{"id":46911,"date":"2025-04-28T15:57:31","date_gmt":"2025-04-28T22:57:31","guid":{"rendered":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/?p=46911"},"modified":"2025-05-02T11:02:38","modified_gmt":"2025-05-02T18:02:38","slug":"an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu","status":"publish","type":"post","link":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/","title":{"rendered":"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU"},"content":{"rendered":"\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Publicly, Western New Mexico University has simply said it\u2019s \u201cworking through technical issues,\u201d but employees\u2019 computers are displaying threatening messages signed by a notorious group, Qilin, that claims to have access to employee Social Security numbers, driver\u2019s licenses and more.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"has-text-align-left has-background\" style=\"background-color:#8080801f\"><em><strong>This <a href=\"https:\/\/searchlightnm.org\/western-new-mexico-university-cyberattack-russian-hackers-qilin-social-security-payroll\/\">story<\/a> was originally published at <a href=\"https:\/\/searchlightnm.org\/\">Searchlight New Mexico<\/a>, a NMPBS partner.<\/strong><\/em><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus.jpg\" alt=\"\" class=\"wp-image-46914\" srcset=\"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus.jpg 1920w, https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus-300x169.jpg 300w, https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus-1024x576.jpg 1024w, https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus-1536x864.jpg 1536w, https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus-24x14.jpg 24w, https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus-36x20.jpg 36w, https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus-48x27.jpg 48w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/><figcaption class=\"wp-element-caption\">Western New Mexico University\u2019s main campus in Silver City. Courtesy of Western New Mexico University<\/figcaption><\/figure>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\"><\/div>\n<\/div>\n\n\n\n<p>By Joshua Bowling, Searchlight New Mexico<\/p>\n\n\n\n<p>For nearly two weeks, Western New Mexico University\u2019s website and digital systems have been held hostage by what officials in internal emails have called the efforts of a \u201cforeign hacking group.\u201d The university has not publicly addressed the severity of the attack, but documentation obtained by Searchlight New Mexico indicates that an infamous Russian-speaking hacking group is behind the attack and claims to have access to employee payroll data, Social Security numbers and driver\u2019s licenses.<\/p>\n\n\n\n<p>In an image of an employee\u2019s computer shared with Searchlight, a note that threatens to leak the employee\u2019s Social Security number, driver\u2019s license and the university\u2019s \u201ccomplete network map\u201d is signed by Qilin, a hacking group that the federal government has accused of running a \u201cransomware-as-a-service\u201d operation. Qilin has earned a cutthroat reputation for being willing to go after anyone. Last year, it was accused of being involved in a cyberattack that <a href=\"https:\/\/www.theguardian.com\/technology\/article\/2024\/jun\/05\/who-are-qilin-the-cybercriminals-thought-behind-the-london-hospitals-hack\">forced<\/a> a hospital system to cancel more than 1,000 appointments and operations. Earlier this year, it made headlines for its role in <a href=\"https:\/\/www.axios.com\/local\/richmond\/2025\/03\/03\/lee-enterprises-cyberattack-richmond-times-dispatch\">stealing<\/a> the Social Security numbers and driver\u2019s licenses of journalists who work for newspapers owned by Lee Enterprises.<\/p>\n\n\n\n<p>Since April 13, the WNMU website has been inaccessible to the public. Faculty members told Searchlight that they and their students can use digital platforms like Canvas, which are hosted by a third party, but they\u2019re unable to use classroom tools that connect to the internet, like printers or projectors.<\/p>\n\n\n\n<p>In an image shared with Searchlight, one employee\u2019s laptop screen displayed the same threatening ransomware message whenever they attempted to open a file on their work computer. The message was signed \u201cQilin,\u201d and its contents bear the hallmark signs of ransomware, in which hackers hold sensitive data hostage until they receive a ransom payment. Even if they do receive a payment, groups like these may leak the sensitive information anyway.<\/p>\n\n\n\n<p>\u201cWe have downloaded compromising and sensitive data from your system\/network. Our group cooperates with the mass media. If you refuse to communicate with us and we do not come to an agreement, your data will be reviewed and published on our blog,\u201d the message says. \u201cData includes: Employees personal data, CVs, DL, SSN. Complete network map including credentials for local and remote services. Financial information including clients data, bills, budgets, annual reports.\u201d<\/p>\n\n\n\n<p>The note instructs recipients to download a Tor browser \u2014 commonly used to access the dark web \u2014 and visit a specific site to begin negotiations with the hackers. \u201cYou need cipher key\/our decrypt software to restore your files \u2026 the police or authorities will not be able to help you get the cipher key. We encourage you to consider your decisions.\u201d<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Payday delayed<\/h2>\n\n\n\n<p>On April 25 \u2014 a Friday, payday at WNMU \u2014 hourly and student employees said they had not yet received their direct deposits. In an email to employees reviewed by Searchlight, the university said the problem \u201cstemmed from an unexpected complication during the file upload process to the bank\u201d and said some employees might experience further delays in receiving the payments. \u201cIf this delay results in any overdraft fees, the university will reimburse those charges,\u201d the email said.<\/p>\n\n\n\n<p>The cyberattack comes at an inopportune time for university leaders, who are working to rebuild trust with the faculty senate, student body, state government and the surrounding Silver City community. Since December, when former university president Joseph Shepard <a href=\"https:\/\/searchlightnm.org\/after-a-year-of-scrutiny-joseph-shepard-to-resign-as-wnmu-president\/\">resigned<\/a> from his post and the governor demanded the resignations of the sitting regents, the campus has been without a permanent leader. New regents have only been on the job since late March, and now find themselves leading a university in disarray.<\/p>\n\n\n\n<p>Threats like these have become common enough in local government that in 2022 the U.S. Department of Homeland Security launched the <a href=\"https:\/\/www.cisa.gov\/cybergrants\/slcgp\">\u201cState and Local Cybersecurity Grant Program,\u201d<\/a> the first of its kind, to help upgrade and protect IT networks across the country. It <a href=\"https:\/\/www.dhs.gov\/archive\/news\/2024\/09\/23\/dhs-announces-2799-million-grant-funding-fiscal-year-2024-state-and-local\">awarded<\/a> nearly $280 million in grant funding for fiscal year 2024 \u2014 nearly $4 million of which <a href=\"https:\/\/www.fema.gov\/grants\/preparedness\/state-local-cybersecurity-grant-program\/fy-24-nofo\">went<\/a> to New Mexico \u2014 and anticipated awarding $1 billion over four years.<\/p>\n\n\n\n<p>In an email to executive managers on April 14 \u2014 one day after the attack \u2014 Provost and Vice President of Academic Affairs Jack Crocker said WNMU \u201cexperienced a cyberattack from a foreign hacking group\u201d and said the university had the \u201congoing collective support and assistance\u201d of the New Mexico Higher Education Department, the Federal Bureau of Investigation and \u201cother university cyber experts to help us combat the attack.\u201d<\/p>\n\n\n\n<p>In an email to Searchlight, Higher Education Department spokesperson Auriella Ortiz said the agency was working closely with the state Department of Information Technology to \u201cevaluate\u201d the issue.<\/p>\n\n\n\n<p>\u201cWNMU is undertaking a formal investigation to identify the scope of the incident and to facilitate necessary remediation efforts,\u201d she wrote. \u201cOur primary objective as state agencies is to support the university in restoring and continuing normal business operations following this incident.\u201d<\/p>\n\n\n\n<p>Whether that collective firepower will be enough to combat the hacking group remains to be seen. Qilin has developed a reputation for wreaking havoc wherever it goes. Last year, it was accused of being involved with an attack on a healthcare provider in London that forced hospitals to immediately halt operations. Qilin has been operational since 2022 and operates \u201cransomware as a service,\u201d according to a 2024 <a href=\"https:\/\/www.hhs.gov\/sites\/default\/files\/qilin-threat-profile-tlpclear.pdf\">report<\/a> from the U.S. Department of Health and Human Services. This allows independent hackers to use its digital tools in exchange for a 15 to 20 percent share of the ransom payments. The 2024 report says that the group\u2019s typical demand for ransom is $50,000 to $800,000.<\/p>\n\n\n\n<p>\u201cActors practice double extortion and operate a data leak site where victims are posted. Victims are directed to communicate with the attackers via dark web portals or encrypted messaging services, ensuring the attackers\u2019 anonymity and complicating law enforcement efforts to track interactions,\u201d the HHS report says. \u201cPayments are demanded in cryptocurrencies, such as Bitcoin or Monero. However, even after payment, there is no guarantee that victims will receive the decryption tools required to recover their data.\u201d<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">System outage or cyberattack?<\/h2>\n\n\n\n<p>Meanwhile, the severity of the situation hasn\u2019t come through in the school\u2019s public messaging (\u201cWhile select systems remain offline,\u201d a recent WNMU Facebook post said, \u201ckey academic and communications platforms continue to be accessible.\u201d) For nearly two weeks, WNMU\u2019s website has been down and employees have had varying degrees of access to their emails. Everything on the university website \u2014 minutes and agendas for Board of Regents meetings, campus announcements and calendars of events \u2014 has been blocked from public view, and students have had to use alternative login methods to access online homework, lectures and exams.<\/p>\n\n\n\n<p>In public social media posts and emails to students, the university has not blamed a cyberattack or other nefarious activity for leading to the outages. Instead it has simply said it is \u201cworking through technical issues.\u201d Internal communications, however, show that the situation is more serious than the university\u2019s public depictions.<\/p>\n\n\n\n<p>The university has also enlisted the help of private cybersecurity companies. A number of Wi-Fi hotspots have been installed on campus and students have received instructions on alternative ways to access Canvas, an online coursework program used by universities around the nation.<\/p>\n\n\n\n<p>\u201cIn the meantime, the plan is to keep campus open,\u201d Crocker wrote in his email to managers. \u201cFace-to-face classes will meet and alternative access to online\/hybrid classes is being created. However, university internet, email, phones, and connections outside WNMU are inoperable at this time and must remain so until the issues are resolved. Scheduled events, such as the scholarship luncheon, softball games, Cultural Affairs lectures will continue.\u201d<\/p>\n\n\n\n<p>While faculty and hourly employees have received different communications from the top, students have seemingly been left in the dark as to the serious nature of the system outage.<\/p>\n\n\n\n<p>In an email to students last week, the university made no mention of a cyberattack. Instead, it told students that WNMU \u201cis currently addressing technical issues affecting access to several key web-based services.\u201d It also told students that \u201cprotecting your personal data \u2014 including your student status \u2014 is a top priority.\u201d<\/p>\n\n\n\n<p>In a statement Friday, university spokesperson Mario Sanchez said \u201cimpacted individuals\u201d would be notified if their personal information was involved in the attack.<\/p>\n\n\n\n<p>\u201cThe university\u2019s investigation into this incident is ongoing. If the investigation determines that personal information was involved, impacted individuals will be notified in accordance with applicable law. We understand there was an issue with payroll processing for the current pay period, but our bank has let us know that the issue has been corrected and payroll should be posted today.\u201d<\/p>\n\n\n\n<p><em>This story was originally published at <a href=\"https:\/\/searchlightnm.org\/\">Searchlight New Mexico<\/a>, a NMPBS partner.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Publicly, Western New Mexico University has simply said it\u2019s \u201cworking through technical issues,\u201d but employees\u2019 computers are displaying threatening messages signed by a notorious group, Qilin, that claims to have access to employee Social Security numbers, driver\u2019s licenses and more. This story was originally published at Searchlight New Mexico, a NMPBS partner. By Joshua Bowling,&hellip;<\/p>\n","protected":false},"author":34,"featured_media":46914,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10906],"tags":[10907],"class_list":["post-46911","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-partner-stories","tag-partner-stories"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU - New Mexico In Focus<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU - New Mexico In Focus\" \/>\n<meta property=\"og:description\" content=\"Publicly, Western New Mexico University has simply said it\u2019s \u201cworking through technical issues,\u201d but employees\u2019 computers are displaying threatening messages signed by a notorious group, Qilin, that claims to have access to employee Social Security numbers, driver\u2019s licenses and more. This story was originally published at Searchlight New Mexico, a NMPBS partner. By Joshua Bowling,&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/\" \/>\n<meta property=\"og:site_name\" content=\"New Mexico In Focus\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-28T22:57:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-02T18:02:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Joshua Bowling\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joshua Bowling\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/\"},\"author\":{\"name\":\"Joshua Bowling\",\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/#\\\/schema\\\/person\\\/0c7950de4df3511d895e3936eb08ee13\"},\"headline\":\"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU\",\"datePublished\":\"2025-04-28T22:57:31+00:00\",\"dateModified\":\"2025-05-02T18:02:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/\"},\"wordCount\":1522,\"image\":{\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/WNMU-Campus.jpg\",\"keywords\":[\"Partner Stories\"],\"articleSection\":[\"Partner Stories\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/\",\"url\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/\",\"name\":\"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU - New Mexico In Focus\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/WNMU-Campus.jpg\",\"datePublished\":\"2025-04-28T22:57:31+00:00\",\"dateModified\":\"2025-05-02T18:02:38+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/#\\\/schema\\\/person\\\/0c7950de4df3511d895e3936eb08ee13\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/WNMU-Campus.jpg\",\"contentUrl\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/WNMU-Campus.jpg\",\"width\":1920,\"height\":1080,\"caption\":\"Western New Mexico University\u2019s main campus in Silver City. Courtesy of Western New Mexico University\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/#website\",\"url\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/\",\"name\":\"New Mexico In Focus\",\"description\":\"Involved, Informed, In-depth Journalism\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/#\\\/schema\\\/person\\\/0c7950de4df3511d895e3936eb08ee13\",\"name\":\"Joshua Bowling\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69cc8e4b79f68de06b2d53cb55f35ca5aecaf9eb0cfa98342890ae004a260cd7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69cc8e4b79f68de06b2d53cb55f35ca5aecaf9eb0cfa98342890ae004a260cd7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69cc8e4b79f68de06b2d53cb55f35ca5aecaf9eb0cfa98342890ae004a260cd7?s=96&d=mm&r=g\",\"caption\":\"Joshua Bowling\"},\"url\":\"https:\\\/\\\/www.newmexicopbs.org\\\/productions\\\/newmexicoinfocus\\\/author\\\/joshuabowling\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU - New Mexico In Focus","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/","og_locale":"en_US","og_type":"article","og_title":"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU - New Mexico In Focus","og_description":"Publicly, Western New Mexico University has simply said it\u2019s \u201cworking through technical issues,\u201d but employees\u2019 computers are displaying threatening messages signed by a notorious group, Qilin, that claims to have access to employee Social Security numbers, driver\u2019s licenses and more. This story was originally published at Searchlight New Mexico, a NMPBS partner. By Joshua Bowling,&hellip;","og_url":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/","og_site_name":"New Mexico In Focus","article_published_time":"2025-04-28T22:57:31+00:00","article_modified_time":"2025-05-02T18:02:38+00:00","og_image":[{"width":1920,"height":1080,"url":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus.jpg","type":"image\/jpeg"}],"author":"Joshua Bowling","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Joshua Bowling","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/#article","isPartOf":{"@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/"},"author":{"name":"Joshua Bowling","@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/#\/schema\/person\/0c7950de4df3511d895e3936eb08ee13"},"headline":"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU","datePublished":"2025-04-28T22:57:31+00:00","dateModified":"2025-05-02T18:02:38+00:00","mainEntityOfPage":{"@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/"},"wordCount":1522,"image":{"@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/#primaryimage"},"thumbnailUrl":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus.jpg","keywords":["Partner Stories"],"articleSection":["Partner Stories"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/","url":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/","name":"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU - New Mexico In Focus","isPartOf":{"@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/#primaryimage"},"image":{"@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/#primaryimage"},"thumbnailUrl":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus.jpg","datePublished":"2025-04-28T22:57:31+00:00","dateModified":"2025-05-02T18:02:38+00:00","author":{"@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/#\/schema\/person\/0c7950de4df3511d895e3936eb08ee13"},"breadcrumb":{"@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/#primaryimage","url":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus.jpg","contentUrl":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-content\/uploads\/2025\/04\/WNMU-Campus.jpg","width":1920,"height":1080,"caption":"Western New Mexico University\u2019s main campus in Silver City. Courtesy of Western New Mexico University"},{"@type":"BreadcrumbList","@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/"},{"@type":"ListItem","position":2,"name":"An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU"}]},{"@type":"WebSite","@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/#website","url":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/","name":"New Mexico In Focus","description":"Involved, Informed, In-depth Journalism","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/#\/schema\/person\/0c7950de4df3511d895e3936eb08ee13","name":"Joshua Bowling","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/69cc8e4b79f68de06b2d53cb55f35ca5aecaf9eb0cfa98342890ae004a260cd7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/69cc8e4b79f68de06b2d53cb55f35ca5aecaf9eb0cfa98342890ae004a260cd7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/69cc8e4b79f68de06b2d53cb55f35ca5aecaf9eb0cfa98342890ae004a260cd7?s=96&d=mm&r=g","caption":"Joshua Bowling"},"url":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/author\/joshuabowling\/"}]}},"_links":{"self":[{"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/posts\/46911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/users\/34"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/comments?post=46911"}],"version-history":[{"count":5,"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/posts\/46911\/revisions"}],"predecessor-version":[{"id":46920,"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/posts\/46911\/revisions\/46920"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/media\/46914"}],"wp:attachment":[{"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/media?parent=46911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/categories?post=46911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newmexicopbs.org\/productions\/newmexicoinfocus\/wp-json\/wp\/v2\/tags?post=46911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}