The bomb hoax emails sent to approximately 100 schools in Delhi-NCR have been traced to a Russian email service, mai.ru, which offers anonymity to users and helps them evade detection by law enforcement agencies. India Today's Open-Source Intelligence (OSINT) team conducted a preliminary forensic analysis and found that the sender, using the email address [email protected], utilized a free temporary email service called Tempail. This service provides temporary email addresses that expire after one hour and can be used for various online activities without disclosing personal details.
Interestingly, the sender also provided a backup email address, yus*******@gufum.com, which was identified as a temporary email domain by many email validators. This use of temporary email addresses highlights the perpetrators' attempt to remain anonymous and avoid accountability for their actions.
The threat emails were designed to mimic the style and language commonly associated with the propaganda material of the terrorist organization Islamic State (IS). The username "Sawariim" used in the email is a distortion of the term "al-Sawarim," associated with jihadist propaganda. The content of the emails, written in uppercase letters in a font resembling 'Lucida Console,' included threats of explosive devices in schools and excerpts from online sources hosting English translations of Quranic verses.
Despite the use of IS-style language and formatting, the Delhi Police categorized the threats as hoaxes, a recurring pattern targeting high-end schools in the national capital. The perpetrators demonstrated a sound understanding of technology and familiarity with IS terminology, suggesting a deliberate attempt to create the illusion of authenticity.
The use of temporary email services like Tempail raises concerns about privacy and security online. While these services offer anonymity and protection against spam, they are also exploited for illegal and anti-social activities. The recent bomb hoax emails caused panic among parents and led to the evacuation of several schools in Delhi-NCR, highlighting the disruptive impact of such threats on communities and the challenges faced by law enforcement agencies in addressing them.
