The attackers aren't very bright if they are after money
If the perpetrators are planning to demand money to call off this DDOS attack, then they can't be very bright. UK universities are not exactly awash with spare cash, except perhaps for the salaries that some Russell Group institutions pay to their chief executives.