Erick Vaysman
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Erick Vaysman, also referenced as Eric Vaysman in open sources, is an individual associated with a 2015 cyber incident that occurred while he was a student at a Long Island high school in the United States of America. He acted alongside two fellow students, Daniel Soares and Alex Mosquera, after school hours to install a hardware keylogging device on a classroom computer. The device recorded keystrokes, allowing the group to capture login credentials for the school’s network. Using those credentials they gained unauthorized access to the school’s data management system, where they altered academic records and accessed certain student information. Following detection by school officials, the breach was contained, the unauthorized changes were reversed, and the perpetrators were arrested and charged with offenses including burglary and computer tampering.
The incident demonstrates a focus on the education sector, specifically targeting a public high school located in Long Island, New York, within the United States. The observed objective was the unauthorized modification of academic data, namely the adjustment of personal grades and the alteration of class schedules for hundreds of students, alongside the retrieval of student identification numbers, names, addresses, and contact information. The tactics employed involved physical access to install a hardware keylogger, credential harvesting through that device, and subsequent use of the harvested credentials to log into the school’s system and navigate to the grade and schedule management functions. No malware families, software exploits, or remote access tools were described in the reporting, and the tooling style was limited to the physical keylogger device. The initial access vector relied entirely on the actors’ ability to enter the school facility after hours and attach the hardware to a target keyboard.
Attribution details do not indicate any state sponsorship, affiliation with a criminal consortium, or involvement in broader threat campaigns; the actors were identified as students acting independently in this single episode. The only publicly reported operation linked to Erick Vaysman is the 2015 Commack High School breach, which remains the definitive example of his known activity. No additional incidents or patterns have been attributed to him in the available sources, and further details about subsequent behavior or associations are not present in the provided material.
Incidents
Attributed incidents are available to members.
1 incident