The goal of the attacks was to collect personal data and steal students' Gosuslugi accounts.
— Moreover, as the company emphasized, the scammers automatically intercepted confirmation codes from SMS messages: the system entered the received numbers into the required field without user intervention.