Universities across the English‑speaking world are facing a growing cybersecurity threat tied to so‑called “academic support” services. According to Okta Threat Intelligence, many contract cheating operations pose as tutoring or proctoring services but are organized extortion schemes. Students are lured, often during high‑stress periods like midterms or finals, into sharing login credentials so assignments can be completed on their behalf. Once academic work is submitted through platforms such as Canvas or Blackboard, the operation shifts to extortion, with students threatened with exposure unless additional payments are made.
Beyond academic misconduct, these schemes introduce serious identity and security risks. By gaining full access to student accounts, threat actors establish a foothold within university systems, sometimes logging in from foreign locations using VPNs or proxy services. This activity creates clear indicators of account takeover, such as impossible travel events and suspicious multifactor authentication patterns. The data collected, ranging from personal information and student IDs to recorded proof of unauthorized access, gives attackers leverage while also expanding the potential for broader cybercrime.
The risks extend well beyond individual students. Persistent access to compromised accounts can expose universities to payroll fraud, financial aid abuse, phishing campaigns using trusted .edu addresses, and even research or intellectual property theft. As a result, this issue is no longer about academic integrity, it is a matter of institutional security and student safety. Okta continues to work with higher‑education institutions to detect these threats, strengthen identity security, and help universities recognize the warning signs before student exploitation turns into a wider breach.
Original article courtesy of Okta.com
Enhance Your Business Security with Expert Cybersecurity Solutions. Click here to learn more and download shawcsIT’s free services overview catalogue.