At least 20 new phishing domains targeting more than 60 universities in Australia, Canada, Hong Kong, Switzerland, the United Kingdom and the United States have cropped up. The domains are associated with a group of Iranian cyberattackers collectively known as Cobalt Dickens or Silent Librarian. In total, the group is targeting at least 380 universities in more than 30 countries, Secureworks Counter Threat Unit researchers said. The attackers are looking to use fake, library-themed landing pages to steal students credentials, then steal and resell intellectual property.
Source: https://threatpost.com/library-themed-university-phish-expands/148288/