Malicious actors have sent phishing emails referencing the new strain of COVID-19 to "dozens" of universities, according to security firm Proofpoint.