NCIT Phishing Campaign Targeting Nepali Students
Published on 2024-01-08
## The Campaign
In late 2023 and early 2024, a sophisticated phishing campaign targeted students at NCIT (Nepal College of Information Technology) and affiliated institutions. The attackers impersonated the college examination portal to harvest student credentials.
## Attack Vector
### 1. Email Lure
Students received emails appearing to be from `exam@ncit.edu.np` with subject lines like:
- "URGENT: Exam Results Published - Verify Now"
- "Your Exam Registration is Pending"
### 2. Fake Portal
...
Back to Blog