Threat Actors Allegedly Defaced Australian University Subdomains

The affected subdomains, support.queensford.edu.au and eform2.queensford.edu.au, displayed a message indicating the involvement of a group identified as “./Esteem_Restoration_Eagle.”

This attack highlights the ongoing vulnerability of educational institutions to cyber threats.

Details of the Incident

The defacement was first reported by cyberundergroundfeed, where they shared that the subdomains had been altered to display the message: “Bocil Kematian Is Here.. We Are ./Esteem_Restoration_Eagle.”

See more

🎓 **#Australian University Subdomains Reportedly Defaced by ./Iman19X** 🎓

Two subdomains of a #Australia university [support.queensford[.]edu[.]au] and [eform2.queensford[.]edu[.]au] allegedly defaced with message: “Bocil Kematian Is Here.. We Are:… pic.twitter.com/qziHhqrYNq

— cyberundergroundfeed (@cyberfeeddigest) October 29, 2024

The phrase “Bocil Kematian,” which translates to “Child of Death” in Indonesian, suggests a possible connection to Indonesian hacking groups or individuals.

The use of such phrases is often intended to instill fear or demonstrate the hackers’ capabilities.

The specific motivations behind this attack remain unclear. However, defacements are typically aimed at showcasing the attackers’ skills, spreading political messages, or simply causing disruption.

In this case, it appears to be more about making a statement rather than causing significant damage or stealing data.

Impact on Queensford College

Queensford College, like many educational institutions, relies heavily on its digital infrastructure for administrative and educational purposes.

The defacement of these subdomains could disrupt services provided through these online platforms, affecting both students and staff.

While there is no indication that sensitive data was compromised during this attack, the incident underscores the need for robust cybersecurity measures to protect against such threats.

The college has not yet released an official statement regarding the incident.

However, it is expected that they are working with cybersecurity experts to investigate the breach and restore normal operations.

This defacement incident is part of a broader trend of increasing cyberattacks targeting educational institutions worldwide.

Schools and universities have become attractive targets for cybercriminals due to their vast amounts of personal data and often outdated security systems.

The COVID-19 pandemic has further exacerbated this issue as remote learning has increased reliance on digital platforms.

Also Read:

Operation Magnus disrupted infostealer Malwares Redline and Meta

See more