Proofpoint

Cybersecurity firm Proofpoint reports that attackers are hijacking .edu email accounts belonging to U.S. universities and using them to run multi-stage fraud schemes. The campaigns combine fake job offers with advance-fee fraud, exploiting the trust associated with legitimate university email addresses. Security researchers warn recipients to be cautious with unsolicited job-related messages, even those sent from seemingly authentic .edu accounts.