US colleges and universities are now the target of cyber criminals who share stolen email credentials to purchase products.