CSIDB logo
Threat actor

ViktorLustig

Attribution profile

Type
Criminal
Location
Russia
Known incidents
1 incident
Sources
1 source
First seen
2022-08-10
Last seen
2022-08-10
Updated
2026-10-11 05:22
Aliases
2 aliases

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

ViktorLustig, also known as Lustig, is a threat actor linked to Russia who advertised a stolen database from the University of Kashmir on both dark web and clear net hacking forums in August 2022, offering the personal information of over one million students and employees for $250. This activity indicates a focus on the education sector in India with a financially motivated objective of monetizing compromised data. No specific malware families, initial access vectors, tooling styles, affiliations, or state connections are described in the available sources. The University of Kashmir breach represents the only publicly reported operation attributed to this actor.

Incidents

Attributed incidents are available to members.

1 incident

Sources

Sources available to members: 1 source.

CSIDB