Cyber spying on universities

Cyber spying on universities is the practice of obtaining secrets and information without the permission and knowledge of the university through its information technology system. Universities in the United Kingdom, including Oxford and Cambridge, have been targets,[1] as have institutions in the US[2] and Australia.[3]

Universities are targets for cyber espionage due to the wealth of personally identifiable information they possess on students, employees, people who buy tickets to sporting events, and, if the university has an academic medical center, on patients treated there. Information about research projects with industrial or military application are also targets. The culture of information sharing within universities tends to make them easy targets.[4][5][6]

Breaches can occur from people sharing credentials, phishing, web-crawlers inadvertently finding exposed access points, password cracking, and other standard hacking methods.[5] University credentials are bought and sold on web forums, darknet markets and other black markets.[7][8][9]

The result of such efforts have included theft of military research into missile design or stealth technologies,[1][10] as well as medical data.[11]

As a precaution against such attacks, Stanford University advises its employees to take IT precautions when they travel abroad.[12]

Moreover, in March 2018, the U.S. charged and sanctioned nine Iranians and the Iranian company Mabna Institute for hacking and attempting to hack hundreds of universities on behalf of the Iranian government.[2][13][14]

Credentials used by Sci-Hub to access paywalled scientific articles have been subsequently used by hackers seeking to breach university firewalls to access other information.[7]