Discord Server alo Community Raid: Bot Token, Webhook Spam, kple Audit-Log Gbugbɔgaxɔ si Wogblẽ¶
Xexlẽme kpatawo toa vovo le dukɔ ɖesiaɖe me. Axa sia zã 911, si nye xexlẽdzesi na United States kple Canada. Dukɔ bubu geɖewo zãa 112, 999, alo xexlẽdzesi bubu. Di xexlẽdzesi si le miaƒe dukɔa me.
Nyɔnyrɔ̃ na ame akpe geɖe @everyone nyatakaka pings kple ekpɔkpɔ be wò Discord nutoa me server, fefe habɔbɔ, alo subreddit le ɖoɖowɔwɔ ƒe amedzidzedze alo automated "server nuke" si le dɔ dzi te nye dijitaal nudzɔdzɔ kpata si zɔna kabakaba. Le sɛkɛnd 30 va ɖo 90 me la, dɔdzikpɔla ƒe akɔntabubu si ŋu wogblẽ nu le, bot token si woxɔ le amewo si, alo webhook si do go ate ŋu atutu mɔ̃ gbogbo aɖewo, axe mɔ ɖe hamevi akpe geɖe siwo le se nu nu le agbɔsɔsɔ gã aɖe me, atsɔ cryptocurrency wallet drainers ayɔ wò server la ɖe wò server dzi, alo aɖo Subɔsubɔdɔ ƒe Ðoɖowo dzi dada sesẽwo ɖe amewo (siwo dometɔ aɖewoe nye nɔnɔmetata siwo womelɔ̃ ɖe edzi o alo Ðeviwo ƒe Gbɔdɔdɔ ƒe Ŋutasẽnuwɔwɔ Ŋuti Nyatakakawo, CSAM) si wowɔ be wòaʋã Discord Trust & Safety full-server termination si wowɔna le wo ɖokui si si xea mɔ na server tɔ ŋutɔ ƒe akɔnta hã. Ne amedzidzela aɖe le CSAM si mele se nu o, ŋɔdzinuwɔlawo ƒe ŋɔdzidoname, alo ŋutasẽnuwɔwɔ ƒe ŋɔdzidoname siwo gbɔna kpuie dam ɖe Internet dzi la, tsɔ míaƒe... nyatakaka siwo mele se nu o kple esiwo gblẽa nu le ame ŋu ŋuti nyatakakawo gbɔgblɔ kple ɖeviwo dzadzraɖo, kadodo kple lã lénuwo, kple NCMEC ƒe nyatakakawo nana mɔfialawo, eye nàbia míaƒe xexeame katã xexlẽdzesi siwo wozãna kpata directory ne ame aɖe le ŋutilã me afɔku me.
Be nàtɔ te amedzidzedze dzidzedzetɔe le sɛkɛnd 60 teti me bia be nànya amedzidzedze ƒe mɔ̃ etɔ̃awo dometɔ kae le wò nutoa me ƒom:
1. An External Join-Wave / User-Bot Raid: Zãla ƒe akɔntabubu alafa geɖe siwo wowɔ le wo ɖokui si la tsia to amekpekpe ƒe kadodo alo tofloko URL dzi le ɣeyiɣi ɖeka me yia spam mɔnuwo kple DMwo.
2. A Webhook Injection Attack: Amedzidzela si xɔ channel Webhook URL (discord.com/api/webhooks/...) tsiɖɔɖɔwo @everyone pings kple ametafatafa ƒe kadodowo evɔ màge ɖe server la me alo adze le hameviwo ƒe ŋkɔwo me gbeɖe o.
3. Ememe Mɔnukpɔkpɔ ƒe Nugblẽfexexe ("Server Nuke"): Dɔdzikpɔla ƒe ɣeyiɣi ƒe dzesi (Local Storage / . leveldb dzesi si infostealer malware fi) alo bot si wowɔ ɖe ɖoɖo nu ƒe Developer Token (Bot ...) kple ** .Administrator** woxɔ mɔɖeɖe le amewo si, wodaa tu DELETE /channels kple PUT /bans API yɔyɔ le mɔ̃a ƒe duƒuƒu me.
Mɔfiame sia na sɛkɛnd 60 ƒe mɔxexeɖedɔléle nu kpata ƒe ɖoɖo si sɔ pɛpɛpɛ, ɖoɖo si wòle be woawɔ be woaɖe asi le Bot Token siwo ŋu wogblẽ nu le ŋu hafi aƒo afɔkpodzi na bot alakpatɔ, ʋɔnudrɔ̃ƒe ƒe Audit Log ɖeɖeɖa, kple Discord Trust & Safety (dis.gd) kple Reddit Mod Support gbugbɔgaxɔ ƒe ɖoɖowo.
Wɔ esia fifia¶
- Na "Pause Invites" kple "Pause DMs" nawɔ dɔ le Discord ƒe Security Actions menu me enumake (exɔa sɛkɛnd 5). Zi wò Server Name dzi le etame le miame -> tia Security Actions (alo Server Settings -> Safety Setup -> Raid Protection) -> kpɔ Pause Invites kple Pause DMs, eye ɖo ɣeyiɣi didime la ɖe Gaƒoƒo 24. Esia xea mɔ na amekpekpe ƒe kadodo ɖesiaɖe kple wò Vanity URL si nèwɔ enumake be woagaɖe mɔ na amedzidzedze ƒe akɔnta yeyewo nawɔ ɖeka o esime wòle hamevi kple hamevi dome Gbedasi Tsã siwo katã womebia o la tsim o.
- Ðe nu le
Administrator, .Manage Channels, .Manage Roles, .Manage Webhooks, kpleBan Membersmɔɖeɖewo tso@everyoneakpa KPLE tso wò dɔwɔlawo/bot ƒe akpawo gbɔ. Ʋu Server ƒe Ðoɖowo -> Dɔwɔnawo -> Mɔɖeɖe Gbãtɔ (@everyone) -> yi anyime eye nàzi Clear Permissions dzi (alo nàtrɔ OFF tẽSend Messages, .Mention @everyone, @here, and All Roles, .Attach Files, .Embed Links, kpleCreate Public/Private Threads). Emegbe zi wò Moderator / Admin / Bot roles dzi le wò Owner role te tututu eye nàtrɔ OFF hena ɣeyiɣi aɖeAdministrator, ** .Manage Channels, kple ** .Ban Membersbe woatɔ te channel-deletion nuke si le dɔ wɔm si kuku le eƒe mɔwo dzi. - Kpɔe ɖa
Server Settings -> Audit LogGBÃTƆ eye nàɖee to Action (Delete Channel, .Ban Member, .Create Webhook, .Update Role) be nàde dzesi akɔnta alo bot si nye alakpatɔ tututu. Mègasusui gbeɖe be moderator alo bot kae le nuke la wɔm o. Audit Log ɖea fefewɔla si tututu le API yɔyɔwo wɔm le ɣeyiɣi ŋutɔŋutɔ me fiana. - Ne Custom Bot le nuking server la, REVOKE eƒe Bot Token le Discord Developer Portal (
discord.com/developers/applications) alo axɔ eƒe Akpa ƒe Mɔɖeɖewo HAFI nàƒo afɔkpodzi alo axe mɔ ɖe bot la nu. Ne bot si ŋu wogblẽ nu le la si...AdministratoraloManage Servermɔɖeɖe, alo ne amegbetɔ ƒe dɔdzikpɔla si ŋu wogblẽ nu le gakpɔtɔ le dɔwɔƒea me la, afɔkpodzi na bot la ko ana amedzidzela ƒe nuŋɔŋlɔa te ŋu gbugbɔ kpea bot la enumake alo yia edzi le API yɔyɔwo dam vaseɖe esime woaɖe eƒe dzesi alo akpa si wòwɔna ɖa. - Ne spam gbedasiwo gblɔ be
APPaloBOTle ŋkɔ wɔnuku aɖe si MELE wò hameviwo ƒe ŋkɔwo me o la xa la, ʋuServer Settings -> Integrations -> Webhookseye nàtutu Webhook siwo katã womede dzesii o la ɖa enumake. Webhook ƒe nyatakaka gbegblẽwo metsoa zãla aɖe gbɔ le wò dɔwɔƒea o; wotutunɛ to HTTP dziPOSTbiabia na Webhook URL si do go eye ne ètutu Webhook si le Integrations -> Webhooks me (alo te fli ɖe eme koManage Webhooksmɔɖeɖewo). - Dzra Gbedasi ƒe Kadodo, Zãla ƒe ID (
18-to-19-digit Snowflake ID), kple Audit Log screenshots HAFI mass-purging illegal content. Ne raiders da CSAM, gore, alo doxxing be woatsɔ awɔ frame wò server la, screenshot Audit Log si fia amedzidzela ƒe join timestamp kple mɔxexeɖedɔa ƒe afɔɖeɖe, kɔpi amedzidzela la ƒe Discord User ID si nɔa anyi ɖaa, eye nàgblɔ gbedasi la to Right-Click -> Report Message dzi hafi awɔ bulk message purge ale Discord Trust & Safety ƒe nyatakakadzraɖoƒea ŋlɔa wò ɖi abe nyatakakadzikpɔla ene tsɔ wu be wòanye server tɔ si le dɔ wɔm kplii.
Danger
"Malicious Raid Framing" Trap (Alesi Amedzidzelawo Na Woxe Mɔ Ðe Victims' Servers Kple Owner Accounts Nu): Raid ƒuƒoƒo siwo ŋu wowɔ ɖoɖo ɖo la ɖoe koŋ tsɔa nyatakaka siwo ŋu wode se ɖo (abe CSAM alo extremist material ene) yɔa Discord server siwo woɖo taɖodzinu na la fũ eye emegbe wozãa bot account 50 enumake tsɔ gblɔa server la le agbɔsɔsɔ gã me na Discord Trust & Safety. Ne Discord ƒe dedienɔnɔ ƒe ɖoɖo si wowɔna le eɖokui si wu server aɖe nu le sedzidada sesẽwo ta la, exea mɔ na Server Owner ŋutɔ ƒe Discord akɔnta kple Administrator ɖesiaɖe si le server la dzi le eɖokui si. Be nàkpɔ wò ŋutɔ wò akɔnta kple server ta: (1) Do ʋua @everyone Attach Files kple Send Messages enumake, (2) Zã Discord ƒe In-App Report Message ƒe dzesi si wotu ɖe eme ɖe nyatakaka ɖeka si do dziku na ame dzi hafi nàtutu susɔea le agbɔsɔsɔ gã me ale be wò akɔnta naŋlɔ abe nyadzɔdzɔŋlɔla ene, eye (3) Enumake nàtsɔ "Server Raid / Malicious Framing Incident Report" si do ŋgɔ axe mɔ ɖe enu la aɖo ɖa le https://dis.gd/request si me wò Audit Log ƒe screenshots kple amekpekpe siwo wotɔ vie hã le.
Nyametsotso ƒe ati: Nutoa me ƒe amedzidzedze si le dɔ dzi ƒe dɔléle didi kple etɔ te le sɛkɛnd 60 teti me¶
De dzesi amedzidzedze ƒe mɔ̃ɖaŋunu eneawo dometɔ si le dzɔdzɔm fifia eye nàwɔ kill-switch ƒe ɖoɖo si sɔ pɛpɛpɛ le ete.
flowchart TD
RaidStart["Wokpɔ Active Server Raid, Spam Flood, alo Channel Deletion"] --> PauseInvites["ATA 1: Zi Server Name -> Dedienɔnɔ ƒe Dɔwɔwɔwo -> Na 'Pause Invites' & 'Pause DMs' nawɔ dɔ."]
PauseInvites --> AuditCheck["ATA 2: Ʋu Server Settings -> Audit Log be nàde dzesi Nuwɔla la"]
AuditCheck --> VectorType{"Nukae Audit Log alo Chat Fia?"}
VectorType -->|"Akɔntabubu Yeye Alafa geɖewo Joining & Spamming Chat/DMs"| JoinRaid["EXTERNAL JOIN RAID: Strip @everyone 'Dɔ Gbedasiwo', 'Attach Files', & 'Mention @everyone' -> Do Kpeɖodzi ƒe Dzidzenu ɖe dzi va ɖo 'Kɔkɔtɔ kekeake (Telefon si ŋu woɖo kpee)' -> Na AutoMod Mention Spam Filter nawɔ dɔ"]
VectorType -->|"Gbedasi Siwo Wode dzesii be 'APP/BOT' Spamming @ame sia ame, Fefewɔla Mele Hamea ƒe Ŋkɔwo Me O"| WebhookRaid["WEBHOOK SPAM ATTACK: Ʋu Server ƒe Ðoɖowo -> Integrations -> Webhooks -> Tutu Webhooks Katã si Womekpɔ De dzesii O -> Kpɔ Ame Si Wɔ Wo le Audit Log me"]
VectorType -->|"Moderator alo Admin Amegbetɔ ƒe Akɔntabubu Le Channelwo Tutum / Mɔxexe Ðe Zãlawo Nu"| ModCompromised["COMPROMISED MODERATOR TOKEN: He Mod Role Te Wò tɔ alo Ðe Akpa ƒe Mɔɖeɖewo -> Xe Se na Compromised Mod Account -> Na Mod Tutu PC si me Dɔlékui Le & Gbugbɔ Ðo Nyagbea"]
VectorType -->|"Bot Account Nye Mass-Deleting Channels, Dɔwɔnawo Wɔwɔ, alo Mɔxexe Ðe Enu"| BotNuke["COMPROMISED BOT TOKEN NUKE: Ðe Bot ƒe Akpa si Wokpɔna ƒe Mɔɖeɖewo ɖa le Zero -> Gbugbɔ ɖo Bot Token ɖe Developer Portal (discord.com/developers) -> Kick/Ban Bot & Revoke OAuth2"]
JoinRaid --> EvidenceClean["ATA 3: Ka nya ta tso Framing Posts ɖesiaɖe si mele se nu o ŋu to In-App Report dzi Gbã -> Run Bulk Message Purge / Recovery"]
WebhookRaid --> EvidenceClean
ModCompromised --> EvidenceClean
BotNuke --> EvidenceClean
Akpa 1: Sɛkɛnd 60 ƒe mɔxexeɖedɔléle nu kpata ƒe ɖoɖo (Ʋu dodo nutsitsi) .¶
Ne amedzidzedze alo server nuke dze egɔme la, amegbetɔ ƒe dzikpɔlawo mate ŋu atsɔ asi axe mɔ ɖe akɔntabubuwo nu kabakaba wu Python alo Go script si wowɔ le wo ɖokui si si le biabia siwo le ɣeyiɣi ɖeka me la dam ɖe Discord REST API ŋu o (50 requests per second). Ele be nàtso amedzidzela ƒe API ŋutetewo le server-configuration level.
1. Alesi woawɔ atɔ te User-Bot Join Raid le sɛkɛnd 15 me¶
Ne akɔnta alafa geɖe siwo wotsɔ ƒua gbe le ɖeka wɔm kple wò server eye wole tsi ƒom ɖe mɔ̃wo dzi alo le mass-DMing wò hameviwo kple aʋatsonuwo "Free Nitro" alo "Crypto Airdrop" ameflunyawo ƒe kadodowo:
1. Ʋu "Dedienɔnɔ ƒe Dɔwɔwɔwo" (Pause Invites + Pause DMs):
- Zi wò Server Name dropdown (le miame le etame) -> Dedienɔnɔ ƒe Dɔwɔwɔwo dzi.
- Kpɔ Tɔ vie Kpekpewo (trɔ gbɔ "Invites are currently paused for this server" ɖe gotagome kadodo ɖesiaɖe alo Vanity URL click) kple Pause DMs (xea mɔ na amesiwo menye xɔlɔ̃wo o le server la me be woagadze gbedasi yeyewo ƒe kaƒoƒo tẽ gɔme o).
2. Do Dzesidede ƒe Dzidzenu ɖe dzi va ɖo esi sɔ gbɔ wu (Highest - Phone Verified):
- Yi Server Settings -> Safety Setup -> Verification Level -> zi Trɔ -> tia Highest (Ele be telefon si ŋu woɖo kpee nanɔ woƒe Discord akɔnta me).
- Amedzidzedze ƒe botnet siwo wowɔna le wo ɖokui si ƒe akpa gãtɔ ɖoa ŋu ɖe dzesi siwo ŋu woɖo kpee to e-mail dzi si mexɔ asi o dzi ($0.01 per token) tsɔ wu be woazã akɔntabubu siwo ŋu woɖo kpee to SMS dzi. Trɔ ɖe Highest ŋu xea mɔ na bot token siwo ŋu womeɖo kpee o siwo le server la me xoxo la enumake be woagaɖo gbedasiwo alo gbedasiwo ɖoɖo ɖe hameviwo o.
3. Ʋuʋu @everyone Channel Mɔɖeɖewo Le Xexeame Katã:
- Yi Server ƒe Ðoɖowo -> Dɔwɔwɔwo -> Mɔɖeɖe Gbãtɔ (@everyone).
- TSI: TSI:
- Send Messages kple Send Messages in Threads
- Create Public Threads kple Create Private Threads
- Attach Files kple Embed Links
- Add Reactions kple Use External Emoji / Stickers
- Mention @everyone, @here, and All Roles
- Critical Check for Channel Permission Overrides: Ne mɔ̃ aɖe koŋ (abe #general alo #chat) ƒe Dzesi Dama (Allow) tsɔ asi le eŋu @everyone akpa si wòwɔna na Send Messages le Edit Channel -> Permissions me la, xexeame katã ƒe Server Settings ƒe akpa si nètrɔ la ma axe mɔ ma o. Ne èdi mɔ̃ ɖesiaɖe si gakpɔtɔ le ʋuʋum kple nyatakaka gbegblẽwo la, zi Gear Icon (Edit Channel) -> Mɔɖeɖewo -> dzi @everyone eye woɖoe Send Messages na Dzĩ la X (Deny) alo na Slowmode (6 hours).
2. Alesi woawɔ atɔ te "Webhook Spam" ƒe amedzidzedze le sɛkɛnd 15 me¶
Server tɔ geɖe tsia dzodzodzoe ne wosusu be woge ɖe yewoƒe server bliboa me le esi zãla aɖe yɔ ŋkɔ ta "Server Nuke Syndicate" kple ** .APP** (tsã la BOT) akɔtagbalẽvi la le pinging @everyone 5 zi gbɔ zi 5 le sɛkɛnd ɖeka me le #announcements eye womate ŋu azi ɖusi dzi ahaxe mɔ ɖe enu o.
- Nusita màte ŋu axe mɔ ɖe Webhook nu o: Discord Webhook nye HTTP ƒe nuwuƒe bɔbɔe aɖe (https://discord.com/api/webhooks/{webhook.id}/{webhook.token}). Ame sia ame si axɔ URL ma (le esi moderator aɖe ɖee fia le vo me le livestream dzi, tsɔe de dutoƒo GitHub nudzraɖoƒe, alo na mod account si ŋu wogblẽ nu le wɔ ɖeka ta) ateŋu aɖo JSON payloads siwo seɖoƒe meli na o ɖe channel ma evɔ menye wò Discord server me tɔ gɔ̃ hã o.
- Alesi woawɔ awui enumake:
1. Ʋu Server ƒe Ðoɖowo -> Integrations -> Webhooks.
2. Kpɔ Webhooks ƒe xexlẽdzesiwo ɖa eye nàkpɔ mɔ si dzi wo dometɔ ɖesiaɖe fia asi.
3. Zi Webhook ɖesiaɖe si womede dzesii o dzi eye nàzi Delete Webhook dzi (alo zi Copy Webhook URL dzi hena ʋɔnudrɔ̃ƒe ƒe nuŋlɔɖiwo gbã, emegbe Delete Webhook). Spam la tɔa te milisekɔnd si me woɖe Webhook la ɖa.
4. Ʋu enumake Server ƒe Ðoɖowo -> Audit Log -> Filter by Action: Create Webhook be nàkpɔ *moderator alo bot account kae wɔ Webhook ma. Ne moderator aɖe ƒe akɔnta wɔ Webhook le 3:00 AM le woƒe manyamanya me la, moderator ma ƒe Discord session token la gblẽ: ɖe woƒe akpa ɖa eye nàɖe afɔ na woƒe akɔnta enumake.
--- .
Akpa 2: "Server Nuke" ememetɔ aɖe nu tsotso (Promised Moderator vs. Compromised Bot Token) .¶
"Server Nuke" dzɔna ne amedzidzela aɖe gblẽ akɔnta alo bot si si dɔdzikpɔkpɔ ƒe mɔɖeɖe kɔkɔwo le me (Administrator, . Manage Channels, . Manage Roles, . Ban Members, . Manage Webhooks) eye wòwɔa tsɔtsrɔ̃ ƒe nuŋɔŋlɔ si wowɔna le wo ɖokui si (Nuker). Le sɛkɛnd 10 me la, ŋɔŋlɔdzesi la ʋuna to mɔ̃ ƒe ID ɖesiaɖe me be yeatutu nuŋɔŋlɔ kple gbeɖiɖi ƒe mɔ̃wo katã ɖa, awɔ mɔ̃ yeye 250 siwo ŋkɔ woyɔ #nuked-by-xxx, tutua server ƒe akpawo katã, eye wòdoa mass-ban biabia ɖe hameviwo ƒe ŋkɔwo ŋu.
1. Discord's Role Hierarchy Rule (Nusita nàte ŋu atɔ te Admin adzodala alo màte ŋu atɔ te o)¶
Discord zi Akpa ƒe Ðoɖowɔɖi si le tsitrenu sesẽ aɖe dzi le Server Settings -> Roles me:
- Server Owner (Crown holder) nɔa akpa ɖesiaɖe tame le server la me eye ateŋu aɖe amegbetɔ alo bot ɖesiaɖe ɖa alo axe mɔ ɖe enu metsɔ le akpa ƒe ɖoɖo me o.
- Amesiame si menye Aƒetɔ o ƒe Dɔdzikpɔla ate ŋu atrɔ asi le, aɖe asi le eŋu, alo axe mɔ ɖe ezãlawo kple bot siwo ƒe akpa gãtɔ bɔbɔ nɔ ŋutilã me le ete woawo ŋutɔ ƒe akpa kɔkɔtɔ kekeake le Server Settings -> Roles ƒe xexlẽdzesi me KO.
- Ne bot si ŋu woɖe mɔ ɖo ƒe akpa si dzi wokpɔna la le ɖoƒe si le #2 le Roles list me eye wò Head Admins siwo dzi nèka ɖo la nɔa anyi ɖe #3, ŋusẽ mele wò Tatɔ Admins ŋu be woaƒo bot la alo atrɔ asi le eƒe akpa ŋu esime wò (Server Owner) nèle alɔ̃ dɔm o.
2. Alesi tututu woawɔe be woaɖe Compromised Bot Nuke aɖe ɖa¶
Ne Audit Log ɖee fia be bot akɔnta (wò custom server bot alo ame etɔ̃lia ƒe bot si dzi woda le) le mɔ̃wo tutum alo le mɔxexe ɖe hameviwo nu la, wɔ ɖe afɔɖeɖe 3 ƒe ɖoɖo sia tututu dzi:
| Afɔɖeɖe | Afɔɖeɖe Tutɔ Si Nàwɔ | Nusita Ðoɖowɔwɔ Le Vevie |
|---|---|---|
Afɔɖeɖe 1: Ðe Bot ƒe Akpa si Wokpɔna ƒe Mɔɖeɖewo ɖa (0.0 Seconds) |
Ʋu Server Settings -> Roles -> zi Managed Role si woɖo ɖi si wowɔ na bot ma (e.g., MyCustomBot) -> zi Clear Permissions dzi le eƒe akpa ƒe ɖoɖowo tame (vevietɔ ne ètsi ** .Administrator, ** .Manage Server, ** .Manage Roles, ** .Manage Channels, ** .Ban Members, kple ** .Manage Webhooks) -> zi Dzra Tɔtrɔwo Ðo dzi. |
Togbɔ be amedzidzela ƒe Python ŋɔŋlɔdzesi le veviedodotɔe hammering Discord API kple DELETE /channels/{id}, bot ƒe akpa ƒe mɔɖeɖewo ɖeɖeɖa nana API yɔyɔ ɖesiaɖe si kplɔe ɖo doa kpo nu enumake kple HTTP 403 Forbidden (Missing Permissions). |
Afɔɖeɖe 2: Gbugbɔ ɖo Bot Token la ɖe Discord Developer Portal (15 Seconds) |
Ne wò ŋutɔ wò custom alo hosted bot ye la, ge ɖe ** .https://discord.com/developers/applications** -> tia wò Dɔdamɔnu -> zi Bot dzi le miame -> zi Reset Token -> ɖo kpe edzi. |
Ne ègbugbɔ ɖo cryptographic Bot Token la, enaa nusi do go la megale dɔ wɔm o Authorization: Bot MT... tanya to Discord ƒe agbonudzɔƒewo katã dzi le xexeame katã le sɛkɛnd 1 me, si atso amedzidzela ƒe websocket kadodoa me tegbee. |
Afɔɖeɖe 3: Kick/Ban le Bot & Kpɔ Integrations (30 Seconds) |
Zi bot si le hameviwo ƒe xexlẽdzesiwo me dzi kple ɖusi (alo yi Server Settings -> Integrations -> Bots and Apps) -> zi Manage -> Remove Integration / Ban Bot dzi, eye nàtutu Webhooks alo Slash Command ɖesiaɖe si axe mɔ ɖe bot si wowɔ la nu. | Nukatae woaɖe mɔɖeɖewo ɖa hafi woaƒo afɔkpodzi? Ne amegbetɔ ƒe moderator account * hã* gblẽ eye wòlé Manage Server mɔɖeɖe, afɔkpodzi na bot gbã ɖea mɔ na amedzidzela ƒe nuŋɔŋlɔa be wòagaɖe mɔ na bot la enumake to OAuth2 URL dzi (permissions=8) kple blibo Administrator gomenɔamesiwo gbugbɔgaxɔ. |
3. Alesi moderators xɔa woƒe Discord tokens fifi (Eye nusita 2FA MELE etɔ te o) .¶
Nukatae wò moderator si dzi nèka ɖo wu, amesi si SMS kple Authenticator App 2FA le dɔ wɔm le woƒe Discord akɔnta me la dze nuking gɔme kasia server la le ŋdi ga 4:00 me?
- Alesi Discord Dzesiwo Wɔa Dɔe: Discord kplɔ̃dzidɔwɔƒe (si wotu ɖe Electron/Chromium dzi) kple web-browserwo dzraa zãla ƒe ɖaseɖiɖi ƒe dzesi si nɔa anyi ɖaa ɖo ɖe teƒea ƒe nudzraɖoƒe si wotsɔ nya ɣaɣlawo ŋlɔe me (%AppData%\discord\Local Storage\leveldb le Windows dzi).
- Dzesi-Fififi ƒe Vector 3 la:
1. Aʋatso Fefe Beta / Nyateƒetoto Malware (Lumma, . RedLine, . Blank Grabber, . Emerald Stealer): Amedzidzedze ƒe ƒuƒoƒo aɖe DM wò moderator bia tso wo si be woado indie fefe aɖe kpɔ alo ato mɔxexeɖedɔa ƒe nyagbugbɔgadrɔ̃ aɖe me .zip file. Malware la ɖea Discord token si woɖe tso moderator la ɖa EYE zi geɖe la, etrɔa asi le Discord desktop client ƒe JavaScript si le teƒea ŋu (core.asar / . index.js injection) ale be ne moderator trɔ woƒe password gɔ̃ hã la, trojanized Discord app la ɖoa yeye token la ɖe amedzidzela la ƒe webhook enumake.
2. "Agbalẽdzraɖoƒe" alo Dɔwɔla ƒe Dɔwɔƒe vɔ̃ɖi (F12) Hadomegbenɔnɔ Ŋuti Mɔ̃ɖaŋu: Ameflulawo blea ezãlawo be woahe "Verify Account" ƒe dzesidegbalẽvi aɖe ayi woƒe web-browser bar dzi alo atsɔ nya aɖe akpe ɖe... Ctrl + Shift + I console, si xlẽa dzesi si le agbe la tẽ tso ŋkuɖodzinu me.
3. Aʋatso "Captcha ƒe Kpeɖodzi Bot" QR Code Scan (Wick / . DoubleCounter Clones): Amedzidzelawo ɖoa aʋatso server verification message ɖa hebia tso moderator si be "Scan QR code sia kple wò Discord Mobile App be wòaɖo kpe edzi be amegbetɔe nènye." Scanning a Discord Login QR code le asitelefon dzi dɔwɔnua me enumake naa mɔnukpɔkpɔ blibo account login session ƒe mɔnukpɔkpɔ na amedzidzela ƒe desktop browser, to password kple 2FA keŋkeŋ.
--- .
Akpa 3: Reddit Habɔbɔ (Subreddit) Raid kple Compromised Moderator Gbugbɔgadzɔ¶
Ne èkpɔ Reddit habɔbɔ aɖe dzi (r/YourSubreddit) eye wòkpɔe be moderator ƒe akɔnta si wogblẽ la ɖe CSS/Wiki ɖa, xe mɔ ɖe zãla alafa geɖe nu, tsɔ ametafatafa ƒe kadodowo ɖɔ li subreddit ƒe nuŋlɔɖi, alo ɖo subreddit la ɖe Private / Restricted, alo be coordinate brigade bot akpe geɖe le fli me tsim:
1. Enumake Subreddit Lockdown & Rogue Moderator ɖeɖeɖa¶
- Kpɔ Moderator ƒe Ðoɖowɔɖi (
Mod Tools -> Moderators): - Abe Discord ene la, Reddit zi tso dzi va anyi tsitsi ƒe ɖoɖo sesẽ aɖe dzi le Moderators ƒe xexlẽdzesi me le ŋkeke si dzi wotsɔ moderator ɖesiaɖe kpee dzi.
- Nukpɔla ɖesiaɖe si si ** .
Everything** (Mɔɖeɖe Blibowo) aflaga ateŋu aɖe mɔɖeɖewo ɖa alo aɖe mɔɖeɖewo ɖa le moderator ɖesiaɖe si woŋlɔ le wo te le axaa dzi, gake mateŋu aka asi moderator aɖeke si woŋlɔ ɖe wo tame ŋu o. - Ne woŋlɔ moderator si ŋu wogblẽ nu le la le ete la: ʋu Mod Tools -> Moderators -> Editable enumake, zi pencil ƒe dzesi si le moderator si ŋu wogblẽ nu le la xa dzi, ɖe dzesi ** ɖa.
Everything**, eye nàzi Ðe dzi. - Dzro ŋku ɖe...
Mod Log(https://www.reddit.com/r/YOURSUBREDDIT/about/log): - Klɔ Moderation Log la to moderator si ŋu wogblẽ nu le ƒe zãŋkɔ dzi (
Moderatordropdown) kple to Action (banuser, .wikirevise, .editsettings, .removelink, .removemoderator). - Na Reddit "Amehawo Dzikpɔkpɔ" kple "Dedienɔnɔ Filters" nawɔ dɔ le gotagome Brigade ƒe amedzidzedze me:
- Ʋu Mod Dɔwɔnuwo -> Dedienɔnɔ Filters -> Amehawo Dzikpɔkpɔ.
- Ðo Post Level kple Comment Level ɖe Maximum / Strict (eléa nyawo kple nyatakaka siwo tso zãla siwo si subreddit karma manyomanyo le, akɔnta yeye ŋutɔ, kple zãla siwo mege ɖe nutoa me hafi amedzidzedzea dze egɔme o gbɔ le eɖokui si).
- Na Harassment Filter kple Ban Evasion Filter (si zãa Reddit ƒe ememe mɔ̃ ƒe asibidɛ kple IP telemetry tsɔ ɖea nyatakakawo ɖa le eɖokui si tso alt akɔnta yeye siwo wowɔ le amedzidzela siwo ŋu wode se ɖo la me).
- Tsɔ Enumake aɖe kpee
AutoModeratorSe si Wowɔ be Woaxe Mɔ Kpata: - Ʋu Mod Dɔwɔnuwo -> Automod (
wiki/config/automoderator) eye nàde agbo sia si me wowɔa nu kpata le enumake la ɖe etame be nàlé nya/nya siwo katã woŋlɔ tso akɔnta siwo mexɔ wu ŋkeke 30 o alo esiwo me subreddit karma bɔbɔ le la me alo aɖe wo ɖa:
2. Nusi Nàwɔ Ne Wogblẽ Wò Subreddit ƒe "Top Moderator" (Eye Woɖe Mod Team la ɖa) .¶
Ne woxɔ #1 Top Moderator akɔnta si le wò subreddit dzi (alo crypto/onlyfans spam syndicate ƒlee) eye woɖe moderation ƒe ƒuƒoƒo si le se nu la ɖa:
1. MÈGAdze agbagba be yeawɔ brigade na ye ŋutɔ yeƒe subreddit si woxɔ le amewo si o.
2. Na moderator evelia si woɖe ɖa wu la naɖo Modmail ɖe tẽe r/ModSupport (https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Compromised+Top+Moderator+Emergency+Rollback).
3. Nukatae r/ModSupport Modmail Nye Official Escalation Channel: To vovo na dutoƒo nyawo le r/redditrequest (siwo nye na subreddit siwo wogblẽ ɖi), r/ModSupport Modmail nye dɔwɔlawo tẽ tso Reddit Community Admins si wotsɔ ememe Mod Action Rollback Tool ɖo.
4. Na:
- Subreddit ƒe ŋkɔ tututu (r/...);
- Top Moderator si ŋu wogblẽ nu le ƒe zãla ƒe ŋkɔ (u/...);
- UTC ƒe ɣeyiɣi ƒe dzesi tututu esime woɖe mod ƒuƒoƒo si le se nu ɖa eye wogblẽ wiki/sidebar/pins la dome;
- Wò Modmail ɖeɖeɖa ŋuti nyatakakawo ƒe screenshots.
5. Nusi Reddit Admins Gbugbɔ Ðo: Reddit Admins doa Top Moderator ƒe akɔnta si gblẽ la, trɔa moderator ɖeɖeɖa, mɔxexeɖedɔa nu, wiki ɖɔɖɔɖowo, kple nyatakaka tutu siwo katã wowɔ le breach fesrea me la ɖe megbe, eye wogbugbɔa moderator kɔkɔtɔ kekeake si tsi agbe la ɖoa #1 Top Moderator zikpui dzi nɔnɔ.
--- .
Akpa 4: Amedzidzedze Le Amedzidzedze Megbe Gbugbɔgadzɔ: Ðe Woate Ŋu Agbugbɔ Aɖo Discord Channel Siwo Wotutu Kple Zãla Siwo Woxe Mɔ Na Le Ame Geɖewo Nua?¶
Ne wonya tɔ te amedzidzedzea eye woɖe bot/moderator alakpatɔa ɖa ko la, server tɔ dzea ŋgɔ Discord ƒe xɔtuɖaŋu ƒe dɔwɔwɔ ƒe nyateƒenya sesẽtɔ kekeake:
1. Ðe Discord Kpekpeɖeŋu Gbugbɔa Channel alo Gbedasi Siwo Wotutu Le Server Nuke megbea?¶
- The Hard Technical Reality: To vovo na YouTube (si naa video blob siwo wotutu ɖa la nɔa nufamɔ̃ me ŋkeke 14 va ɖo 30) alo Reddit (afisi woɣlaa nya siwo "woɖe" ɖa ko eye Admins ate ŋu agbugbɔ Mod Log aɖe aɖo megbe), ne wotu channel aɖe le Discord (
DELETE /channels/{id}), Discord ƒe Cassandra/ScyllaDB nyatakakadzraɖoƒea kɔa mɔ̃a ƒe nu kple gbedasi ƒe fli siwo katã le eme la ɖa tegbee. - Discord Trust & Safety MATEŊU agbugbɔ mɔ̃ siwo woɖe ɖa, akpa siwo wotutu ɖa, alo gbedasi ŋutinya si wotutu ɖa le admin alo bot si gblẽ nu le server aɖe ŋu vɔ megbe o.
- Nusi Discord Trust & Safety ATEŊU Agbugbɔ: Ne Discord Trust & Safety** tɔ te/wɔe nuwɔametɔe wò server bliboa le esi amedzidzelawo tsɔ nyatakaka gbegblẽwo ƒu gbe be woatsɔ awɔ frame na wò ta, alo ne woxɔ wò Server Owner account eye amedzidzela la tsɔ Server Ownership (
Transfer Ownership) yi woawo ŋutɔ ƒe akɔnta me, tsɔ Compromised Account / Server Ownership Ticket ɖo ɖehttps://dis.gd/requestɖe mɔ na Discord dɔwɔlawo be woatsɔ Server Owner Crown la atrɔ ayi wò akɔnta si nèxɔ la me.
2. Alesi Woagbugbɔ Channels & Roles Atu Eye Woaɖe Mɔ Ðe Hamevi Siwo Woxe Mɔ Na le Amehawo Ŋu Kaba¶
- Gbugbɔgatu Mɔ̃wo & Akpawo (Server Templates & Backup Bots):
- Ne èwɔ Discord Server Template (
Server Settings -> Server Template) alo tsɔ ɖoɖowɔɖi ƒe foto kple backup bot si ŋu ŋkɔ le (abe Xenon Bot, si wɔa megbe na channel ƒe ɖoɖowo, akpa ƒe amadedewo, kple mɔɖeɖe ƒe nuŋɔŋlɔwo, togbɔ be menye ŋutinya me zãla ƒe gbedasiwo o hã), àteŋu agbugbɔ wò channel kple role skeleton aɖo anyi le miniti 2 teti me. - Bulk-Reversing Mass Bans to Dɔwɔnyawo Ŋuti Nuŋlɔɖi dzi:
- Ne bot si ŋu woda asi ɖo xe mɔ ɖe hamevi 500 siwo le se nu nu le miniti 2 ƒe nuke me la, ʋu Server Settings -> Audit Log -> Filter by Action:
Ban Member-> Klɔe le Zãla nu:[The Compromised Bot/Mod]. - Mɔxexeɖenu ɖesiaɖe si woŋlɔ ɖe Dɔwɔnyawo Ŋuti Nuŋlɔɖi me la ɖea Zãla ƒe ID kple ɣeyiɣi ƒe dzesi si tututu woɖo na amesi ŋu woxe mɔ ɖo le aɖabaƒoƒo 2 ƒe fesre ma me la fiana. Àteŋu aɖe mɔxexe ɖe wo nu kple asi to Server Settings -> Bans dzi, alo azã moderation bot sedede si dzi nèka ɖo (abe Carl-bot, Dyno, alo 15-line administrative script xexlẽ bɔbɔe
guild.audit_logs(action=discord.AuditLogAction.ban)filtered strictly toentry.user.id == COMPROMISED_ACTOR_ID) be wòaƒo ka le eɖokui siguild.unban(entry.target)le hamevi ɖesiaɖe si le se nu si fefewɔla alakpatɔ ma xe mɔ na la dzi. - Purging Raid Messages Akpe Geɖewo Matutu Channel la:
- Ne raid spam gbedasi 2,000 yɔ mɔ̃ aɖe me fũ la, mègatutu mɔ̃a ɖa eye nàwɔ eƒe nɔnɔmetata o negbe ɖe nèdi be yeabu gbedasi xoxo siwo katã le se nu, gbedasi siwo wotsɔ pin ɖo, kple webhook ƒe ƒoƒo ɖekae ko hafi.
- Ke boŋ zã Discord ƒe Right-Click Raider -> Ban -> Delete Message History si wotu ɖe eme:
Previous 24 Hours(aloPrevious 7 Days), si kɔ gbedasi ɖesiaɖe si amedzidzela ma ɖo ɖa to mɔ̃ ɖesiaɖe si le server la dzi le ɣeyiɣi ɖeka me la le eɖokui si. - Le akɔntabubu geɖe ƒe spam gome la, zã moderation bot si ŋu woɖo kpee
/purgesedede (up to 100 to 1,000 messages under 14 days oldto Discord ƒe Bulk Delete API ƒe nuwuƒe dzi).
--- .
Akpa 5: Masɔmasɔ Tegbee & Hadometɔwo ƒe Amedzidzedze-Sesẽme Dzesidede¶
Ne wò server nya li ke ko la, ɖo xɔtuɖaŋu ƒe ametakpɔnu ade siawo siwo wotu ɖe eme siwo mexɔ asi o ale be gotagome raid botnet alo moderator PC ɖeka si ŋu dɔlélea le mate ŋu awɔ nuke na wò server la ake o:
1. Na Discord "AutoMod" Native Filters (Server Settings -> Safety Setup -> AutoMod) .¶
Discord ƒe dzɔdzɔme AutoMod xea mɔ na amedzidzedze ƒe agbawo eye wòxea mɔ na wo hafi gbedasi la naɖe le dzeɖoɖo me gbeɖe alo aʋã push notification le hameviwo ƒe telefonwo dzi:
- Block Mention Spam: Ðo Mention Limit ɖe ** .5 (alo 3) yɔyɔ tɔxɛwo le gbedasi ɖesiaɖe me**, eye nàtia Xɔ Gbedasi + Ɣeyiɣi ƒe Nuwuwu Me tɔ (1 Hour alo 24 Hours) + Ðo Nuxlɔ̃ame ɖa. Esia wɔnɛ be le ŋutilã me la, manya wɔ be amedzidzela nate ŋu awɔ ping na ezãla 30 le gbedasi ɖeka me o.
- Xɔ Mɔ Si Wosusu be Spam Me Nyawo & Nya Siwo Wodea Aflaga Zi geɖe: Trɔ ON xexlẽdzesi eve siwo wotu ɖe eme.
- Custom Keyword & Regex Rules for Scams: Tsɔ AutoMod se tɔxɛ aɖe kpe ɖe eŋu si xea mɔ na ametafatafa ƒe nɔnɔme siwo bɔ:
- Nya veviwo: *discord.gift*, . *steamcommunity.com/gift*, . *free nitro*, . *airdrop claim*, . *t.me/*, . *whatsapp.com*.
- Regex kpɔɖeŋuwo léle obfuscated amekpekpe kadodowo: (?:https?://)?(?:www\.)?(?:discord\.(?:gg|io|me|li)|discordapp\.com/invite)/[a-zA-Z0-9-]+ (si woɖe asi le wò dɔwɔlawo ƒe akpawo ŋu).
2. Na "Hia 2FA na Moderator Dɔwɔwɔwo" (Server Settings -> Safety Setup -> Permissions) .¶
- Server-Wide 2FA Requirement ʋuʋu zi Discord ƒe API dzi be wòaɖo kpe edzi be zãla ɖesiaɖe si le agbagba dzem be yeatutu mɔ̃wo, axe mɔ ɖe hameviwo nu, akpɔ akpawo dzi, alo akpɔ webhooks dzi la, Two-Factor Authentication le dɔ wɔm le woƒe akɔnta me.
- Vevietɔ wu la, ɖe awu le...
Administratormɔɖeɖe tso Amegbetɔ ƒe Moderator Dɔwo KAtã kple 99% le Bots: - Masɔmasɔ ƒe Dedienɔnɔ ƒe Sikase: amegbetɔ ƒe moderator aɖeke kloe kple bot aɖeke si wozãna le mɔ gbadza nu mehiã na...
Administratorswitch toggled ON. - Nukatae? Eƒe...
Administratortoggle grants blibo bypass dzi ɖesiaɖe channel lock, grantsManage Webhooks, gakpekpeɖeŋunanaManage Server, eye wònaa mod si ŋu wogblẽ nu le la nuke server la le sɛkɛnd 3 me. - Ke boŋ, na wò amegbetɔ Moderators ko .
Kick Members, .Ban Members, .Moderate Members (Timeout), kpleManage Messages. Na mɔɖeɖe wo zero be woawɔDelete Channels, .Manage Roles, aloManage Webhooks. Ne moderator ƒe PC xɔ dɔ le token-stealer me la, amedzidzela la mateŋu atutu channel ɖeka o eye mateŋu awɔ webhook ɖeka o.
3. Wɔ "Bot Quarantine & Anti-Nuke Rate Limiting" ŋudɔ.¶
- Akɔntabubu
Server Settings -> IntegrationsƔleti sia ɣleti: Ðe hadzidzi bot, mini-game bot, alo kpeɖodzi bot ɖesiaɖe si mèzã o si nètsɔ kpe ɖe eŋu ƒe aɖewoe nye esi va yi la ɖa. Le ŋutinya me amedzidzedze gã geɖe me la, kɔmpiutadzidzela siwo zã eƒe alɔ̃dɔdɔ la da le bot si wogblẽ ɖi ƒe alilikpo me dɔwɔƒea dziAdministratorakpa si woawɔ be woadze server 10,000 dzi le ɣeyiɣi ɖeka me. - Mègawɔ Grant gbeɖe o
AdministratorNe èle Bot Kpem: Ne èle mɔ ɖem na bot to OAuth2 URL dzi (discord.com/oauth2/authorize?...&permissions=8), de dzesii bepermissions=8nye bitfield na bliboAdministrator. Ðe dzesi le eŋuAdministratorle OAuth ƒe nyabiasea dzi eye nàna mɔɖeɖe tɔxɛ siwo bot la hiã la ko. - Tiatia Anti-Nuke Watchdog: Le server gãwo dzi (
10,000+ members), da Anti-Nuke Rate-Limiter Bot si ŋu woɖo kpee (abe Wick ene) ɖe wò Dɔwɔwɔ ƒe Ðoɖowɔɖia tame (#1 Positionle Server Owner) te tututu si woɖo ale be ne moderator alo bot aɖe tutu channel siwo wu 2 le sɛkɛnd 60 me alo xe mɔ ɖe zãla siwo wu 5 nu le sɛkɛnd 60 me la, dzɔla la ɖea fefewɔla ma ƒe akpawo ɖa va ɖoa zero le milisekɔnd 200 me.
--- .
Nutome ƒe xexlẽdzesi siwo ku ɖe nudzɔdzɔ kpatawo ŋu kple dɔwɔƒea ƒe ɖoɖowo¶
Ne nutoa me tɔwo ƒe amedzidzedzewo tso ɖe nuvlowɔwɔ le Internet dzi nuvlowɔwɔ, gaxɔgbalẽviwo xɔxɔ, ŋɔdzidoname siwo wotsɔa swat, alo Ðeviwo ƒe Gbɔdɔdɔ Ŋuti Nyatakakawo mama me (CSAM), wɔ ɖe nyatakaka nana ƒe ɖoɖo siawo siwo dziɖuɖua ɖo dzi enumake:
- Xexeame Katã ƒe CSAM Nyatakaka (Sedziwɔwɔ): Mègaɖe screenshots siwo me CSAM le, adzra wo ɖo, alo aɖo wo ɖa gbeɖe o. Zã Discord ƒe dɔwɔnu si le dɔwɔnua me Nyatae Gbedasi -> Ðeviwo ƒe Nuveviwɔame Ðokui alo Gbɔdɔdɔ ƒe Ŋutasẽnuwɔwɔ Ŋuti Nyatakaka (si ɖoa server-side attachment hash kple uploader IP si sɔ pɛpɛpɛ ɖe Dukɔa ƒe Ðevi Bu & Wozãa Ŋusẽ ƒe Dɔwɔƒe,
NCMECCyberTipline), alo nàka nya ta le ** .report.cybertip.org(1-800-843-5678)** le U.S. alo Internet Watch Foundation (iwf.org.uk) le UK/EU. Kpɔ ɖa ɖeviwo dzadzraɖo, kadodo kple lã lénuwo, kple NCMEC ƒe nyatakakawo nana. - United States: Ka nya ta tso gaxɔmenɔnɔ ƒe amedzidzedze, swatting ŋɔdzidoname, alo DDoS amedzidzedze ŋu na FBI Internet Crime Complaint Center (
ic3.gov). Ne wowɔ doxxed na moderator eye wodo ŋɔdzi nɛ kple aʋatso dɔdɔ kpata ("Swatting"), yɔ miaƒe nutoa me kpovitɔwo non-emergency dispatch desk enumake be nàda Swatting / Premise Alert Note ɖe wò adrɛs dzi. Ne èdi ŋutilã me afɔku enumake la, ƒo ka na 911. - Canada: Ka nya ta tso Internet dzi gaxɔmenɔnɔ kple nyatakaka siwo mele se nu o ƒe amedzidzedze ŋu na Canada ƒe Ðeviwo Takpɔƒe (
cybertip.ca), si nye Canada ƒe Ametafatafa Ŋuti Dɔwɔƒe (1-888-495-8501), alo nutoa me kpovitɔwo (911 le nɔnɔme kpatawo me). - United Kingdom: Ka nya ta tso kɔmpiuta zazã ɖe mɔ gbegblẽ nu kple Internet dzi gaxɔgbalẽviwo dzi kpɔkpɔ ŋu na Action Fraud (
actionfraud.police.uk, .0300 123 2040) eye nàgblɔ ŋlɔmiwɔwɔ si mele se nu o na Internet Watch Foundation (iwf.org.uk) alo CEOP (ceop.police.uk). Xexlẽdzesi kpata: 999 alo 112 (kpovitɔ siwo menye kpata o: 101). - Europa Dukɔwo ƒe Habɔbɔ: Ka nya ta tso fulélenyawo, ŋɔdzinuwɔlawo ƒe nyatakakawo, alo CSAM ƒe amedzidzedze siwo mele se nu o ŋu to wò dukɔa dzi INHOPE (
inhope.org) telefonkadodo kple kpovitɔwo ƒe Internet dzi nuvlowɔwɔ ƒe dɔwɔƒe le EU Digital Services Act (DSA). Xexlẽdzesi kpata: 112. - Australia kple New Zealand: Le Australia la, gblɔ Internet dzi ŋlɔmiwɔwɔ sesẽwo alo amedzidzedze ŋuti nyatakaka siwo mele se nu o na eSafety Commissioner (
esafety.gov.au) kple Nyatakaka le Internet dzi (cyber.gov.au, .1300 292 371). Le New Zealand la, ka nya ta na Netsafe (netsafe.org.nz, .0508 638 723). Xexlẽdzesi siwo woxɔna le nudzɔdzɔ kpatawo me: 000 (Australia), 111 (New Zealand). - India kple Asia-Pacific: Le India la, tsɔ nyatakaka aɖe yi Dukɔa ƒe Internet Dzi Nuvlowɔwɔ Ŋuti Nyatakaka Dɔwɔƒe (
cybercrime.gov.in, kpekpeɖeŋunaƒe1930). Kpɔ míaƒe nyatakakadzraɖoƒe bliboa le xexlẽdzesi siwo wozãna kpata.
--- .
Nya siwo wobiaa amewo enuenu¶
Nukatae wole @everyone spam pings gakpɔtɔ le dzedzem le esi mexe mɔ ɖe amedzidzelawo nu eye metu wo vɔ megbe @everyone mɔɖeɖewo?¶
Ne nyatakaka gbegblẽwo yi edzi le sisim ɖe mɔ̃ aɖe si me ** .`APP`** alo ** .`BOT`** tag le zãla ƒe ŋkɔ xa eye màte ŋu azi zãla la dzi kple ɖusi atsɔ axe mɔ ɖe wo nu o, amedzidzela la le **Discord Webhook** zãm tsɔ wu zãla ƒe akɔnta. Webhooks medzena le wò Server Member ƒe xexlẽdzesiwo me o eye woŋea aɖaba ƒua edzi `@everyone` akpa si woawɔ send-message ƒe mɔxexeɖedɔléle nu. Ʋu **Server Settings -> Integrations -> Webhooks**, di Webhook si fia asi mɔ̃ si ŋu wòku ɖo, eye nàzi **Tutu Webhook** dzi. Le ema megbe la, kpɔ **Server Settings -> Audit Log** si woɖe tso eme `Create Webhook` be nàkpɔe ɖa be moderator alo bot kae wɔe.
Ne meɖe afɔ alo xe mɔ ɖe bot si ŋu wogblẽ nu le nu le server nuke wɔɣi la, aleke wòate ŋu agawɔ ɖeka kple eɖokui le eɖokui si?¶
Bot mateŋu akpe eɖokui be wòatrɔ ava le eɖokui si o, **gake** ne amedzidzela la hã gblẽ nu le amegbetɔ ƒe dzikpɔla ƒe Discord session token ŋu (alo woɖe mɔ nɛ `Manage Server` / . `Administrator` na akpa evelia ɣaɣla aɖe esime bot la kpɔ ŋusẽ ɖe edzi), amedzidzela ƒe nuŋɔŋlɔ zãa amegbetɔ ƒe dzesi ma tsɔ gbugbɔa mɔ ɖe bot ƒe OAuth2 amekpekpe URL ŋu (`permissions=8`) sɛkɛnd ɖeka ƒe akpa ɖeka le esi nèƒoe vɔ megbe. To bot ƒe akpa ƒe mɔɖeɖewo ɖeɖeɖa ɖe zero dzi gbã, gbugbɔ ɖo Bot Token la ɖe eme `discord.com/developers/applications`, kple **Audit Log** ƒe agbalẽdzikpɔkpɔ hena akpa siwo ŋu womeɖe mɔ ɖo o siwo wona amegbetɔ hameviwo, ètso bot la kple eƒe gbugbɔgakpe vektor siaa.
Ðe Discord Support ate ŋu agbugbɔ nye server la aɖo megbe eye wòagbugbɔ nye channel siwo metutu ɖa la aɖo te ne hacker aɖe tsɔ nuked wɔea?¶
Ao, to vovo na Reddit alo YouTube la, Discord meléa mɔ̃ siwo wotutu, akpa siwo wotutu, alo gbedasi siwo wotutu ƒe fotowo ɖe eƒe nyatakakadzraɖoƒewo o. Zi ɖeka a `DELETE /channels/{id}` API biabia la wɔa dɔ to akɔnta si le asiwò dzi `Manage Channels` alo `Administrator` mɔɖeɖe, wotutua mɔ̃ mawo kple woƒe gbedasiwo ŋutinyawo ɖa tegbee. Gake ne hacker la tsɔ **Server Ownership** yi adzɔge tso wò akɔnta si ŋu wogblẽ nu le gbɔ, alo ne Trust & Safety wɔ wò server nuwɔametɔe alakpatɔe le framing raid me la, tsɔ tikiti ɖo ɖa le `dis.gd/request` le **Hacked Account / Server Ownership** te ɖe mɔ na Discord Support be wòatrɔ Server Owner fiakukua na wò.
Infostealer aɖe xɔ moderator aɖe ƒe akɔnta eye wòtsɔ nuked míaƒe server la. Ðe wòle dedie be woagbugbɔ atrɔ asi le wo ŋu ne wotrɔ woƒe nyagbe ɣaɣla vɔa?¶
Mègagbugbɔ moderator ƒe mɔɖeɖewo na dɔwɔla si ŋu woda asi ɖo gbeɖe le esi wòtrɔ woƒe nyagbe ɣaɣla le kɔmpiuta ɖeka dzi ta ko o. Egbegbe Discord ƒe dzesi-filawo (`Lumma`, . `Blank Grabber`, . `RedLine`) do JavaScript ƒe fetu siwo nɔa anyi ɖaa ɖe Discord kplɔ̃dzi dɔwɔnua tɔ me tẽ `index.js` / . `core.asar` faɛlwo le `%AppData%\discord`. Zi alesi dzikpɔla la gage ɖe PC ma si wometutu o me ko la, ŋɔŋlɔdzesi si wodo ɖe eme la fi dzesi yeyea eye wògbugbɔe ɖo ɖe kɔmpiutadzidzela la. Bia tso moderator si be wòawɔ USB gbugbɔgaɖoɖo dzadzɛ le Windows hafi ana akpawo wo ake.
Aleke mawɔ akpɔ nye server ta tso "Fake QR Code Verification" ametafatafa si xɔa moderators kple hameviwo le ame si la si me?¶
Fia nu wò dɔwɔlawo kple nutoa me tɔwo be **No legitimate Discord verification bot (`Wick`, . `DoubleCounter`, . `Pandez`, . `Sledgehammer`) abia tso asiwò gbeɖeka be nàzã Discord asitelefon dzi dɔwɔɖoɖoa ƒe fotoɖemɔ̃ atsɔ awɔ QR-kɔda aɖe ƒe scan.** QR-kɔdamɔ̃ si wotu ɖe Discord asitelefon dzi dɔwɔɖoɖoa me la li be nàtsɔ aŋlɔ kɔmpiuta yeye si le kplɔ̃ dzi ɖe wò Discord akɔnta me ko. Hehe dzikpɔlawo be woawɔ DM siwo gbɔna tso amesiwo menye xɔlɔ̃wo o gbɔ nuwɔametɔe le **Zãla ƒe Ðoɖowo -> Emenyawo & Hadomegbenɔnɔ -> Hadomegbenɔnɔ ƒe Mɔɖeɖewo** te eye womawɔ QR-kɔda aɖeke ƒe scan alo awɔ dɔ gbeɖe o `.exe`/ .`.zip` file si woɖo ɖe DM me.
--- .
Mɔfiame siwo do ƒome kplii¶
- Hadomegbenɔnɔ ƒe nyatakakadzraɖoƒewo ƒe akɔntabubu kple wo xɔxɔ
- Nyatakaka siwo mele se nu o kple esiwo gblẽa nu le ame ŋu ŋuti nyatakakawo nana le Internet dzi
- Ðeviwo dzadzraɖo, kadodo kple lã lénuwo, ɖevi siwo metsi o ƒe gbɔdɔdɔ ƒe agbegbegblẽnɔnɔ, kple NCMEC ƒe nyatakakawo nana
- Internet dzi fuɖename, doxxing, kple Internet dzi anyrawɔwɔ
- Wɔla ƒe mɔ̃ si woxɔ le amewo si to crypto scam livestreams dzi
- Xexlẽdzesi siwo woatsɔ awɔ nudzɔdzɔ kpatawoe
--- .
Dzɔtsoƒewo kple dziɖuɖumegãwo ƒe mɔfiame¶
- Discord Trust & Dedienɔnɔ Kple Dedienɔnɔ Dɔwɔƒe (
discord.com/safety): Wò Server Takpɔkpɔ Tso Amedzidzedzewo Me (Safety Setup, .AutoMod, .Raid Protection, kpleSecurity Actions: Tɔtɔ Kpekpewo / Tɔtɔ DMwo) kple Mɔɖeɖewo ƒe Ðoɖowɔwɔ kple Nu Eve ƒe Dzesidede na Dzɔlawo. - Discord Developer ƒe Nuŋlɔɖiwo (
discord.com/developers/docs): OAuth2 Bot Mɔɖeɖe ƒe Agbɔsɔsɔmewo, Bitwise Mɔɖeɖe Aflagawo (Administrator = 0x8), Webhook Dedienɔnɔ, Kple Dzesiwo Ƒe Ðeɖeɖa. - Reddit Kpekpeɖeŋu & Kpekpeɖeŋunala ƒe Kpekpeɖeŋunana (
support.reddithelp.com/ .r/ModSupport): Subreddit Amehawo Dzi Kpɔkpɔ, Mɔxexe Ðe Ƒoƒo Sisi Ƒe Filters, AutoModerator Kpata ƒe Ðoɖowo, kple Moderator Rollback Dɔwɔna Siwo Wogblẽ. - Cyber Dedienɔnɔ kple Dɔwɔƒewo ƒe Dedienɔnɔ Dɔwɔƒe (CISA) & Dukɔa ƒe Internet Dedienɔnɔ Dɔwɔƒe (NCSC): Mitigating Info-Stealer Malware, Electron Application Injection (
asarasitɔtrɔ le ame ŋu), kple OAuth/Session Token Hijacking. - Dukɔa ƒe Ðevi Bubuwo & Wozãa Wo Ŋudɔ Ŋuti Dɔwɔƒe (
NCMEC) & Internet Dzikpɔƒe (IWF): Nyatakaka ƒe Ðoɖo siwo Wobia tso Ame Siwo Me Se Meɖe Mɔ Na O Kple Server Framing Nudzɔdzɔ Vɔ̃ɖiwo Ŋu.