Canvas Breach Disrupts Schools & Colleges Nationwide
2026-05-09T01:23:27Z•a47d725974b3387ea6a28640c62e45e77e64f3a35d324ac6dad9fc64371f37ed
BlueHammerBrazilCanisterWormDDoSGandCrabIoT botnetIran-backedMicrosoftMicrosoft Office tokensREvilScattered SpiderScatteredSpiderSharePointStrykerUNKN (Daniil Shchukin)anti-DDoS abusebotnetcredential theftdata extortiondoxinglaw enforcement disruptionransomwarerouter exploitationwiperzero-day
What happened
Multiple high-impact cyber incidents reported: a widespread data-extortion attack against Canvas defaced its login page and threatened to leak data for ~275 million students and staff across ~9,000 institutions; a Brazilian anti‑DDoS firm was implicated in enabling a botnet used to attack ISPs; and U.S./allied authorities dismantled four large IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that compromised ~3 million devices. Nation‑state and state‑linked activity includes Russian military‑linked actors harvesting Microsoft Office authentication tokens by exploiting older router flaws on >18,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- a47d725974b3387ea6a28640c62e45e77e64f3a35d324ac6dad9fc64371f37ed
- Enrichment time
- 2026-05-09T01:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.