Reports have emerged of claims by the cybercrime group UmBra involving two Egyptian university institutions. The group allegedly targeted Helwan International Technological University (HITU), claiming to have extracted 481 GB of data. In a separate claim, it reported extracting 163 GB of data from Cairo University’s Faculty of Specific Education.
These figures and the alleged incidents have not been independently confirmed. They should therefore be treated as claims, not established evidence of successful data theft.
How Can Such Attacks Happen?
Cyberattacks do not always require sophisticated technical exploits. In some cases, attackers use stolen usernames and passwords to gain access to systems.
One possible source of stolen credentials is infostealer malware, which collects sensitive information from infected devices. Untrusted or cracked software can be one way such malware reaches a computer. However, there is no confirmed evidence that this was the method used in either reported case.
How Can Students and University Staff Protect Themselves?
The following precautions can help reduce the risk of account compromise:
- Avoid cracked software: Download applications from official websites and trusted sources.
- Enable multi-factor authentication (MFA): Use an additional verification step for university accounts whenever available.
- Secure potentially exposed accounts: Change your password through the university’s official portal if you suspect your credentials have been compromised. Contact the university’s IT team and ask them to invalidate active login sessions if necessary.
- Beware of suspicious links: Do not open links or attachments claiming to reveal leaked university data.
- Protect personal information: Do not download or redistribute files containing alleged leaked student or staff records.
Verify Before Sharing
Cybercriminal groups may publicize allegations to attract attention, create fear, or increase pressure on targeted organizations. Repeating their claims without verification can spread misinformation and amplify their messaging.
Students and staff should remain alert, follow official university communications, and report suspicious activity through trusted channels.
The key message is simple: Take potential threats seriously, verify the facts, and protect your accounts without spreading unconfirmed information.