this post was submitted on 10 Jul 2023
7 points (100.0% liked)

Stuff

3 readers
1 users here now

This is a place to talk about random stuff, or just say hello.

founded 1 year ago
MODERATORS
[email protected]
7
Warning: lemmy.world has been hacked (lemdit.com)
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
4 comments fedilink hide all child comments
 

It looks like lemmy.world has been hacked.

The instance has been defaced, the site is only intermittently accessible, sometimes it redirects to a random video or other nasty URLs

DO NOT ATTEMPT TO LOG INTO LEMMY.WORLD UNTIL THIS IS CLEARED UP AND OFFICIAL ANNOUNCEMENTS ARE MADE BY ITS ADMIN.

My recommendation is to stay away entirely for the time being and monitor this thread for updates: https://lemmy.ml/post/1895271 (https://lemdit.com/post/44963)

Update:

  • It looks like this was caused by a compromised Admin account
  • It may be attributed to an exploit introduced by a specific git commit that lemmy.world was using (not public).

Initial indications are that this was particular to lemmy.world and not a symptom of wider Lemmy vulnerabilities.

top 4 comments
sorted by: hot top controversial new old
[–] [email protected] 2 points 1 year ago

Update:

It looks like things are finally back under control at lemmy.world: https://lemdit.com/post/45464

[–] [email protected] 1 points 1 year ago

Update:

  • This is also affecting lemmy.blahaj.zone
  • There are concerns that this may in fact be a wider Lemmy issue rather than a lemmy.world admin account hack
  • Concerning issues being discussed in this thread: https://lemdit.com/post/45035
[–] [email protected] 1 points 1 year ago

Update: lemmy.world was briefly back to normal and there had been a post saying that everything was fine now - it's not.

The site has just started doing the same thing again.

Please do not try using lemmy.world for the time being.

[–] [email protected] 1 points 1 year ago

Other discussion about this: https://lemmy.ml/post/1895271