<![CDATA[My baby cousin called me in tears because all her accounts have been compromised.]]>My baby cousin called me in tears because all her accounts have been compromised. We went over possible infection vectors (the “try my game” DM scam etc) and nothing stood out. But then she wondered if they’d gotten a foothold through the Canvas ransom somehow.

Has anyone else heard of students getting their personal accounts popped very recently in a way that might be tied to the Canvas incident?

]]>https://board.circlewithadot.net/topic/34b5896b-3c02-488b-9a7c-bbe0db31ef9d/my-baby-cousin-called-me-in-tears-because-all-her-accounts-have-been-compromised.RSS for NodeFri, 15 May 2026 04:41:58 GMTTue, 12 May 2026 15:57:12 GMT60<![CDATA[Reply to My baby cousin called me in tears because all her accounts have been compromised. on Tue, 12 May 2026 16:18:27 GMT]]>@InkomTech it's definitely not a fake scare, because this all began when *we* called *her* because "she" was DM'ing us on Discord about exciting investment opportunities. She called us back in tears when it was clear it wasn't just her discord, but everything.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116562507042973145https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116562507042973145Tue, 12 May 2026 16:18:27 GMT<![CDATA[Reply to My baby cousin called me in tears because all her accounts have been compromised. on Tue, 12 May 2026 16:16:48 GMT]]>@0xabad1dea first, is there a chance cousin was scammed by a faked ‘you’ve been compromised’ message?

Worst tangles I’ve seen folks get into (in the last year or two) have been losing their social media account(s). Worse, the fraudsters parlay lockouts done by platforms into really scaring folks.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/InkomTech/statuses/116562500541750772https://board.circlewithadot.net/post/https://infosec.exchange/users/InkomTech/statuses/116562500541750772Tue, 12 May 2026 16:16:48 GMT<![CDATA[Reply to My baby cousin called me in tears because all her accounts have been compromised. on Tue, 12 May 2026 16:15:19 GMT]]>@0xabad1dea I have heard that some students received phishing emails in relation to the Canvas hack. I don’t know if it was just opportunistic or directly related to the Canvas hack.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/BigK/statuses/116562494690455084https://board.circlewithadot.net/post/https://infosec.exchange/users/BigK/statuses/116562494690455084Tue, 12 May 2026 16:15:19 GMT<![CDATA[Reply to My baby cousin called me in tears because all her accounts have been compromised. on Tue, 12 May 2026 16:11:45 GMT]]>@0xabad1dea okay, that definitely adds a wrinkle. I'm not familiar with Instructure's crap, but I believe Canvas is web based. I wonder if it was malicious JS with a token stealer.

]]>https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116562480695441063https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116562480695441063Tue, 12 May 2026 16:11:45 GMT<![CDATA[Reply to My baby cousin called me in tears because all her accounts have been compromised. on Tue, 12 May 2026 16:09:45 GMT]]>@0xabad1dea browser extension?

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/smlx/statuses/116562472839938425https://board.circlewithadot.net/post/https://fosstodon.org/users/smlx/statuses/116562472839938425Tue, 12 May 2026 16:09:45 GMT<![CDATA[Reply to My baby cousin called me in tears because all her accounts have been compromised. on Tue, 12 May 2026 16:07:50 GMT]]>@rootwyrm she insists no. which implies malware got directly onto her desktop, but it's not clear how. (I cannot check her computer at this time.)

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116562465320006407https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116562465320006407Tue, 12 May 2026 16:07:50 GMT<![CDATA[Reply to My baby cousin called me in tears because all her accounts have been compromised. on Tue, 12 May 2026 16:05:52 GMT]]>@0xabad1dea Not specifically. Did she use the same password for Canvas and these other services? Or Canvas and the email associated with those services?

]]>https://board.circlewithadot.net/post/https://floss.social/users/shadow53/statuses/116562457532908792https://board.circlewithadot.net/post/https://floss.social/users/shadow53/statuses/116562457532908792Tue, 12 May 2026 16:05:52 GMT<![CDATA[Reply to My baby cousin called me in tears because all her accounts have been compromised. on Tue, 12 May 2026 16:04:47 GMT]]>@0xabad1dea I'm guessing that she used a common password for the impacted stuff?

]]>https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116562453324512222https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116562453324512222Tue, 12 May 2026 16:04:47 GMT