Who would even fall for the canvas “virus” prob a 8 year old

Milan092 wrote:

Who would even fall for the canvas “virus” prob a 8 year old

A lot of people got hacked.

Faucon16 wrote:

TA19134 wrote:

Guys can somebody help me from @Cratey-DW on griffpatch prof he's bullying me he is picking on me becuase I am doing some spelling mistaked in scratch coz I am typing fast and he is picking on me coz I say u instead of u and then he is saying gramamr instead of grammar

I can help you

THX ALOT

Faucon16 wrote:

Milan092 wrote:

Who would even fall for the canvas “virus” prob a 8 year old

A lot of people got hacked.

Oh how did they get hacked

Projects from people who are getting hacked shows to see inside and go to backdrop for a surprise but if you do you become infected with the hack and you cant gain access back to your acc,its called the canvas virus and don't get it! #stopcanvasvirusnocanvasvirus,BEWARE, A group of hackers has created malware that we have dubbed ‘the canvas’ virus. The virus lurks inside of infected projects, it tells you to see inside and open the backdrop editor. DON'T DO THIS, You will receive a message alerting you that you've been hacked, and will be signed out of your account. Your projects will be replaced with the infection and your profile changes. Be safe, stay alert, and report. Copy to spread the word!!!! More infos : https://scratch.mit.edu/discuss/topic/882127/

Milan092 wrote:

Faucon16 wrote:

Milan092 wrote:

Who would even fall for the canvas “virus” prob a 8 year old

A lot of people got hacked.

Oh how did they get hacked

They didn't know the problem

We have to all work together against Canvas ! TOGETHER, WE ARE STRONGER THAN CANVAS !
ALL FOR SCRATCH !

Faucon16 wrote:

Milan092 wrote:

Faucon16 wrote:

Milan092 wrote:

Who would even fall for the canvas “virus” prob a 8 year old

A lot of people got hacked.

Oh how did they get hacked

They didn't know the problem

Ahhh ok

Milan092 wrote:

Faucon16 wrote:

Milan092 wrote:

Faucon16 wrote:

Milan092 wrote:

Who would even fall for the canvas “virus” prob a 8 year old

A lot of people got hacked.

Oh how did they get hacked

They didn't know the problem

Ahhh ok

This is why I created this topic. (The other topic about that was closed, so I created this one)

HELP @Cratey-DW IS ANNOYING GO HERE https://scratch.mit.edu/users/griffpatch/#comments-408663482 and help me reply to him! pls!

TA19134 wrote:

HELP @Cratey-DW IS ANNOYING GO HERE https://scratch.mit.edu/users/griffpatch/#comments-408663482 and help me reply to him! pls!

If he starts again, don't reply him and say it to me

And stop talking about him here, it'isn't the subject

Faucon16 wrote:

Recently, there has been a lot of confusion about what the ‘Canvas virus’ is and i want to clear that confusion away by making this topic.
Most confusion comes from copy/pasted warnings in the comments section of projects (mostly featured ones)
Here is one example:
SCRATCHERS BEWARE, A group of hackers has created malware that we have dubbed ‘the canvas’ virus. The ‘Canvas’ virus lurks inside of projects of the infected, it tells you to ‘see inside’ and open the backdrop editor. DO NOT DO THIS, You will receive a message alerting you that you've been hacked, and will be signed out of your account. Your projects will be replaced with the infection and your profile description changes. Be safe, stay alert, and report. Copy and paste" SPREAD THE WORD!!
The comments give already sort of an answer about the situation, but it's still very vague and that copy/pasting is mostly used to spread misinformation.

The ‘virus’ actually explained
So, it's actually not a virus, but a vulnerability/exploit that has affected many Scratchers.
It works by going into the project editor (or clicking ‘see inside’) and then going to the costume/backdrop editor. When you open it, the costumes can actually do Arbitrary Code Excecution, which is a way that code can be excecuted. In the desktop/offline editors, it's even worse because then they can run malicious shell programs and steal data from you! And this is not a theoretical possibility, it has already affected multiple Scratchers.

What it can do
It can delete and/or hack all projects, change the description of the victim's profile, comments things on the victim's profile without their concent and run malware (only on desktop/offline editors).

How to prevent it
Don't open suspicious projects asked by others to open and avoid any random links.
If you did get hacked: Unshare all projects, change your password and delete any comments that you didn't type ASAP.

Here is a blog post by GarboMuffin that also explains it.

If you have something to add or a suggestion for this topic, then reply down below!

All credits to @ScodexPerson

Has it passed/fixed now?

EeveeRae wrote:

Faucon16 wrote:

Recently, there has been a lot of confusion about what the ‘Canvas virus’ is and i want to clear that confusion away by making this topic.
Most confusion comes from copy/pasted warnings in the comments section of projects (mostly featured ones)
Here is one example:
SCRATCHERS BEWARE, A group of hackers has created malware that we have dubbed ‘the canvas’ virus. The ‘Canvas’ virus lurks inside of projects of the infected, it tells you to ‘see inside’ and open the backdrop editor. DO NOT DO THIS, You will receive a message alerting you that you've been hacked, and will be signed out of your account. Your projects will be replaced with the infection and your profile description changes. Be safe, stay alert, and report. Copy and paste" SPREAD THE WORD!!
The comments give already sort of an answer about the situation, but it's still very vague and that copy/pasting is mostly used to spread misinformation.

The ‘virus’ actually explained
So, it's actually not a virus, but a vulnerability/exploit that has affected many Scratchers.
It works by going into the project editor (or clicking ‘see inside’) and then going to the costume/backdrop editor. When you open it, the costumes can actually do Arbitrary Code Excecution, which is a way that code can be excecuted. In the desktop/offline editors, it's even worse because then they can run malicious shell programs and steal data from you! And this is not a theoretical possibility, it has already affected multiple Scratchers.

What it can do
It can delete and/or hack all projects, change the description of the victim's profile, comments things on the victim's profile without their concent and run malware (only on desktop/offline editors).

How to prevent it
Don't open suspicious projects asked by others to open and avoid any random links.
If you did get hacked: Unshare all projects, change your password and delete any comments that you didn't type ASAP.

Here is a blog post by GarboMuffin that also explains it.

If you have something to add or a suggestion for this topic, then reply down below!

All credits to @ScodexPerson

Has it passed/fixed now?

Sadly, no. The ST is hard-working to fix it.

Share the link of the topic !

how do they run the code