Techcrunch

La Sapienza University in Rome Offline Due to Ransomware Attack

First seen 5 Feb 2026, 23:27 UTC • Bleepingcomputer

+2 •52.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

La Sapienza University in Rome has experienced a significant disruption to its IT systems following a ransomware attack. The university, which serves around 120,000 students, took its systems offline as a precautionary measure to protect data integrity and is currently investigating the incident while working to restore services.

How this analysis works

Attack Flow

17 entities, 56 inferred relationships (STIX 2.1).

Technique (4)

Ransomware
T1041 - Exfiltration Over C2 Channel
T1486 - Data Encrypted for Impact
T1567 - Exfiltration Over Web Service

Campaign (1)

La Sapienza Cyberattack

Organization (6)

Harvard University
La Sapienza
La Sapienza University
Sapienza University Of Rome
University of Pennsylvania
Education

Malware (2)

BabLock
Rorschach

Threat Actor (4)

Femwar02
Babuk
DarkSide
LockBit V2.0

Relationships

Femwar02 uses BabLock
Femwar02 uses Rorschach
Babuk uses BabLock
Babuk uses Rorschach
DarkSide uses BabLock
DarkSide uses Rorschach
LockBit V2.0 uses BabLock
LockBit V2.0 uses Rorschach
Femwar02 uses Ransomware
Femwar02 uses T1041 - Exfiltration Over C2 Channel
Femwar02 uses T1486 - Data Encrypted for Impact
Femwar02 uses T1567 - Exfiltration Over Web Service
Babuk uses Ransomware
Babuk uses T1041 - Exfiltration Over C2 Channel
Babuk uses T1486 - Data Encrypted for Impact
Babuk uses T1567 - Exfiltration Over Web Service
DarkSide uses Ransomware
DarkSide uses T1041 - Exfiltration Over C2 Channel
DarkSide uses T1486 - Data Encrypted for Impact
DarkSide uses T1567 - Exfiltration Over Web Service
LockBit V2.0 uses Ransomware
LockBit V2.0 uses T1041 - Exfiltration Over C2 Channel
LockBit V2.0 uses T1486 - Data Encrypted for Impact
LockBit V2.0 uses T1567 - Exfiltration Over Web Service
La Sapienza Cyberattack attributed to Femwar02
La Sapienza Cyberattack attributed to Babuk
La Sapienza Cyberattack attributed to DarkSide
La Sapienza Cyberattack attributed to LockBit V2.0
La Sapienza Cyberattack uses BabLock
La Sapienza Cyberattack uses Rorschach
Femwar02 targets Harvard University
Femwar02 targets La Sapienza
Femwar02 targets La Sapienza University
Femwar02 targets Sapienza University Of Rome
Babuk targets Harvard University
Babuk targets La Sapienza
Babuk targets La Sapienza University
Babuk targets Sapienza University Of Rome
DarkSide targets Harvard University
DarkSide targets La Sapienza
DarkSide targets La Sapienza University
DarkSide targets Sapienza University Of Rome
LockBit V2.0 targets Harvard University
LockBit V2.0 targets La Sapienza
LockBit V2.0 targets La Sapienza University
LockBit V2.0 targets Sapienza University Of Rome
BabLock targets Harvard University
BabLock targets La Sapienza
BabLock targets La Sapienza University
BabLock targets Sapienza University Of Rome
Rorschach targets Harvard University
Rorschach targets La Sapienza
Rorschach targets La Sapienza University
Rorschach targets Sapienza University Of Rome
Femwar02 related to University of Pennsylvania
Femwar02 related to Education

Continue Reading

Logitech Confirms Data Breach from Zero-Day Exploit by Clop Gang Washington Post Confirms Breach from Oracle EBS Attacks by Cl0p Ransomware Gang Cl0p Ransomware Group Claims Data Theft from Nearly 50 Companies Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign Logitech Confirms Data Breach from Zero-Day Exploit Linked to Clop Gang Clop Ransomware Exploits Critical Vulnerability in Windchill and FlexPLM

La Sapienza University in Rome Offline Due to Ransomware Attack

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading