The Main School was replaced with a russian-language "Imperial University of Warsaw".
The malware was born in 2011 and marketed on russian-language forums frequented by cybercriminals, as reported by the BBC.
