Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between

Microsoft reports that the education sector is under persistent attack from both nation-state groups (notably Iran-backed and North Korean actors) and financially motivated criminals; attacks include credential theft, custom backdoors (MediaPl), ransomware, phishing, QR-code abuse, and espionage aimed at researchers and federally funded projects, with large-scale active targeting and thousands of malicious messages observed daily.