Student Loans Scams

Published on: 
September 15, 2022

Newly created domains targeting student loans

With the prevalence of student loans in the news, one thing is for certain: opportunists will build scams to capitalize on the attention. Read more of what Tim Helming had to say about threat actors and forgiveness programs in SCMagazine: https://www.scmagazine.com/analysis/fraudsters-aim-to-capitalize-on-student-loan-forgiveness-confusion

Here are the newly created domains we've seen over the past few days:
getstudentloanrelief[.]net
getstudentloanreliefnow[.]com
getstudentloanreliefnow[.]org
getstudentloanrelief{.]org
studentloanrepay[.]org
citizesstudentloans[.]com
citiznsstudentloans[.]com
getstudentloan[.]top

didstudent[.]loan
astudentloan[.]net
studentloanforgivenesspro[.]site
relief4studentloans[.]com
infostudentloan[.]com
studentloansavvy[.]com

myfederalstudentloanchangednamesdoistillbebifitforthestudent[.]loan
studentloan-forgivenesseligibility[.]site
studentloanlawyers[.]org
getstudentloanreliefnow[.]net
studentloanforgivenessform[.]com

Related Content

SecuritySnacks
DPRK Contagious Interview: Developer Workflow Compromise
Analyze the DPRK "Contagious Interview" campaign targeting developers. Get technical deep-dives into VS Code task abuse, Node.js malware obfuscation, and a full Sigma/EDR detection pack to defend your CI/CD pipeline and identity perimeter.
Learn More
SecuritySnacks
The AI Frame Campaign Continues
Analysis of the persistent AIFrame campaign: A fake Google Authenticator Chrome extension and 6+ related apps use "deploy clean, update dirty" tactics to steal 2FA credentials and inject malicious iframes. Learn how this operation bypasses Google’s security reviews.
Learn More
SecuritySnacks
Cybersecurity Reading List - Week of 2026-04-06
From Gramsci's 'morbid symptoms' to modern threat intelligence - a cybersecurity roundup exploring why defenders should treat root causes over chasing dramatic threats, with curated links on ransomware, HUMINT, disinformation, and more.
Learn More