Event JSON
{
"id": "8c59114c15b381bb8ca04ec8ac2f8d19083622415bb30ba6c4315d09db0ac3ba",
"pubkey": "f7e862be47062cace492682f0bdfa7f874c2034cbc5de650015230915e1bebff",
"created_at": 1778187330,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/535/270/579/925/607/original/8d9649cbdb76429b.jpeg",
"m image/jpeg"
],
[
"t",
"instructure"
],
[
"t",
"edusec"
],
[
"proxy",
"https://infosec.exchange/@PogoWasRight/116535284891631236",
"web"
],
[
"t",
"hackandleak"
],
[
"t",
"cybersecurity"
],
[
"t",
"databreach"
],
[
"t",
"shinyhunters"
],
[
"proxy",
"https://infosec.exchange/users/PogoWasRight/statuses/116535284891631236",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/PogoWasRight/statuses/116535284891631236",
"pink.momostr"
],
[
"-"
]
],
"content": "OK, so it seems that #ShinyHunters breached #Instructure *again* and replaced login pages with their own message to schools about how to contact them directly. \n\nThe Canvas login page were replaced with the message in the screenshot below. \n\nCanvas subsequently replaced the login with \"under maintenance\" pages. \n\n#databreach #hackandleak #EduSec #cybersecurity\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/116/535/270/579/925/607/original/8d9649cbdb76429b.jpeg\n",
"sig": "2f2aee91a1e097df9d30f298e6a85495abaf46ce89f1b88033f754626e78e841dce74666606bbb52a3496a27e918d0ecd940b14c0873a180c6a2fcf61ab0c039"
}