Proofpoint researchers have found a new phishing attempt that takes advantage of anxiety about the spread of the Omicron strain of COVID-19 to steal credentials and obtain access to accounts at numerous notable colleges in the United States.
Since the pandemic first made news in January and February of 2020, cybercriminals and threat actors have utilized fear over COVID-19 as phishing bait.
However, in this specific assault, cybercriminals are impersonating the login portals of universities such as Vanderbilt University, the University of Central Missouri, and others. Some seem like generic Office 365 login sites, while others look like authentic university pages.
“This activity will likely increase in the next two months as colleges and universities provide and require testing for students, faculty, and other workers traveling to and from campus during and after the holiday season, and as the Omicron variant becomes more widely available,” wrote the Proofpoint researchers.