AuditTeam ransomware claims compromise of vit.ac.in
Free public brief. The indicators, the detections with Splunk SPL already written (plus Elastic and KQL where they apply), and a Slack alert the next time this touches a vendor you run are in the app — free account, no card.
AuditTeam ransomware operators claim to have compromised vit.ac.in with exfiltration of employee credentials and user data.
AuditTeam ransomware operators have listed vit.ac.in (Vellore Institute of Technology, India) on their leak site, claiming a compromise affecting approximately 528 compromised employees, 37,512 compromised users, and 739 third-party employee credentials. The threat actors also report identifying 200 DNS records and an external attack surface associated with the victim organization. The claim includes a leak screenshot posted on the ransomware-operator infrastructure. This appears to be a post-compromise announcement typical of double-extortion ransomware campaigns, where operators demand payment under threat of data publication. Defenders at educational institutions should treat this as confirmation of a breach affecting credential material and user data.
Mentioned in this report
Source reporting: https://www.ransomware.live/id/dml0LmFjLmluQEF1ZGl0VGVhbQ==
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), the actors and CVEs it names as live profiles, and the vendor research on the same campaign — the primary source the news paraphrased, cited and read directly.
It sits in a corpus of 13,854 reports from 146 sources, 616 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Name the vendors you run and Slack hears about the reports that touch them — about forty a week that are yours, not the four hundred that are not.
Create a free account What it costs