Threat Landscape Dashboard

Assessing today's threats and the relationships between them

Schools And Universities Under Attack

The Silent Librarian threat actor, also known as TA407 and Cobalt Dickens, targeted the academia sector with spear-phishing emails with links to malicious websites which mimicked multiple universities around the world. The group hosted the fake domains under the .me, .tk, and .cf top level domains and used the sites to capture credentials from unsuspecting victims. The domains used in the operation were hosted on Cloudflare and on servers located in Iran.
Name Modified Date Sources
Schools And Universities Under Attack 2020-10-20