Recently, a new cybercriminal attack targeting universities took place . However, this particular attack was quite different from the others that have become known in recent months. In most cases, we are talking about ransomware attacks that target university networks and encrypt systems . Also, attackers usually steal data (of students, employees, etc.), before encrypting it, and then demand a ransom, while threatening to leak the stolen data if they do not receive the money.
In this particular attack, criminals managed to break into the networks of three Swiss universities and steal employees' salaries. One of the three universities that was breached is the University of Basel.
“According to our information, many universities in Switzerland have been affected,” said Martina Weiss, Secretary General of the Conference of Rectors of Swiss Universities.
As it turns out, cybercriminals gained access to the universities using login credentials they had available through phishing attacks. Phishing attacks are often the first step to larger attacks. It is a technique designed to trick users into giving away their personal information. In most cases, victims think they are giving the information to a trustworthy person or company.
Prosecutors investigating the case said the hackers directly penetrated the university's system using stolen personal data, then changed beneficiary accounts and stole employees' salaries.
According to Swissinfo, cybercriminals managed to steal a large sum of money from employees. Experts say the amount is in the six-figure range.
The swissuniversities organization sent out a warning email to keep universities on their toes. The University of Zurich was also reportedly targeted by criminals, but was able to thwart the attack because its employees were aware of the phishing attempts.
