# Cybersecurity Experts Link Bomb Threats to Soviet-Era KGB References Mass email threats targeting European schools and media use historical Soviet intelligence aliases. - **Source:** [SVT – Utrikes](https://www.svt.se/nyheter/utrikes) - **Published:** 2026-11-11 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/f06ed2c6-908f-42c2-856b-073a6059cab8 ## Widespread European Bomb Threats Thousands of schools across Italy, Northern Ireland, and Scotland faced bomb threats in recent days. These incidents, which also targeted media organizations and aviation sectors, have caused significant disruption. Authorities are currently investigating the source of these coordinated messages, which have triggered widespread evacuations and heightened security protocols across multiple European regions. ## The Andropov Alias Connection Cybersecurity expert Fredrik Blix suggests the sender name 'Michail Andropov' is a deliberate historical allusion. The name likely references Yuri Andropov, the former KGB chief and Soviet leader during the 1980s. This figure was historically associated with influence operations and psychological warfare tactics designed to disrupt Western societal stability and cohesion. ## Low-Complexity Attack Methodology Despite the massive scale of the disruption, the technical execution of these attacks was reportedly not highly advanced. Blix notes that the perpetrators utilized publicly available email addresses, which he describes as 'low-hanging fruit' easily harvested from the internet. Sending thousands of emails simultaneously is a relatively simple task for modern automated systems. ## Compromised Infrastructure Origins Evidence indicates that the attackers likely hijacked a computer server located at a university in Taiwan to facilitate the mass distribution of these emails. By leveraging an external academic network, the perpetrators masked their true location while successfully flooding target inboxes. This highlights the ongoing vulnerability of institutional networks to unauthorized remote access. ## Psychological Impact Over Technicality The primary objective of this campaign appears to be psychological disruption rather than technical destruction. By forcing the evacuation of hundreds of schools in Italy, the attackers achieved significant real-world consequences with minimal effort. The operation demonstrates how simple digital tools can be weaponized to create widespread fear and operational chaos. ## Historical Influence Tactics The use of Soviet-era references aligns with historical patterns of disinformation and influence operations. Experts note that these tactics focus on spreading false narratives to destabilize Western institutions. By invoking the legacy of the KGB, the attackers may be attempting to amplify the perceived threat level and create a sense of historical dread. ## Institutional Vulnerability Assessment The ease with which these schools were targeted underscores a critical weakness in public sector digital security. Educational institutions often maintain open contact directories, making them prime targets for mass-mailing campaigns. Strengthening email filtering systems and securing institutional servers are essential steps to prevent such low-effort, high-impact disruptions from recurring in the future. ## Ongoing Security Investigations Authorities are continuing to analyze the digital footprint left by the 'Michail Andropov' sender to determine the true identity of the actors involved. While the technical methods are straightforward, the coordination required for such a broad attack suggests a organized effort. Security agencies remain on high alert for further potential threats. ## Sources covering this story - https://www.svt.se/nyheter/utrikes/experten-avsandaren-kan-hanvisa-till-avliden-kgb-chef — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._