Signal boosting: Furaffinity staff have manually logged everyone out to protect against session token theft.
They're asking people to not log in again until they give the green light!
To add a note of my own: the reason they've done that is the attackers don't need your password, they just need you to open the website while logged in & then they can steal your authentication cookies and pretend they're you.
UPDATE: FA's official Twitter account is now compromised. I believe their Discord server is now the only reliable source of updates!
UPDATE 2: The Twitter account has been successfully recovered, and is a reliable source of information again.
The domain has also been recovered, but they haven't fully re-enabled the website yet.
UPDATE 3: Furaffinity have fully reclaimed access to their domain and re-enabled the site now, however for technical reasons it'll be safest to wait an additional 24 hours:
- Their DNS records (which tell your computer where to fetch furaffinity.net from) will take up to 24 hours to finish propagating
- If too many people flood back into the site at the same time, the server will struggle to deal with all that increased traffic, so you'll be doing them a favour by waiting a little longer to space it out!
#furaffinity