SN0WV3IL
New Member
- Joined
- September 17, 2026
- Messages
- 4
- Reaction score
- 1
- Points
- 1
- Thread Author
- #1
In early to late-middle of the year 2026, several tens of Nigeria-based school websites
were hacked by Anonymous and SN0WV3IL team. Team had initially leveraged an exposed
web-directory (child's play) on one of these websites containing backup files of S.Q.L. database(s)
that disclosed everything from login credentials to personal student or teacher information.
Soon after, it was found that multiple school websites that utilize
Zeon Academy Professional platform include a default, built-in, set of administrator accounts
that re-use a weak password.
Using features from the hijacked administrative staff panels, the hackers : exfiltrated the near entirety
of personnel data, vandalized / flooded the websites with pornographic images of teachers / students, spammed
images and discussion posts that promote racism against black Nigerians / hate-speech, deleted randomized
staff / students, changed student / teacher passwords, and sent S.M.S. messages from the hacked administrators
to harass families and notify them of them of the attack.
Ransom notes were posted on the website discussion boards threatening to leak all gathered information unless a payment was met. Over 30 different school websites were attacked by the group. It is now two days past the posted ransom without response or payment. Anonymous is now holding up their promise with this free dump of databases and included executive credentials. Note with concern from S.W.I.M. that based on the inactivity observed on the websites and lack of response to the ransom post, some school database info may be dated / out-dated.
File Hosting Mirror #1 : http://eternalcbrzpicytj4zyguygpmkj...onion/file/44e22148f362b8/ce5255c29bce81d3.xz
were hacked by Anonymous and SN0WV3IL team. Team had initially leveraged an exposed
web-directory (child's play) on one of these websites containing backup files of S.Q.L. database(s)
that disclosed everything from login credentials to personal student or teacher information.
Soon after, it was found that multiple school websites that utilize
Zeon Academy Professional platform include a default, built-in, set of administrator accounts
that re-use a weak password.
Using features from the hijacked administrative staff panels, the hackers : exfiltrated the near entirety
of personnel data, vandalized / flooded the websites with pornographic images of teachers / students, spammed
images and discussion posts that promote racism against black Nigerians / hate-speech, deleted randomized
staff / students, changed student / teacher passwords, and sent S.M.S. messages from the hacked administrators
to harass families and notify them of them of the attack.
Ransom notes were posted on the website discussion boards threatening to leak all gathered information unless a payment was met. Over 30 different school websites were attacked by the group. It is now two days past the posted ransom without response or payment. Anonymous is now holding up their promise with this free dump of databases and included executive credentials. Note with concern from S.W.I.M. that based on the inactivity observed on the websites and lack of response to the ransom post, some school database info may be dated / out-dated.
File Hosting Mirror #1 : http://eternalcbrzpicytj4zyguygpmkj...onion/file/44e22148f362b8/ce5255c29bce81d3.xz