Cybersecurity incident — 2020-08-18 00:00:00
Affected organization: Canva
Affected country: Australia
Industry: Professional, Scientific, and Technical Services
Event type: Mixed
Event subtype: Exploitation of Application Server,Message Manipulation
Motive: Undetermined
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

Australian design platform Canva unwittingly provided phishing campaigns with graphics, making threat actors' schemes appear more legitimate as they pilfer credentials through social engineering trickery. Hackers hijacked the graphic design site and used it to leverage other brands like Sharepoint, Microsoft Office and Docusign in their messages.