Yes, according to my sources, a phishing campaign has been going on since the beginning of the invasion. The problem that knowing exactly who is behind it is a bit difficult, it starts from almost all over the world, and pointing the finger at someone is just unethical: until proven otherwise it can also be the Ukrainians themselves or even criminal groups that are exploiting the situation, not necessarily the Russians.
Yes, no one is truly holy, we know that. Mass surveillance is undertaken by all states, some in less invasive ways and some in outright abuse. But you also have to consider states that rely on cybercrime to attack an adversary and those that defend their citizens/customers only with ito… That’s the difference in a nutshell.
It could be a very important university to be considered even strategic for an adversary state, you have to consider also the fact that at the level of military strategy it can be an objective to prevent to make grow culturally the people… That’s why I’m not surprised. Then it’s not just the university, it’s the whole world that is affected.