School bomb alerts, who is behind it signed by Mikhail Andropov of the Vilajat of Misoginistan

The name had already appeared to claim false bomb scares in other European countries. Not a real person nor a terrorist organization but an invented identity behind which hides those who are orchestrating these campaigns of intimidation and causing alarm.

He introduced himself as Mikhail Andropov, leader of the “Vilayat of Misoginistan” organization. It is his signature that appeared in the threatening emails that on November 11 triggered bomb alerts in hundreds of Italian schools and led to evacuations and checks by the police. But does the group that claims the threats really exist? And above all, who hides behind this name?

The pseudonym

Pseudonym used to sign a series of false threats and bomb scares sent via email in Italy and Europe, Mikhail Andropov is the self-styled leader of the "Vilayat of Misoginistan". Not a real person nor a terrorist organization but an invented identity behind which hides those who are orchestrating these campaigns of intimidation and causing alarm. Hit the news following the massive sending of threatening emails to hundreds of schools across Italy, the name had already appeared in the previous days to claim false bomb scares in other European countries. The same name was used for threats aimed at newspapers in Ireland and Bulgaria as well as educational institutions in Scotland and Northern Ireland.

Investigations underway

"Mikhail Andropov" is a fictional name that recalls Russian and Soviet sounds. Andropov, in fact, was the surname of the historic head of the KGB and former leader of the USSR Yurij Andropov. "Vilayat of Misoginistan" is also a completely invented organization. The term "vilayat" ("governorship" in Arabic) imitates the language of jihadist groups combined, however, with the ironic neologism "Misoginistan". A contrast that gives the message a grotesque tone, typical of cyber trolls or disinformation campaigns. The Italian and European authorities consider the threats to have no real concrete danger but are investigating the IT origin of the messages (some results routed via foreign servers or addresses) as part of possible disruptive actions or "hybrid warfare".