Mastodawn

FYI: lemmy.world appears to have suffered a serious compromise.

FYI: lemmy.world appears to have suffered a serious compromise. - RBlind

At a minimum they had some hacked web UI mayhem going on along with at least 1 admin account compromised…now they are in an at least partially down state. Might be worth alerting the Powers That Be to see if they want to offer assistance and if any measures should be taken to protect servers federated with it.

Show thread

wetnoodle Jul 10, 2023

it got to lemmy.blahaj.zone, it’s a JavaScript injection lemmy.ml/post/1895271

PSA: Lemmy.world has been compromised! (Edit: Multiple Instances are down) - Lemmy

FYI!!! In case you start getting re-directed to porn sites. Maybe the admin got hacked? --------- edit: lemmy.blahaj.zone has also been hacked. beehaw.org [http://beehaw.org] is also down, possibly intentionally by their admins until the issue is fixed. Post discussing the point of vulnerability: https://lemmy.ml/post/1896249 [https://lemmy.ml/post/1896249] Github Issue created here: https://github.com/LemmyNet/lemmy-ui/issues/1895 [https://github.com/LemmyNet/lemmy-ui/issues/1895]

I deleted my .world account yesterday. Sorry if it’s a stupid question, but do I have to do anything about that? If so, what?

Show thread

astropenguin5 Jul 10, 2023

well that would explain the problem i had then! the error page redirected me to this community, i was meaning to make another account on a smaller instance anyways.