US universities are being targeted in multiple phishing attacks designed to impersonate college login portals to steal valuable Office 365 credentials. The lures used in the latest campaigns include COVID-19 Delta and Omicron variants and various themes on how these allegedly impact the educational programs. These phishing campaigns are believed to be conducted by multiple threat actors starting in October 2021. The University of Central Missouri, Vanderbilt, Arkansas State University, Purdue, Auburn, West Virginia University, and the University of Wisconsin-Oshkosh were targeted in these attacks.”]