Hackers attacked leading Russian universities and "broke" their databases

Specialists from Group-IB, a cybersecurity company, spoke about the attacks

DeadBolt ransomware virus targeting Russian leading and regional universities.

Discuss

Attacks were made on data storage systems of universities. After the attacks, it was not possible to recover the data.

DeadBolt is a ransomware that primarily attackssmall and medium businesses, designed to encrypt databases. Moreover, the virus operators require a ransom not only from users, but also from equipment manufacturers for technical information about the vulnerability that they used during the attack.

It is noted that in total 3.6 thousand devices were recorded in the world that were attacked by DeadBolt.

“Group-IB forensics successfully analyzeda sample of DeadBolt ransomware obtained during one of the responses in Russia. Most often, small and medium-sized businesses become victims of ransomware, but Group-IB experts are aware of several cases of attacks on leading Russian universities,” Group-IB said.