Ransomware

Bl@Ckt0r Claims Responsibility for Attack on the National Experimental University of Greater Caracas (UNEXCA)

In December 2021, the threat actor Bl@Ckt0r claimed to have breached the National Experimental University of Greater Caracas (UNEXCA). According to a screenshot from the attacker’s own leak site (without independent verification), 14 GB of allegedly stolen data—including a database and more than 11,000 documents—was reportedly offered for sale for $30,000. It has not yet been verified whether the data was actually leaked or whether the university suffered any material losses.

Overview

Missing evidence

It remains unconfirmed whether data was actually leaked or whether there was any actual loss.The exact date of the violation has not been specified, except that it occurred in November 2021.

Impact details

The Bl@Ckt0r/Blacktor ransomware trackers and the 360 Ransomware Report list UNEXCA/unexca.edu.ve as a victim. The alleged 14 GB and 11,000 documents have not yet been verified by the university.

alleged university documentsalleged database

Classification & severity

Category
Malicious code
Subtype
Ransomware
Confidence
Medium

A public ransomware or data breach tracker, or a report on ransomware, identifies the victim as part of a ransomware or extortion campaign; confirmation from the victim is not yet available.

Severity assessment

Medium
Information impact
Suspected
Affected scope
Organization-wide
Critical service
None
Public confidence
Limited
Recoverability
Extended

Cases of ransomware or extortion have been corroborated by public trackers or reports, but have not been officially confirmed, nor has their operational impact been validated.

Data exfiltration· Claimed Confidentiality

Timeline

Claim

Bl@Ckt0r listed the National Experimental University of Greater Caracas (UNEXCA) as an alleged victim.

Evidence & sources

3 sources