Contas de e-mail universitárias comprometidas · Breach

[Single source] Compromised university account sends bomb hoaxes to European schools

Nov 12, 2026 · 1 min read

Bomb hoaxes were sent to thousands of European schools this week. The latest incident used a compromised email account at a Taiwanese university. The series also targeted airports and newsrooms with messages from legitimate institutions.

By HIFY Radar newsroom Updated 11/12/2026 11:45 AM Get this every day →← Back to the feed 2 sources

LowBreachNo software to update

In 30 seconds

Alleged

Da-Yeh University reportedly suspended an alumni email account after finding signs of compromise. A cyber-intelligence post alleges that this account and one from an Egyptian university were used to send hoax bomb threats to about 6,000 Italian schools. No bombs were reportedly found.

What happened

Alleged

IntCyberDigest says the threatening messages originated from at least two university accounts whose credentials had previously been exposed by password-stealing malware. The supplied evidence does not independently establish who accessed the accounts or sent the emails.

Why it matters

Inferred

The account history suggests a stolen password can remain useful long after the original infection, especially when an old login still works. A university address may also make a malicious message appear more credible to recipients.

What to do

Inferred

Organizations should disable exposed credentials, review sign-in and email activity, and require multifactor authentication where possible. Accounts associated with outdated or malware-infected devices deserve particular scrutiny.

Confirmed and still uncertain

Inferred

The post identifies two allegedly compromised accounts and says no explosives were found. The supplied evidence does not reveal the sender's identity, motive, access method beyond the credential exposure, or whether additional accounts participated.

What people are saying

Alleged

IntCyberDigest says it worked with Hudson Rock to connect the Egyptian account to an earlier Vidar infection. It also reports that Da-Yeh University considered its alumni account apparently hacked and suspended it.

Evolution

Alleged

According to the post, a Windows 7 computer associated with the Egyptian university account was infected with Vidar in 2021. The Taiwanese account's Microsoft credentials appeared in a stolen-password dump more than a year before the threats, and Da-Yeh University later suspended the account after detecting signs of compromise.

Reach

Observed

1 independent groups, 1 updates, and 4 engagements.

Technical detail

Inferred

Vidar is described here as a password stealer, malware designed to extract credentials from an infected computer. The alleged chain is straightforward: credentials were stolen or exposed, remained usable, and were later associated with university accounts used to distribute threats.

Sources and evidence

Observed

The supplied record consists of one IntCyberDigest post on X, including an image. It attributes investigative work to Hudson Rock and a response to Da-Yeh University, but provides no separate university statement, police report, credential records, or technical report for independent verification.