Sign inStart freeBook a demo

Who is targeting education and research organisations?

Public reporting links 17 threat groups to attacks on education and research organisations, including TA505, Molerats and Gelsemium. 8 of them are thought to have state backing. This page lists them and where they are thought to operate from, so you can see who might come after a business like yours.

Start free →Book a demo

Free to readNo account neededBuilt from public reporting

Threat groups linked
17
Sectors with their own page
3
Suspected state backing
8 of 17
Countries of origin
4
Built from public reporting about each group
Threat groups

Which groups target education and research organisations?

All 17 groups public reporting links to this sector. Open one to see who it is, how it works and the sources behind it.

Showing 15 of 17Browse every threat group →
Sectors inside

What counts as education and research?

Public reporting describes victims in many ways. These narrower sectors each have their own list of groups. Names that mean the same thing share one page.

Higher education14 groups · Also called educationUniversities2 groupsScientific research1 group
FAQ

Questions about education and research organisations

Something else? Talk to the team →

Public reporting links 17 threat groups to attacks on education and research organisations, including TA505, Molerats, Gelsemium, APT-C-12 and AridViper.

Most are thought to operate from China (9), Iran (3) and Palestinian Territories (2). 8 of the 17 are thought to have backing from a government.

Public reporting describes education and research victims in several ways. The narrower sectors with groups of their own are higher education (14), universities (2) and scientific research (1).

Create an account and tell us the software you run. We match it against known flaws, rank each one from 0 to 100 using evidence it is being exploited, let you know as soon as something changes that affects you, and show which groups and ransomware gangs are hitting your sector.

Free account

Is your business on their list?

This page shows who targets education and research organisations. Your account shows what that means for you: we match the software you run to the flaws threat groups use, rank them 0 to 100 and tell you as soon as we spot something that affects you.

  • Over 900 group profiles in the app, every claim backed by a quote and a source link.
  • Your sector at a glance: which threat groups and ransomware gangs are hitting it.
  • Flaws in the software you run, ranked 0 to 100, with threat group activity counted in.
  • A PDF dossier on any group, ready to send to your board or your IT provider.
Start free →Book a demo
Get started

Know who targets your sector, and what to fix first.

Create a free account and tell us the software you run. We match the software you run against flaws threat groups use, rank them 0 to 100 and keep watching, so you hear about it as soon as we know.

Start free →Book a demo

No card neededNothing to installIntelligence and alerts free