Skip to content
NewA calmer, faster ZeroHour
Phishing & fraudmedium

Study maps phishing cluster aimed at German-speaking universities

Original title: A Case Study of a Phishing Cluster Targeting German Universities

arXiv cs.CRby Raphael Springer ()1 min read
Read at arxiv.org
AI summary · x-ai/grok-4.7Summaries by Vani AI

Authors count 25 confirmed campus attacks from February 2022 to February 2023, affecting 5% of German universities.

A case study measures cyberattacks on universities in German-speaking areas and documents a phishing cluster lasting more than three years. Of 93 targeted universities, 58 were German, about 14% of Germany's 423 universities. The emails were sent through university systems with compromised staff credentials and university VPN tunnels.

Unconfirmed: The paper does not name the cluster or say whether the activity continues.

Key facts
  • The reviewed attacks ran from February 2022 to February 2023.
  • German targets were 62% of the 93 universities in the cluster.
  • Phishing used valid credentials of university-associated personnel.
  • Messages traversed university VPN tunnels.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
ATT&CK
T1566 PhishingT1078 Valid AccountsT1133 External Remote Services
Tags
phishinguniversitiesgermanycompromised-credentialsvpn
Countries
Germany

From the original article

1 min read at arxiv.org

In light of recent ransomware attacks, this study analyzes and measures the impact of cyberattacks against academic institutions in German-speaking areas. First, we provide an overview of 25 confirmed cyberattacks against universities in German-speaking areas between February 2022 and February 2023.

arXiv cs.CR

By Raphael Springer · arxiv.org

Read the full article at arXiv cs.CR

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.