-in-old-infostealer-logs/5309765"
  },
  "original_language": "en",
  "account": "The email addresses utilized to dispatch bomb threats that crippled over 7,000 Italian schools last week were uncovered in infostealer logs for more than a year, according to Hudson Rock researchers. The university email addresses used to send the threats were from Kafrelsheikh University in Egypt and Dayeh University in Taiwan. The Egyptian email was captured by Vidar, a cybercrime tool that steals saved account credentials and passwords from infected computers, as early as October 2021. The Taiwanese email was found within the 284 million addresses included in the AlienTXTBASE infostealer dump, dated February 2025. While the exposure of these email addresses does not definitively indicate the culprits gained access to the accounts via the previous infostealer compromise, it does suggest sufficient time for the universities and Microsoft to take action against the accounts, which they should have been aware of.",
  "summary": "Researchers say organizations should have detected and secured them sooner",
  "key_points": [
    "Email addresses used in bomb hoaxes discovered in infostealer logs",
    "Kafrelsheikh University in Egypt and Dayeh University in Taiwan involved",
    "Emails traced back to October 2021 and February 2025"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}