Canvas extortion attack