Essential information

Value / Name

http://91.215.85.103/pay_or_leak/instructure_affected_schools_list.txt

Confidence

100/100

Revoked

Yes

Valid from

09/05/2026 13:15

Valid until

07/06/2026 18:58

Pattern type

stix

Published

11/05/2026 11:56

Modified

07/06/2026 18:58

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://91.215.85.103/pay_or_leak/instructure_affected_schools_list.txt']

Labels / Tags

Labels: api compromise canvas lms credential theft data breach education sector extortion phishing campaign social engineering

Marking (TLP)

TLP:CLEAR