---
title: Understanding the Evolving Phishing Threat to Education
description: Phishing remains a dangerous threat to educational institutions; implementing layered security measures and ensuring constant awareness through training will significantly increase institutional resilience to these attacks.
image: //www.jerichosecurity.com/hubfs/Edu.png
---

[![Jericho Security logo](https://www.jerichosecurity.com/hubfs/assets/images/Jericho-Security.svg)](https://www.jerichosecurity.com/)

[![Jericho Security logo](https://www.jerichosecurity.com/hubfs/assets/images/Jericho-Security.svg)](https://www.jerichosecurity.com/)

- Why Jericho
  
  Why choose Jericho Security?
  
  See what sets Jericho Security apart from the rest.
  
  
  
  [About Us Our Mission](https://www.jerichosecurity.com/about) [Customers What customers say](https://www.jerichosecurity.com/customers)
- Plans 
    - Plans
    - [Lite](https://www.jerichosecurity.com/lite)
    - [Plus](https://www.jerichosecurity.com/plus)
    - [Premium](https://www.jerichosecurity.com/premium)
    - [Free Trial](https://www.jerichosecurity.com/7-day-free-trial)
- Solutions
  
  See how Jericho Security can help keep your team safe.
  
  We equip individuals with the knowledge and skills needed to identify, prevent, and respond to cyber threats.
  
  
  
  
  
  Platform
  
  
  
  [Cybersecurity Dashboard Manage Your Security](https://www.jerichosecurity.com/platform/cybersecurity-dashboard) [Phishing Simulator Train Your Employees](https://www.jerichosecurity.com/platform/phishing-simulator) [Performance Analytics Gain Key Insights](https://www.jerichosecurity.com/platform/employee-performance-analytics) [Customized Training Tailored to Your Organization](https://www.jerichosecurity.com/platform/training-content)
  
  
  
  
  
  Solutions
  
  
  
  [Cybersecurity Awareness Training Train Your Team](https://www.jerichosecurity.com/solutions/cybersecurity-awareness-training) [Anti-Phishing Training Protect Your Business](https://www.jerichosecurity.com/solutions/anti-phishing-training) [Enterprise Cybersecurity Training Defend Against Threats](https://www.jerichosecurity.com/solutions/enterprise-cybersecurity-training) [SMB Cybersecurity Training Empower Your Team](https://www.jerichosecurity.com/solutions/smb-cybersecurity-training)
  
  
  
  
  
  Industries
  
  
  
  [Retail Keep retail threats away](https://www.jerichosecurity.com/industries/retail) [E-Commerce Protect your E-Com Business](https://www.jerichosecurity.com/industries/e-commerce) [Technology Prevent sensitive breaches](https://www.jerichosecurity.com/industries/technology) [Financial Services Safeguard your assets](https://www.jerichosecurity.com/industries/financial-services) [Healthcare Secure sensitive information](https://www.jerichosecurity.com/industries/healthcare)
  
  [Manufacturing Keep your operation running](https://www.jerichosecurity.com/industries/manufacturing) [Energy Prevent the next breach](https://www.jerichosecurity.com/industries/energy) [Federal Government Prevent largescale attacks](https://www.jerichosecurity.com/industries/federal-government) [State & Local Government Protect local officials](https://www.jerichosecurity.com/industries/state-local-government) [Higher Education Keep staff & students safe](https://www.jerichosecurity.com/industries/higher-education)
- Resources
  
  Jericho Security resources hub.
  
  Find everything you need to defend against emerging Generative AI threats.
  
  
  
  
  
  [News Latest news headlines](https://www.jerichosecurity.com/resources/tag/news) [Literature White papers & solution briefs](https://www.jerichosecurity.com/resources/tag/white-papers-solution-briefs) [Case Studies Jericho success stories](https://www.jerichosecurity.com/resources/tag/case-study)
  
  
  
  
  
  [Events Upcoming security events](https://www.jerichosecurity.com/resources/tag/events) [Webinars Upcoming & On-Demand](https://www.jerichosecurity.com/resources/tag/webinars) [Podcast Leading CISO Discussions](https://www.jerichosecurity.com/ciso-diaries)
  
  
  
  
  
  [Community Spotlight To recognize and appreciate](https://www.jerichosecurity.com/resources/tag/community-spotlight) [Cybersecurity Glossary Cyber-Related Definitions](https://www.jerichosecurity.com/glossary) [Support Advice and Answers](https://support.jerichosecurity.com/)
  
  [View All Resources](https://www.jerichosecurity.com/resources)
- [Blog](https://www.jerichosecurity.com/blog)
- [Partners](https://www.jerichosecurity.com/partner)

- [Sign In](https://app.jerichosecurity.com/users/sign_in)
- [Free Trial](https://www.jerichosecurity.com/7-day-free-trial)

# Understanding the Evolving Phishing Threat to Education

Written by

![Jericho Security Contributor](https://www.jerichosecurity.com/hubfs/assets/images/Jericho-Security-Thumbnail.png)

Jericho Security Contributor

Published on

February 27, 2024

![](https://www.jerichosecurity.com/hubfs/Edu.png)

### Executive Summary

A study conducted in 2023 found that **email-based attacks still account for nearly 20% of ransomware incidents** in the education sector, impacting both higher and lower education. The increases in 2023 were significant:

- **80%** increase in lower education, up56% over 2022
- **79%** increase in higher education, up 64% over 2022
- **30%** of cyberattacks advanced phishing techniques

To combat these attacks, organizations should replicate real-world spear-phishing scenarios by using AI-driven simulations and training. This will help prepare employees to recognize and respond to advanced cyber threats, strengthening cybersecurity defenses against the human element. In this report, we have compiled a summary of the leading threats to the education sector and the tools that can mitigate these threats.

Understanding the primary means of attack, including compromised credentials, exploited vulnerabilities, and email-borne threats, is crucial to securing sensitive data and learning processes. Recognizing the differences in susceptibility between lower and [higher education](https://www.jerichosecurity.com/industries/higher-education) is also essential.

# Key Areas of Vulnerability

## **Lower Education**

- Compromised Credentials: **36% saw stealing login information** as the primary gateway for an attack**.** This indicates potential weaknesses in password hygiene, limited use of multi-factor authentication (MFA), and a need for increased security awareness.
- Email-Based Attacks: **30% of attacks [originate from phishing or malicious link](https://www.jerichosecurity.com/blog/96-of-phishing-attacks-in-higher-education-arrive-via-email)**[s](https://www.jerichosecurity.com/blog/96-of-phishing-attacks-in-higher-education-arrive-via-email), demanding stringent email security measures and comprehensive user training.

## **Higher Education**

- Exploited Vulnerabilities: **40% of ransomware attacks penetrated through unpatched or outdated software and systems.** Prioritizing system updates and robust patching protocols is paramount.
- Compromised Credentials: **37% of exploited vulnerabilities resulted from stolen credentials**, which presents a significant threat.Strong password practices and MFA are non-negotiable.
- Email-Based Attacks: **These threats account for 19% of incidents,** suggesting ongoing vigilance to email security is crucial.

# Recommendations

- **Jericho Security's AI-Driven Simulation and Training:** To address these challenges, Jericho Security’s platform offers AI-driven simulation and training. Replicating real-world spear-phishing scenarios prepares employees to recognize and respond to advanced cyber threats, thus reinforcing the human element of cybersecurity defenses.

- **Multi-Factor Authentication (MFA):** Enforce MFA on all user accounts, adding a valuable barrier against unauthorized access.

- **Patching Prioritization:** Implement a strict patching policy, ensuring critical security updates are applied immediately.

- **Email Filtering:** Invest in powerful email filters, complemented by ongoing user awareness training to recognize phishing attempts.

# Conclusion

Phishing remains the most dangerous threat to educational institutions. Understanding sector-specific vulnerabilities, implementing layered security measures, and ensuring constant awareness through training will significantly increase institutional resilience to these attacks.

*1* [*https://www.sophos.com/en-us/whitepaper/state-of-ransomware-in-education*](https://www.sophos.com/en-us/whitepaper/state-of-ransomware-in-education)

*Figure 1: Root Causes of Ransomware Attacks in Education*

##### Categories

- [News (45)](https://www.jerichosecurity.com/blog/tag/news)
- [Thought Leadership (15)](https://www.jerichosecurity.com/blog/tag/thought-leadership)
- [Phishing (14)](https://www.jerichosecurity.com/blog/tag/phishing)
- [Product Updates (10)](https://www.jerichosecurity.com/blog/tag/product-updates)
- [Announcements (8)](https://www.jerichosecurity.com/blog/tag/announcements)
- [Reports (5)](https://www.jerichosecurity.com/blog/tag/reports)
- [Case Study (4)](https://www.jerichosecurity.com/blog/tag/case-study)
- [Community Spotlight (3)](https://www.jerichosecurity.com/blog/tag/community-spotlight)
- [Events (3)](https://www.jerichosecurity.com/blog/tag/events)
- [White Papers & Solution Briefs (1)](https://www.jerichosecurity.com/blog/tag/white-papers-solution-briefs)

#### Subscribe to our newsletter

Get the latest updates on phishing trends and generative AI.

Subscribe

##### Popular Posts

Platform <https://www.jerichosecurity.com/blog/understanding-the-evolving-phishing-threat-to-education#collapseLanding>

- [Cybersecurity Dashboard](https://www.jerichosecurity.com/platform/cybersecurity-dashboard)
- [Phishing Simulator](https://www.jerichosecurity.com/platform/phishing-simulator)
- [Performance Analytics](https://www.jerichosecurity.com/platform/employee-performance-analytics)
- [Customized Training](https://www.jerichosecurity.com/platform/training-content)

Solutions <https://www.jerichosecurity.com/blog/understanding-the-evolving-phishing-threat-to-education#collapseLanding>

- [Anti-Phishing Training](https://www.jerichosecurity.com/solutions/anti-phishing-training)
- [SMB Cybersecurity Training](https://www.jerichosecurity.com/solutions/smb-cybersecurity-training)
- [Enterprise Cybersecurity Training](https://www.jerichosecurity.com/solutions/enterprise-cybersecurity-training)
- [Cybersecurity Awareness Training](https://www.jerichosecurity.com/solutions/cybersecurity-awareness-training)

Industries <https://www.jerichosecurity.com/blog/understanding-the-evolving-phishing-threat-to-education#collapseLanding>

- [Retail](https://www.jerichosecurity.com/industries/retail)
- [E-Commerce](https://www.jerichosecurity.com/industries/e-commerce)
- [Technology](https://www.jerichosecurity.com/industries/technology)
- [Financial Services](https://www.jerichosecurity.com/industries/financial-services)
- [Healthcare](https://www.jerichosecurity.com/industries/healthcare)
- [Manufacturing](https://www.jerichosecurity.com/industries/manufacturing)
- [Energy](https://www.jerichosecurity.com/industries/energy)
- [Federal Government](https://www.jerichosecurity.com/industries/federal-government)
- [State & Local Government](https://www.jerichosecurity.com/industries/state-local-government)
- [Higher Education](https://www.jerichosecurity.com/industries/higher-education)

Resources <https://www.jerichosecurity.com/blog/understanding-the-evolving-phishing-threat-to-education#collapseLanding>

- [Cybersecurity Glossary](https://www.jerichosecurity.com/glossary)
- [Support](https://support.jerichosecurity.com/)
- [Blog](https://www.jerichosecurity.com/blog)
- [News](https://www.jerichosecurity.com/resources/tag/news)
- [Literature](https://www.jerichosecurity.com/resources/tag/white-papers-solution-briefs)
- [Case Studies](https://www.jerichosecurity.com/resources/tag/case-study)
- [Events](https://www.jerichosecurity.com/resources/tag/events)
- [Webinars](https://www.jerichosecurity.com/resources/tag/webinars)
- [Community Spotlight](https://www.jerichosecurity.com/resources/tag/community-spotlight)

Company <https://www.jerichosecurity.com/blog/understanding-the-evolving-phishing-threat-to-education#collapseLanding>

- [About Us](https://www.jerichosecurity.com/about)
- [Customers](https://www.jerichosecurity.com/customers)
- [Partners](https://www.jerichosecurity.com/partner)
- [Careers](https://jericho-security.breezy.hr/)
- [Sign In](https://app.jerichosecurity.com/users/sign_in)
- [Get a Demo](https://www.jerichosecurity.com/demo)
- [Privacy Policy](https://www.jerichosecurity.com/privacy-policy)
- [Terms of Service](https://www.jerichosecurity.com/terms-of-service)

[![Jericho Security footer logo](https://www.jerichosecurity.com/hubfs/assets/images/bootstrap/jericho-logo.svg)](https://www.jerichosecurity.com/) 

AI-Powered Cyber Security Training for Employees.

![AICPA SOC](https://www.jerichosecurity.com/hs-fs/hubfs/assets/images/bootstrap/AICPA-SOC-Logo.png?width=54&height=54&name=AICPA-SOC-Logo.png) ![SOC 2 TYPE 1](https://www.jerichosecurity.com/hs-fs/hubfs/assets/images/bootstrap/SOC-2-TYPE-1.png?width=54&height=54&name=SOC-2-TYPE-1.png) ![SOC 2 TYPE 2](https://www.jerichosecurity.com/hs-fs/hubfs/assets/images/bootstrap/SOC-2-TYPE-2.png?width=54&height=54&name=SOC-2-TYPE-2.png)

Toggle theme

- Light
- Dark
- Auto

 Copyright ©  Jericho Security, Inc.

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Jericho Security Contributor",
    "url" : "http://www.jerichosecurity.com/blog/author/jericho-security-contributor"
  },
  "dateModified" : "2025-01-15T13:39:26.847Z",
  "datePublished" : "2024-02-27T23:07:26.000Z",
  "headline" : "Understanding the Evolving Phishing Threat to Education",
  "image" : [ "//www.jerichosecurity.com/hubfs/Edu.png" ],
  "mainEntityOfPage" : {
    "@id" : "http://www.jerichosecurity.com/blog/understanding-the-evolving-phishing-threat-to-education",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "//www.jerichosecurity.com/hubfs/assets/images/Jericho-Security.svg"
    },
    "name" : "Jericho Security"
  }
}
```