This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Zack Whittaker
zackwhittaker.com
did:plc:6uqqv7asv2xsxwn224tyexng
Hackers injected a CSS file into the Canvas login page that takes over the screen when it loads. The CSS file is hosted on an AWS bucket owned by Instructure. The file path suggests the hackers uploaded the CSS file through Canvas and directly linked to it.
Archive: https://web.archive.org/web/20260507195732/https://instructure-uploads-apse2.s3.ap-southeast-2.amazonaws.com/account_189630000000000001/attachments/130311/canvas-override.css
https://techcrunch.com/2026/05/07/hackers-deface-school-login-pages-after-claiming-another-instructure-hack/
2026-05-07T21:13:27.576Z