Hijacked email accounts complicate investigations into European bomb hoaxes
Bomb threats sent to thousands of European schools originated from a compromised Taiwanese university email account.
Bomb threats sent to thousands of schools across Europe this week originated from a compromised email account at Taiwan's Da-Yeh University. This incident is part of a series of hoax threats targeting institutions using legitimate, hijacked email accounts, which complicates investigations by bypassing spam filters and authentication checks. While no actor has been officially attributed, the coordinated nature suggests a potential nation-state-aligned campaign focused on disruption and intimidation rather than malware delivery.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Proofpoint?
Get an email when a new story names Proofpoint, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers compromised a legitimate email account at Taiwan's Da-Yeh University and used it to send coordinated bomb threats to thousands of European schools, bypassing spam filters and email authentication checks because the messages originated from a trusted domain. This highlights how weak account security at any institution can be weaponized far beyond its own network perimeter, turning a trusted sender into a tool for large-scale disruption. The hijacked account complicated law enforcement investigations because authentication mechanisms like SPF, DKIM, and DMARC saw the emails as legitimate. Organizations must treat account compromise not just as an internal risk but as a potential vector for harm to external parties, with serious reputational and legal consequences.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Email authentication (DMARC)
Nobody can send email that pretends to come from your domain.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.