ShinyHunters Gang Strikes Again: Canvas Portals Defaced at 330 Educational Institutions
In a recent cyberattack, the notorious ShinyHunters extortion gang has breached Instructure, the company behind the widely used Canvas learning management system. The gang exploited a vulnerability to deface login portals for around 330 colleges and universities, displaying an extortion message for approximately 30 minutes before it was taken down.
The defaced pages warned that if a ransom is not paid by May 12, sensitive student data could be leaked. Earlier, Instructure reported a massive data breach involving 280 million records from 8,809 institutions.
Impacted organizations include many educational institutions relying on Canvas for managing coursework and communication. Instructure has since taken the system offline to address the vulnerabilities.
To protect against such attacks, schools are urged to consult cybersecurity experts and implement robust security measures.
Risk Level: High
Source: View Original Report
