Canva design platform actively abused in credentials phishing

As per a new report by cybersecurity company Cofense, menace actors are significantly applying Canva to make hosted HTML landing pages that are then utilised to redirect phishing victims to phony login varieties.