I used to check the front page at least once every day, and occassionally check specific subreddits. Now I don’t look at reddit unless theres some drama, like mods getting purged, then I’d go there and enjoy the drama. Occasionally there will be questions that only reddit has the answer to so I have to reluctantly use it. I...
From OPs screenshot, I noticed the JS code is attempting to extract the session cookie from the users that click on the link. If it’s successful, it attempts to exfiltrate to some server otherwise sends an empty value.
You can see the attacker/spammer obscures the url of the server using JS api as well.
May be how lemmy.world attackers have had access for a lengthy period of time. Attackers have been hijacking sessions of admins. The one compromised user opened up the flood gates.
Not a sec engineer, so maybe someone else can chime in.
Lemmy.world instance under attack right now. It was previously redirecting to 🍋 🎉 and the title and side bar changed to antisemitic trash.
They supposedly attributed it to a hacked admin account and was corrected. But the instance is still showing as defaced and now the page just shows it was “seized by reddit”.
Seems like there is much more going on right now and the attackers have much more than a single admin account.
Le torture (lemmy.world)
Be honest, do you still use reddit?
I used to check the front page at least once every day, and occassionally check specific subreddits. Now I don’t look at reddit unless theres some drama, like mods getting purged, then I’d go there and enjoy the drama. Occasionally there will be questions that only reddit has the answer to so I have to reluctantly use it. I...
What are these comments on lemmy posts? (lemmy.sdf.org)
Are they just an issue with wefwef or trying to use an exploit