Kaspersky attributed the hacks to an espionage campaign targeting journalists and employees at educational institutions.