this post was submitted on 10 Jul 2023
23 points (100.0% liked)

Announcements

433 readers
2 users here now

lemmy.zip annoucements

The same rules as the main instance apply here.

founded 1 year ago
MODERATORS
Demigodrick
Sami
23
Temporarily defederating from the 2 breached instances (self.announcements)
submitted 1 year ago by Sami to c/announcements
5 comments fedilink hide all child comments
 

Defederating from Lemmy.world and lemmy.blahaj.zone until they have their shit back together as they seem to have been compromised (extent is not fully known at the moment). Beehaw took their servers down preemptively too.

Rogue admin accounts can do harm to other instances too this is a precautionary measure until we have a better idea of what we're dealing with.

Reminder not to click on sketchy links!

you are viewing a single comment's thread
view the rest of the comments
[–] Sami 4 points 1 year ago

Here are post about it with some discussion/analysis:

https://lemmy.zip/post/357196

https://lemmy.zip/post/357639

https://lemmy.zip/post/358397

https://lemmy.zip/post/357947

tldr: It seems like they used an exploit to obtain admin accounts' cookies (the thing that keeps you logged into your account) to gain control of their accounts and potentially other exploits to deface the actual instances.