Another week and hacker
I didn't have any serious issue this week, but the instructor which provide service to canvas website was hacked by Shinyhunters this week.
I was studying IT138 and took a break for lunch, which was about 1 pm. Everything was ok, and I returned to the Canvas website, logged in, and clicked on the BUS169 class link. The browser opened another page that looks like a banner for an activity I regularly receive from the NSC Student Bulletin, Information Technology Update, etc. I clicked the browser's back arrow, carefully selected BUS169 to make sure it was correct, and then it opened the same banner. This time I was wondering to see it because it was written these sentences "SHINYHUNTERS. ShinyHunters has breached Instructor (again)." I decided to check my other class; however, I saw the same banner when I clicked on that class. Things were getting weirder because Canvas was ok however, links were taking me to that banner all the time. Information on the banner says "DOWNLOAD AFFECTED_SCHOOLS.TXT." I tried to click on it; however, it wasn't a hyperlink, so I realized that the banner is a JPG photo, so I took a screenshot of it and saved it to my computer. The situation continued for at least half an hour. The Canvas website was useless, and IT shut it down. I mostly distribute my study time to different days, and which necessitates to study certain hours. It crippled my schedule for a couple of days because this happened on Friday, and I have to work on Fridays and weekends. I do not know anything about hacking and hackers, so I made research about shinyhunters cyber-criminal on chatbots. They simply request money from the authorities, threatening to leak all information in their database, such as username, password, etc... luckily Canvas changed its login procedure a month ago, and we now use the MFA logging method. Chatbot also recommended me to change my passwords, full scan the computer. I took all those precautions seriously. No infection so far.
I hope it doesn’t repeat again.
