Lemmy Support

4719 readers

53 users here now

Support / questions about Lemmy.

Matrix Space: #lemmy-space

founded 5 years ago

MODERATORS

[email protected]

FYI: lemmy.world appears to have suffered a serious compromise. (rblind.com)

submitted 2 years ago by [email protected] to c/[email protected]

11 comments fedilink hide all child comments

At a minimum they had some hacked web UI mayhem going on along with at least 1 admin account compromised...now they are in an at least partially down state. Might be worth alerting the Powers That Be to see if they want to offer assistance and if any measures should be taken to protect servers federated with it.

top 10 comments

sorted by: hot top controversial new old

[–] [email protected] 16 points 2 years ago

[–] wetnoodle 15 points 2 years ago

it got to lemmy.blahaj.zone, it's a JavaScript injection https://lemmy.ml/post/1895271

[–] [email protected] 4 points 2 years ago* (last edited 2 years ago)

well that would explain the problem i had then! the error page redirected me to this community very helpfully. i was meaning to make another account on a smaller instance anyways, so not entirely bad

[–] [email protected] 0 points 2 years ago (1 children)

I deleted my .world account yesterday. Sorry if it's a stupid question, but do I have to do anything about that? If so, what?

[–] [email protected] 4 points 2 years ago (1 children)

You ruined everything! 😡

No lmao an admin account got hacked it seems

[–] [email protected] 1 points 2 years ago (1 children)

I got that much, but I don't understand anything else. JavaScript injection? Is someone going to steal my deleted account or is that not possible?

[–] [email protected] 4 points 2 years ago (1 children)

From what I've read, links were redirecting to "shock" websites. It's more of an old-internet Rick roll, but with gore type content instead of a silly music video. I don't think we have to worry about data, but we'll learn more in the next hour(s).

[–] [email protected] 1 points 2 years ago (1 children)

Thanks for the explanation!

[–] [email protected] 1 points 2 years ago (1 children)

On another post they showed it was stealing browser cookies, so your login information for any site you're logged into could be compromised. Definitely not a prank

[–] [email protected] 1 points 2 years ago

So how does that effect a deleted account?

load more comments