Wave of phishing webpages targeting college, university detected

ISLAMABAD: A leading cyber security company has detected a wave of phishing webpages targeting college and university students as well as professors.

According to the report of the company issued on Thursday, attackers are deploying fake login portals that mimic official university websites, tricking users into entering credentials which can lead to stolen data or a complete loss of access to their university accounts.

Links to these phishing portals are either distributed in emails or appear in web search results when looking for academic institutions’ login pages.

The fraudulent portals closely replicate the branding and design of legitimate university systems. Students of multiple academic institutions across different regions have been targeted, including META (the Middle East, Turkiye and Africa).

If users enter their credentials on these fake academic portals, cyber criminals can steal sensitive data such as login details which grant access to university accounts containing personal information, academic records, and financial data. Attackers may also change the passwords, blocking students and professors from critical resources like course materials, email, or payment systems. Compromised accounts can be used to send phishing emails to peers, spreading the attack within university networks.

“Colleges and universities are vulnerable due to their reliance on digital platforms and the high volume of users accessing systems during the back-to-school rush. These fake login portals can appear convincing, exploiting the trust that students and professors place in their university systems. We’re urging the academic community to stay vigilant and double check the web addresses of their educational institutions’ login pages to avoid losing data,” comments Olga Altukhova, Senior Web Content Analyst at Kaspersky.

Copyright Business Recorder, 2025