Abstract:Introduction. With the rapid adoption of computer and networking technologies, educational institutions pay insufficient attention to the implementation of security measures to ensure the confidentiality, integrity and accessibility of data, and thus fall prey to cyber-attacks. Methods. The following methods were used in the process of writing the article: methods of generalization, analogy and logical analysis to determine and structure the motives for phishing attacks, ways to detect and prevent them; statistical analysis of data – to build a chronological sample of the world's largest cyber incidents and determine the economic losses suffered by educational institutions; graphical method – for visual presentation of results; abstraction and generalization – to make recommendations that would help reduce the number of cyber scams. Results. The article shows what role cyber security plays in counteracting phishing scams in the educational field. The motives for the implementation of phishing attacks, as well as methods for detecting and preventing them, have been identified and regulated. The following notions as "phishing", "submarine" and "whaling" are evaluated as the most dangerous types of fraud, targeting both small and large players in the information chain of any educational institution. An analytical review of the educational services market was conducted and a chronological sampling of the largest cyber incidents that occurred in the period 2010-2019 was made. The economic losses incurred by colleges, research institutions and leading universities in the world were described. It has been proven that the US and UK educational institutions have been the most attacked by attackers, somewhat inferior to Canada and countries in the Asia-Pacific region. It is found that education has become the top industry in terms of the number of Trojans detected on devices belonging to educational institutions and the second most listed among the most affected by the ransomware. A number of measures have been proposed to help reduce the number of cyber incidents. Discussion. The obtained results should be taken into account when formulating a strategy for the development of educational institutions, as well as raising the level of awareness of the representatives of the academic community in cybersecurity. Keywords: phishing, cyber security, cyber stalkers, insider threat, rootkit, backdoor.

Cyberattacks are hitting research institutions — with devastating effects

Understanding Cyber Threats Against the Universities, Colleges, and Schools

When all computers shut down: the clinical impact of a major cyber-attack on a general hospital

It's more than just money: The real-world harms from ransomware attacks

US hospitals face collapse as cyberattack on UnitedHealth cuts revenue streams

So ... you've been hacked

Characteristics of short-term acute care hospitals that experienced a ransomware attack from 2016 to 2021

Ransomware: A Rising Threat of new age Digital Extortion

A systematic literature review on Ransomware attacks

Volenti non fit injuria: Ransomware and its Victims

Network Security Threats to Higher Education Institutions

The Social and Psychological Impact of Cyber-Attacks

Harassment of scientists is surging — institutions aren't sure how to help

Ransomware and Cryptocurrency: Partners in Crime

UNIVERSITY CYBER SECURITY AS A METHOD FOR ANTI-FISHING FRAUD

An Empirical Study of Data Disruption by Ransomware Attacks

What happens to rural hospitals during a ransomware attack? Evidence from Medicare data

Can we learn from an imagined ransomware attack on a hospital at home platform?

[Cyberattack at Dax hospital: Presentation of the facts, consequences and feedback]

A Prevention and a Traction System for Ransomware Attacks

Mitigation Techniques for Cyber Attacks: A Systematic Mapping Study