​​Cyber Signals Issue 8 | Education under siege: How cybercriminals target our schools​​

Microsoft's Cyber Signals brief highlights that educational institutions are high-value, high-risk targets for a spectrum of cyber threats — from widespread QR-code phishing and email-based campaigns to nation-state espionage and credential theft. The report documents telemetry (e.g., ~15,000 daily malicious QR-related messages targeting education, and reported large-scale intrusions by actors such as Mabna), profiles APTs and development groups (Peach/Mint Sandstorm, Emerald/Moonstone Sleet, Storm-1877), and recommends fundamental defenses including multifactor authentication, DNS protections, centralized monitoring, and cybersecurity education.