Lemmy.world appears to have been hacked

NoConfigence2192, 11 months ago

As far as I can tell things seem to be back to normal now. Care should still be take so proceed with caution

NoConfigence2192, 11 months ago (edited 11 months ago)

@dhamlinmusic @dhamlinmusic @fastfinge @admin @Altrissa @OldManOnFire @noahcarver @rumster

!lemmy_support appears to be tracking the issue through lemmy.ml/post/1896249

and updating the community at large through a PSA here lemmy.ml/post/1895271

if those threads get too much activity they may switch to new threads or start using another medium so do not count on them remaining up to date until things are fully resolved.

lemmy.blahaj.zone appears to have been affected as well.

Right now working theory is some combination of admin account compromise and code injection through the markdown processor used prior to 18.1 but that could change over time. Looks like we’re on latest so hoping we’re good.

Would continue to avoid lemmy.world and lemmy.blahaj.zone until there is a better understanding of what happened and there is a good consensus all is resolved.

Gotta sleep soon so wishing us all luck

There is a more technical discussion about a related issue that mentions the servers we know about lemmy.sdf.org/post/696053

Now really good night

Altrissa, 11 months ago

Thanks for the heads up!

NoConfigence2192, 11 months ago (edited 11 months ago)

Correction. They are definitely not clear yet

0933, 11 months ago

Yes. Setting up a new system (Steam Deck) and thought I was putting in the URL wrong. Just saw old dudes blowing each other.

akatsukilevi, 11 months ago

I've literally just opened it, the title says 'Israel - nigga style' then it redirects to a video about a guy saying 'just raped a kid in the woods'
Unsure what happened there, because for a brief moment the website underneath it seems to start loading, but then it redirects to the video(which is at lemmy.world server, if the URL of the video says anything about it)