Skip to content

Discord Server a i ʻole Community Raid: Compromised Bot Token, Webhook Spam, a me Audit-Log Recovery

He ʻokoʻa nā helu ulia pōpilikia ma ka ʻāina. Hoʻohana kēia ʻaoʻao i ka 911, ka helu no ʻAmelika a me Kanada. Nui nā ʻāina ʻē aʻe i hoʻohana i ka 112, 999, a i ʻole ka helu ʻē aʻe. E huli i ka helu no kou ʻāina.

Ala aʻe i nā tausani o @everyone nā ping hoʻolaha a me ka ʻike ʻana ʻo kāu Discord community server, gaming guild, a i ʻole subreddit aia ma lalo o kahi coordinated raid a i ʻole "server nuke" he pilikia kikohoʻe kiʻekiʻe. I loko o 30 a 90 kekona, hiki i kahi mooolelo hoʻoponopono i hoʻopaʻa ʻia, hōʻailona bot, a i ʻole webhook leaked hiki ke holoi i nā kakini he nui, pāpā nui i nā tausani o nā lālā kūpono, hoʻoheheʻe ʻia i kāu kikowaena me nā ʻeke wai kālā cryptocurrency, a i ʻole e kau i nā ʻōlelo hōʻino koʻikoʻi o ka lawelawe (me nā kiʻi kiʻi ʻole a i ʻole nā ​​mea hana kolohe keiki, CSAM) i hoʻolālā ʻia no ka hoʻomaka ʻana i kahi Discord Trust & Safety ka hoʻopau ʻana i ka server piha e pāpā ana i ka moʻokāki pilikino o ka mea nona ke kikowaena. Inā hoʻolaha ka mea hoʻouka kaua i ka CSAM kūʻokoʻa, hoʻoweliweli hoʻoweliweli, a i ʻole hoʻoweliweli kokoke i ka hana ʻino kino, e hōʻike koke i nā hōʻike me ka hoʻohana ʻana i kā mākou ka hōʻike ʻana i nā maʻiʻo ʻino a me ke kānāwai a ka hoʻomaʻamaʻa keiki, ka hoʻopili predator, a me ka hōʻike NCMEC alakaʻi, a kūkākūkā i kā mākou honua helu pilikia papa kuhikuhi inā pilikia kino kekahi.

ʻO ka hoʻokuʻu ʻana i kahi hoʻouka kaua ma lalo o 60 kekona, pono e ʻike ** ʻo wai o nā mea hoʻouka kaua ʻekolu ** e pā nei i kou kaiāulu: 1. He Wave-Wave / Mea Hoʻohana-Bot Raid: He mau haneli o nā moʻokāki mea hoʻohana automated e kahe ana ma o kahi loulou kono a i ʻole URL vanity i ka manawa like i nā kahawai spam a me nā DM. 2. A Webhook Injection Attack: He mea hoʻouka i loaʻa i kahi kanal Webhook URL (discord.com/api/webhooks/...) waikahe @everyone pings a me nā loulou scam me ke komo ʻole ʻana i ke kikowaena a i ʻole ke ʻike ʻia ma ka papa inoa lālā. 3. He Kuʻikahi Kuʻuna Kuʻuna ("Server Nuke"): He hōʻailona manawa o ka mea hoʻoponopono (Local Storage / leveldb hōʻailona i ʻaihue ʻia e ka infostealer malware) a i ʻole ka mea hoʻomohala bot maʻamau (Bot ...) me ka Administrator ʻae ʻia ka ʻae ʻia, ke kī ʻana DELETE /channels a PUT /bans Kāhea ʻo API i ka wikiwiki o ka mīkini.

Hāʻawi kēia alakaʻi i ka protocol laka ulia pōpilikia 60-kekona, ke kaʻina kauoha no ka hoʻopau ʻana i nā Bot Tokens ma mua o ke kīkē ʻana i kahi bot rogue, forensic Audit Log extraction, a me ka mana Discord Trust & Safety (dis.gd) a me Reddit Mod Support kaʻina hana hoʻōla.

E hana i kēia i kēia manawa

  1. E ho'ā i ka "Pause Invites" a me "Pause DMs" i loko o ka Discord's Security Actions menu koke (e lawe i 5 kekona). Kaomi i kāu Server Name ma ka ʻaoʻao hema -> koho Security Actions (a i ʻole Server Settings -> Safety Setup -> Raid Protection) -> nānā Pause Invites a me Pause DMs, a hoʻonoho i ka ** Hoʻomaha DMs**, a hoʻonoho i ka ** Hoʻomaha DMs ** Hoʻopaʻa koke kēia i kēlā me kēia loulou kono a me kāu URL Vanity maʻamau mai ka ʻae ʻana i nā moʻolelo raid hou e hui pū me ka hoʻokuʻu ʻana i nā memo pololei ʻole i noi ʻia.
  2. E wehe i ka Administrator, Manage Channels, Manage Roles, Manage Webhooks, a Ban Members nā ʻae mai ka @everyone kuleana A mai kāu mau koʻokoʻo/bot kuleana. Wehe Server Settings -> Roles -> Default Permissions (@everyone) -> e kaomi i lalo a kaomi i ka Clear Permissions (a i ʻole e hoʻololi i ka OFF Send Messages, Mention @everyone, @here, and All Roles, Attach Files, Embed Links, a Create Public/Private Threads). A laila kaomi i kāu Moderator / Admin / Bot roles ma lalo pono o kāu kuleana Owner a hoʻololi iki iā OFF Administrator, Manage Channels, a me Ban Members no ka hooki ʻana i kahi nuke hoʻopau ʻeleu i make ma kāna mau ala.
  3. **Hana Server Settings -> Audit Log FIRST a kānana ma ka hana (Delete Channel, Ban Member, Create Webhook, Update Role) no ka hoʻomaopopo ʻana i ka moʻokāki rogue a i ʻole ka bot. Hōʻike ka Audit Log i ka mea hana pololei e hoʻokō ana i nā kelepona API i ka manawa maoli.
  4. Inā hoʻohana ʻo Custom Bot i ke kikowaena, e hoʻopau i kāna Bot Token ma ka Discord Developer Portal (discord.com/developers/applications) a i ʻole e wehe i kāna mau ʻae ʻia ma mua o ke kiki ʻana a pāpā ʻana paha i ka bot. Administrator a i ʻole Manage Server ʻae ʻia, a i ʻole inā aia ka mea hoʻokele kanaka i hoʻopaʻa ʻia i loko o ke kikowaena, ʻo ke kīkē ʻana i ka bot e hiki ai i ka palapala a ka mea hoʻouka ke kono koke hou i ka bot a i ʻole e hoʻomau i ke kī ʻana i nā kelepona API a hiki i ka wā e hemo ai kāna hōʻailona a i ʻole kāna kuleana.
  5. ** Inā ʻōlelo nā leka spam APP a i ʻole BOT ma ka ʻaoʻao o kahi inoa ʻē ʻaʻole i loko o kāu papa inoa lālā, wehe Server Settings -> Integrations -> Webhooks a holoi koke i nā Webhooks ʻike ʻole ʻia.** ʻAʻole hiki mai ka spam Webhook mai kahi mea hoʻohana ma kāu kikowaena; ua paʻi ʻia ma o HTTP POST noi i kahi URL Webhook i leaked a hiki ke hooki ʻia ma ka holoi ʻana i ka Webhook i loko o Integration -> Webhooks (a i ʻole ke kāpae ʻana Manage Webhooks nā ʻae).
  6. E mālama i ka loulou memo, ID mea hoʻohana (18-to-19-digit Snowflake ID), a me nā screenshots Audit Log MAMUA o ka hoʻomaʻemaʻe nui ʻana i nā maʻiʻo hewa ʻole. Inā hoʻopuka ka poʻe hoʻopio iā CSAM, gore, a doxxing paha e hoʻopaʻa i kāu kikowaena, e kiʻi i ka Audit Log e hōʻike ana i ka hoʻohui ʻana i ka manawa a me ka pāpā ʻana o ka mea hoʻouka, kope i ka Discord User ID mau loa ka mea hoʻouka, a hōʻike i ka memo ma o Komi-Komi -> Hōʻike i ka ʻōlelo hoʻopaʻa palekana ma mua o ka holo ʻana i kahi leka uila. ka mea hoʻoponopono hōʻike ma mua o ka mea nona ka server complicit.

Danger

** ʻO ka "Malicious Raid Framing" Trap (How Raiders Get Victims' Servers and Owner Accounts Banned):** Ua hoʻonohonoho ʻia nā pūʻulu hoʻouka kaua e hoʻokahe i nā kikowaena Discord me nā mea i pāpā ʻia (e like me CSAM a i ʻole nā ​​​​mea extremist) a laila hoʻohana koke i nā moʻokāki bot 50 e hōʻike nui i ke kikowaena i Discord Trust & Safety. Ke hoʻopau ka ʻōnaehana palekana automated o Discord i kahi kikowaena no ka hewa nui, ke pāpā ʻakomi ia i ka moʻokāki Discord pilikino a ka mea nona ka Pūnaewele a me kēlā me kēia Luna Hoʻokele ma ke kikowaena. No ka pale ʻana i kāu moʻokāki pilikino a me kāu kikowaena: (1) Laka @everyone Attach Files a Send Messages koke, (2) E hoʻohana i ka Discord i kūkulu ʻia In-App Report Message pihi ma kekahi o ka pou hewa * ma mua o ka hapa nui o ka holoi ʻana i ke koena i hoʻopaʻa ʻia kāu moʻokāki ma ke ʻano he mea hoʻolaha, a (3) E hoʻouna koke i kahi pre-emptive "Server Raid / Malicious Framing Incident Report" ma https://dis.gd/request me nā kiʻi paʻi kiʻi o kāu Log Audit a me nā kono hoʻomaha.

lāʻau hoʻoholo: ʻike a hoʻōki i ka hoʻouka ʻana o ke kaiāulu ma lalo o 60 kekona

E ʻike i ka mea o nā mechanics raid ʻehā e hana nei i kēia manawa a e hoʻokō i ke kaʻina hoʻololi pepehi pololei ma lalo nei.

flowchart TD
    RaidStart["ʻIke ʻia ʻo Active Server Raid, Spam Flood, a i ʻole Kanal Holoi"] --> PauseInvites["STEP 1: Kaomi i ka inoa Server -> Nā Hana Palekana -> Hoʻā i ka 'Pause Invites' & 'Pause DMs'"]
    PauseInvites --> AuditCheck["KaʻAnuʻu Hana 2: E wehe i ka Server Settings -> Audit Log e hoʻomaopopo i ka Mea Keaka"]
    AuditCheck --> VectorType{"He aha ka hōʻike ʻana o ka Log Audit a i ʻole Chat?"}
    VectorType -->|"ʻO nā haneli o nā moʻolelo hou e hui pū ana a me ka spamming Chat/DMs"| JoinRaid["KA HOʻOPIʻI I KA HOʻOPIʻI: E wehe i nā mea āpau 'E hoʻouna i nā memo', 'E hoʻopili i nā faila', & 'E haʻi aku i nā mea āpau' -> E hoʻokiʻekiʻe i ka pae hōʻoia i 'kiʻekiʻe loa (kelepona i hōʻoia ʻia)' -> E hoʻā i ke kānana Spam Mention AutoMod"]
    VectorType -->|"Hoʻopaʻa ʻia nā memo 'APP/BOT' Spamming @ kēlā me kēia kanaka, ʻAʻole i loko o ka papa inoa o nā lālā"| WebhookRaid["WEBHOOK SPAM ATTACK: E wehe i nā hoʻonohonoho kikowaena -> Hoʻohui -> Nā Webhooks -> Holoi i nā Webhooks ʻike ʻole ʻia -> Hoʻopono nāna i hana iā lākou ma ka Log Audit"]
    VectorType -->|"Ke hoʻopau nei kahi Moderator a i ʻole moʻokāki kanaka ke hoʻopau nei i nā kahawai / pāpā i nā mea hoʻohana"| ModCompromised["TOKEN MODERATOR COMPROMISED: E kauo i ke kuleana o Mod ma lalo o kāu a i ʻole e wehe i nā ʻae kuleana -> pāpā i ka moʻokāki mod i hoʻopaʻa ʻia -> e holoi i ka PC i hoʻopili ʻia a hoʻonohonoho hou i ka ʻōlelo huna."]
    VectorType -->|"ʻO kahi moʻokāki Bot ka hoʻopau ʻana i nā kahawai, hana i nā kuleana, a i ʻole ka pāpā ʻana"| BotNuke["NUKE ʻO BOT TOKEN NUKE: Wehe i ka ʻae ʻia ʻana o ka hana a Bot i Zero -> Reset Bot Token ma ka Developer Portal (discord.com/developers) -> Kick/Ban Bot & Hoʻopau iā OAuth2"]
    JoinRaid --> EvidenceClean["KANAWAI 3: E hōʻike i nā memo hoʻopaʻa hewa ʻole ma o ka In-App Report First -> Holo Bulk Message Purge / Recovery"]
    WebhookRaid --> EvidenceClean
    ModCompromised --> EvidenceClean
    BotNuke --> EvidenceClean

Mahele 1: ʻO ka protocol laka ulia pōpilikia 60-kekona (Hoʻopau i ke koko)

Ke hoʻomaka ka hoʻouka kaua a i ʻole ka server nuke, ʻaʻole hiki i nā mea hoʻoponopono kanaka ke pāpā lima i nā moʻokāki ma mua o ka Python automated a i ʻole Go script e puhi ana i nā noi like ʻole i ka Discord REST API (50 requests per second). Pono ʻoe e ʻoki i nā mana API o ka mea hoʻouka kaua ma ka pae hoʻonohonoho kikowaena.

1. Pehea e hoʻokuʻu ai i kahi User-Bot Join Raid i 15 kekona

Inā hui pū nā haneli o nā moʻolelo hoʻolei i kāu kikowaena a me nā kahawai wai a i ʻole ka nui-DMing i kāu mau lālā me ka hoʻopunipuni. "Free Nitro" a i ʻole "Crypto Airdrop" nā loulou phishing: 1. ** Hoʻomaka i nā "hana palekana" (Pause Invites + Pause DMs:** - Kaomi i kāu Server Name dropdown (hema hema) -> Security Actions. - E nānā i ka Hoʻomaha i nā kono (hoʻi "Invites are currently paused for this server" i kekahi loulou waho a i ʻole Vanity URL kaomi) a me Pause DMs (pale i nā hoa ʻole i loko o ke kikowaena mai ka hoʻomaka ʻana i nā pae leka pololei hou). 2. E hoʻonui i ka pae hōʻoia i ka palena kiʻekiʻe (Highest - Phone Verified: - E hele i Server Settings -> Safety Setup -> Verification Level -> kaomi Change -> koho Kiʻekiʻe (Pono ke kelepona i hōʻoia ʻia ma kā lākou Discord account). - ʻO ka hapa nui o nā botnets raid automated e hilinaʻi i nā hōʻailona leka uila-hōʻoia ($0.01 per token) ma mua o nā moʻokāki SMS-hōʻoia. Ke hoʻololi nei i ka Kiʻekiʻe e ālai koke i nā hōʻailona bot i hōʻoia ʻole ʻia i loko o ke kikowaena mai ka hoʻouna ʻana i nā memo a i ʻole nā lālā leka. 3. Laka @everyone Nā ʻae Channel ma ke ao holoʻokoʻa: - E hele i Server Settings -> Roles -> Default Permissions (@everyone). - E pio: - Send Messages a Send Messages in Threads - Create Public Threads a Create Private Threads - Attach Files a Embed Links - Add Reactions a Use External Emoji / Stickers - Mention @everyone, @here, and All Roles - Hōʻike koʻikoʻi no ka ʻae ʻia ʻana o ka Channel: Inā he ala kikoʻī (e like me #general a i ʻole #chat) loaʻa iā Ka Hoʻopaʻa ʻOmaomao (Allow) override ma ka @everyone kuleana no Send Messages i loko o Edit Channel -> Nā ʻae, ʻo ka hoʻololi ʻana i ka hana hoʻonohonoho kikowaena honua ʻaʻole ** laka i kēlā ala. No kēlā me kēia kaila e ʻōwili mau ana me ka spam, kaomi i ka Gear Icon (Edit Channel) -> Nā ʻae -> @everyone a hoʻonoho Send Messages i ka Ulaula X (Deny) a i ʻole hiki iā Slowmode (6 hours).

2. Pehea e hooki ai i ka hoouka kaua "Webhook Spam" i 15 kekona

Nui ka poʻe nona nā kikowaena i ka manaʻo ua hacked kā lākou kikowaena holoʻokoʻa no ka mea hoʻohana i kapa ʻia "Server Nuke Syndicate" me kahi APP (ma mua BOT) ke piʻi nei ka hōʻailona @everyone 5 manawa i kekona #announcements ʻaʻole hiki ke kaomi ʻākau a pāpā ʻia. - No ke aha ʻaʻole hiki iā ʻoe ke pāpā i kahi Webhook: ʻO kahi Discord Webhook kahi hopena HTTP maʻalahi (https://discord.com/api/webhooks/{webhook.id}/{webhook.token}). ʻO ka mea i loaʻa i kēlā URL (a no ka mea, ua hōʻike ʻia e kahi moderator ma ke kahawai ola, hāʻawi iā ia i kahi waihona GitHub lehulehu, a i ʻole i hana ʻia kahi moʻokāki mod compromised hoʻokahi) hiki ke hoʻouna i nā uku JSON palena ʻole i kēlā kahawai me ka ʻole he lālā o kāu kikowaena Discord. - Pehea e pepehi koke ai: 1. E wehe i Server Settings -> Integrations -> Webhooks. 2. E nānā i ka papa inoa o Webhooks a ʻike i ke kahawai e kuhikuhi ai kēlā me kēia. 3. Kaomi ma kēlā me kēia Webhook ʻike ʻole ʻia a kaomi i ka Delete Webhook (a i ʻole kaomi i ka Kopi Webhook URL no nā lāʻau forensic ma mua, a laila Delete Webhook). Hoʻopau ka spam i ka millisecond ua holoi ʻia ka Webhook. 4. E wehe koke i Server Settings -> Audit Log -> Filter by Action: Create Webhook e ʻike * ʻo wai ka mea hoʻoponopono a i ʻole moʻokāki bot i hana i kēlā Webhook. Inā hana ka mooolelo a ka mea hoʻoponopono i Webhook ma ka hola 3:00 AM me ka ʻike ʻole ʻia, ua hoʻopaʻa ʻia kēlā hōʻailona hui Discord o ka moderator: wehe i kā lākou kuleana a kiki koke i kā lākou moʻokāki.

Mahele 2: Hooki i kahi "Server Nuke" i loko (Compromised Moderator vs. Compromised Bot Token)

Loaʻa ka "Server Nuke" i ka wā e hoʻololi ai ka mea hoʻouka i kahi moʻokāki a i ʻole bot e paʻa ana i nā ʻae hoʻokele kiʻekiʻe (Administrator, Manage Channels, Manage Roles, Ban Members, Manage Webhooks) a e holo ana i kahi palapala luku automated (Nuker). I loko o 10 kekona, hoʻomaka ka script i kēlā me kēia channel ID e holoi i nā kikokikona a me nā leo leo a pau, e hana ana i 250 mau kahawai hou i kapa ʻia. #nuked-by-xxx, holoi i nā kuleana kikowaena a pau, a puhi i nā noi pāpā nui i ka papa inoa lālā.

1. ʻO ke kānāwai Hierarchy Role a Discord (No ke aha e hiki ai a ʻaʻole hiki iā ʻoe ke hoʻōki i kahi Admin rogue)

Hoʻoikaika ʻo Discord i kahi ** Role Hierarchy ** i loko o Server Settings -> Roles: - ** Noho ka mea nona ka Pūnaewele (Pa'a Lei)** ma luna o kēlā me kēia kuleana ma ke kikowaena a hiki iā ia ke wehe a pāpā paha i kekahi kanaka a i ʻole bot me ka nānā ʻole i ke kauoha. - ** Hiki i nā Luna Hoʻokele ʻAʻole nona ** ke hoʻololi, wehe, a pāpā ʻole i nā mea hoʻohana a me nā bots nona ke kuleana kiʻekiʻe e noho ** ma lalo o ** ko lākou kūlana kiʻekiʻe ma ka papa inoa Server Settings -> Roles. - Inā hoʻonoho ʻia ka hana hoʻokele a ka bot i hoʻopaʻa ʻia ma #2 ma ka papa inoa Roles a noho kāu poʻo luna hilinaʻi ma #3, ʻaʻole mana kou poʻo luna e kīkē i ka bot a i ʻole e hoʻoponopono i kāna kuleana i ka wā e hiamoe ana ʻoe (ka mea nona ka Pūnaewele).

2. ʻO ke kaʻina pololei e hoʻokaʻawale i kahi Compromised Bot Nuke

Inā hōʻike ka Audit Log i kahi moʻokāki bot (a i ʻole kāu bot server maʻamau a i ʻole kahi bot ʻaoʻao ʻekolu i haki ʻia) e holoi ana i nā ala a pāpā paha i nā lālā, e hahai i kēia kauoha pololei 3-step:

ʻanuʻu Hana Pono e hoʻokō No ke aha he mea nui ke kauoha
** KaʻAnuʻu 1: Wehe i nā ʻae ʻia o ka Bot (0.0 Seconds)** E wehe i Server Settings -> Roles -> kaomi i ka ** Managed Role** i hana ʻia no kēlā bot (e laʻa., MyCustomBot) -> kaomi i ka Clear Permissions ma ka piko o kāna mau hoʻonohonoho kuleana (ʻoi loa ka hoʻohuli ʻana Administrator, Manage Server, Manage Roles, Manage Channels, Ban Members, a me Manage Webhooks) -> kaomi Save Changes. ʻOiai ke hoʻoikaika ikaika nei ka palapala Python a ka mea hoʻouka kaua i ka Discord API me DELETE /channels/{id}, ʻo ka wehe ʻana i ka ʻae o ka bot ka mea e hāʻule koke ai kēlā me kēia kelepona API ma hope mai HTTP 403 Forbidden (Missing Permissions).
** KaʻAnuʻu 2: Hoʻonohonoho hou i ka Bot Token ma ka Discord Developer Portal (15 Seconds)** Inā ʻo kāu hana maʻamau a hoʻokipa ʻia paha, e komo i loko https://discord.com/developers/applications -> koho i kāu noi -> kaomi Bot ma ka ʻaoʻao hema -> kaomi ** Reset Token ** -> hōʻoia. ʻO ka hoʻonohonoho hou ʻana i ka cryptographic Bot Token e hōʻole i ka leak Authorization: Bot MT... poʻomanaʻo ma waena o nā ʻīpuka ʻīpuka o Discord ma ka honua holoʻokoʻa i loko o 1 kekona, e wehe mau ana i ka pilina pūnaewele o ka mea hoʻouka.
** KaʻAnuʻu 3: Kick/Ban the Bot & Check Integrations (30 Seconds)** E kaomi akau i ka bot ma ka papa inoa o nā lālā (a i ʻole e hele i Server Settings -> Integrations -> Bots and Apps) -> kaomi Manage -> Wehe i ka Integration / Ban Bot, a holoi i nā Webhooks a i ʻole Slash Command e hoʻopau i ka bot i hana ʻia. No ke aha e wehe ai i nā ʻae *ma mua o ke kīkēkē? Inā ʻae ʻia a paʻa ka moʻokāki hoʻoponopono kanaka Manage Server ʻae, ʻo ke kī ʻana i kahi bot ma mua e ʻae i ka mea hoʻouka kaua e ʻae koke i ka bot ma o kahi URL OAuth2 (permissions=8) me ka piha Administrator hoʻihoʻi ʻia nā kuleana.

3. Pehea e ʻaihue ʻia ai kā lākou mau hōʻailona Discord (A no ke aha ʻaʻole ʻo 2FA e hoʻōki)

No ke aha i hoʻomaka koke ai kāu mea hoʻoponopono hilinaʻi, nona ka SMS a me Authenticator App 2FA ma kā lākou moʻokāki Discord, hoʻomaka koke i ka nuking server ma 4:00 AM? - Pehea ka hana ʻana o Discord Authentication Token: ʻO ka mea kūʻai aku ʻo Discord desktop (i kūkulu ʻia ma Electron/Chromium) a me nā polokalamu kele pūnaewele e mālama i kahi hōʻailona hōʻoia o ka mea hoʻohana i loko o kahi waihona i hoʻopili ʻia (%AppData%\discord\Local Storage\leveldb ma Windows). - Ka 3 mau hōʻailona ʻaihue: 1. ** Pāʻani hoʻopunipuni Beta / hōʻoia Malware (Lumma, RedLine, Blank Grabber, Emerald Stealer):** DM kekahi pūʻulu hoʻouka i kāu mea hoʻoponopono e noi ana iā lākou e hoʻāʻo i kahi pāʻani indie a i ʻole e nānā i kahi hoʻopiʻi pāpā .zip waihona. Wehe ka polokalamu kino i ka hōʻailona Discord decrypted a ka moderator A hoʻololi pinepine i ka JavaScript kūloko o ka mea kūʻai desktop Discord (core.asar / index.js injection) no laila ʻoiai ke hoʻololi ka mea hoʻoponopono i kā lākou ʻōlelo huna, hoʻouna koke ka polokalamu Discord trojanized i ka hou hōʻailona hou i ka webhook o ka mea hoʻouka. 2. ** "Bookmarklet" ʻino a i ʻole Developer Console (F12) Social Engineering:** Hoʻopunipuni ka poʻe hoʻopunipuni i nā mea hoʻohana i ka huki ʻana i kahi bookmarklet "Verify Account" i kā lākou pahu polokalamu kele pūnaewele a i ʻole ka hoʻopili ʻana i kahi snippet i ka Ctrl + Shift + I console, e heluhelu pono ana i ka hōʻailona ola mai ka hoʻomanaʻo. 3. ** Hoʻopunipuni "Captcha Verification Bot" QR Code Scan (Wick / DoubleCounter Clones):** Hoʻouna nā mea hoʻouka i kahi leka hōʻoia server hoʻopunipuni e noi ana i ka mea hoʻoponopono e **"E nānā i kēia QR code me kāu Discord Mobile App e hōʻoia he kanaka ʻoe."

Mahele 3: Reddit Community (Subreddit) Hoʻihoʻi hou ʻia ʻo Raid a me ka hoʻoponopono hoʻoponopono

Inā hoʻololi ʻoe i kahi kaiāulu Reddit (r/YourSubreddit) a e ʻike ua wehe ʻia ka CSS/Wiki e kahi moʻokāki hoʻololi hoʻololi ʻia, ua pāpā i nā haneli o nā mea hoʻohana, ua hoʻololi i ka wehewehe subreddit me nā loulou scam, a i ʻole e hoʻonoho i ka subreddit iā Private / Restricted, a i ʻole he mau tausani o nā bots brigade coordinate e kahe ana i ka laina:

1. Hoʻopau koke ʻia ʻo Subreddit Lockdown & Rogue Moderator

  1. E nānā i ka Hierarchy Moderator (Mod Tools -> Moderators:
  2. E like me Discord, hoʻokō ʻo Reddit i kahi ** hierarchy seniority top-down ** i ka papa inoa Moderators e pili ana i ka lā i hoʻohui ʻia ai kēlā me kēia moderator.
  3. ʻO kēlā me kēia mea hoʻoponopono me ka Everything Hiki i ka hae (Full Permissions) ke wehe a wehe paha i nā ʻae mai kekahi mea hoʻoponopono i helu ʻia ma lalo o lākou ma ka ʻaoʻao, akā ʻaʻole hiki ke hoʻopā i kekahi mea hoʻoponopono i helu ʻia ma luna o lākou.
  4. Inā helu ʻia ka mea hoʻoponopono i hoʻopaʻapaʻa ʻia ** ma lalo ** ʻoe: wehe koke i Mod Tools -> Moderators -> Editable, kaomi i ka ikona penikala ma ka ʻaoʻao o ka mea hoʻoponopono i hoʻopaʻa ʻia, wehe Everything, a kaomi iā Remove.
  5. E nana i ka Mod Log (https://www.reddit.com/r/YOURSUBREDDIT/about/log:
  6. E kānana i ka Moderation Log e ka mea hoʻohana i hoʻololi ʻia (Moderator hāʻule iho) a na Action (banuser, wikirevise, editsettings, removelink, removemoderator).
  7. ** Hoʻoulu i ka Reddit "Crowd Control" a me "Safety Filters" i ka wā o kahi hoʻouka kaua o waho:**
  8. E wehe i ka Mod Tools -> Nā kānana palekana -> Crowd Control.
  9. E hoʻonoho i ka Post Level a me ** Comment Level** i Maximum / Strict (paʻa ʻakomi i nā manaʻo a me nā pou mai nā mea hoʻohana me ka karma subreddit maikaʻi ʻole, nā moʻokāki hou, a me nā mea hoʻohana ʻaʻole i hui pū i ke kaiāulu ma mua o ka hoʻomaka ʻana o ka hoʻouka kaua).
  10. E hoʻā i ka Kāna Hoʻomāinoino a me Kāna Hoʻopaʻa ʻAla (e hoʻohana ana i ka manamana lima lima o loko o Reddit a me ka telemetry IP no ka wehe ʻokoʻa ʻana i nā pou mai nā moʻolelo alt hou i hana ʻia o nā mea hao i pāpā ʻia).
  11. ** Hoʻohui koke AutoModerator Rula laka ulia pōpilikia:**
  12. E wehe i Mod Tools -> Automod (wiki/config/automoderator) a hoʻopili i kēia ʻīpuka pilikia koke ma luna e hoʻopaʻa a wehe paha i nā pou/manaʻo mai nā moʻolelo ʻōpio ma mua o 30 mau lā a i ʻole me ka karma subreddit haʻahaʻa: 
    ---
# EMERGENCY RAID LOCKDOWN RULE
type: any
author:
    account_age: "< 30 days"
    combined_subreddit_karma: "< 10"
    satisfy_any_threshold: true
action: filter
action_reason: "Emergency Raid Lockdown: New account or low subreddit karma [{{match}}]"
---

2. He aha ka mea e hana ai inā ua hoʻololi ʻia ka "Moderator Top" o kāu Subreddit (A Wehe ʻia i ka Hui Mod)

Inā ua kāʻili ʻia ka moʻokāki #1 Top Moderator ma kāu subreddit (a i kūʻai ʻia e ka crypto/onlyfans spam syndicate) a wehe i ka hui hoʻoponopono kūpono: 1. Mai hoʻāʻo e hoʻopale i kāu subreddit i kāʻili ʻia. 2. E hoʻouna pololei i ka mea hoʻoponopono kiʻekiʻe ʻelua i Modmail r/ModSupport (https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Compromised+Top+Moderator+Emergency+Rollback). 3. No ke aha mai r/ModSupport ʻO Modmail ka Channel Escalation Official: ʻAʻole like me nā pou lehulehu ma r/redditrequest (no nā subreddits i haʻalele ʻia), r/ModSupport Hoʻohana pololei ʻia ʻo Modmail e Reddit Community Admins i lako me kahi Mod Action Rollback Tool. 4. Hāʻawi: - ʻO ka inoa subreddit pololei (r/...); - ʻO ka inoa inoa o ka Luna Hoʻoponopono Kiʻekiʻe (u/...); - ʻO ka hōʻailona manawa UTC pololei i ka wā i hoʻomaʻemaʻe ʻia ai ka hui mod kūpono a hoʻopau ʻia ka wiki/sidebar/pins; - Nā kiʻi paʻi kiʻi o kāu mau leka hoʻopau Modmail. 5. He aha ka Reddit Admins Restore: Reddit Admins laka i ka mooolelo Top Moderator i hoʻopaʻa ʻia, e hoʻihoʻi i ka wehe ʻana o ka moderator, nā pāpā, nā hoʻoponopono wiki, a me nā hoʻopau hope i hana ʻia i ka wā o ka puka aniani, a hoʻihoʻi i ka mea hoʻoponopono kiʻekiʻe loa i ola. #1 Top Moderator noho.

Mahele 4: Hoʻihoʻi Ma hope o ka Raid: Hiki ke hoʻihoʻi hou ʻia nā kahawai Discord a me nā mea hoʻohana i pāpā ʻia?

Ke hoʻopau ʻia ka hoʻouka kaua a hoʻoneʻe ʻia ka rogue bot/moderator, ke kū nei nā mea nona nā kikowaena i ka ʻoiaʻiʻo paʻakikī o ka hoʻolālā ʻana o Discord.

1. Hoʻihoʻi hou ke Kākoʻo Discord i nā ala i hoʻopau ʻia a i ʻole nā memo ma hope o kahi Nuke Server?

  • ** ʻO ka ʻOiaʻiʻo ʻenehana paʻakikī: ** ʻAʻole like me YouTube (ka mea e mālama ai i nā pahu wikiō i holoi ʻia i loko o ka waiho anuanu no 14 a 30 mau lā) a i ʻole Reddit (kahi i hūnā ʻia ai nā pou "hoʻoneʻe ʻia" a hiki i nā Admins ke hoʻihoʻi i kahi Mod Log), ** ke holoi ʻia kahi kahawai ma Discord (DELETE /channels/{id}), Hoʻomaʻemaʻe mau ka waihona ʻo Cassandra/ScyllaDB ʻo Discord i ka mea a me nā lālani memo a pau i loko.**
  • ** ʻAʻole hiki i ka Discord Trust & Safety ke hoʻihoʻi i nā ala i holoi ʻia, nā kuleana i holoi ʻia, a i ʻole ka mōʻaukala memo i holoi ʻia ma hope o ka hoʻokō ʻana a i ʻole ka bot nuke i kahi kikowaena.**
  • He aha ka Discord Trust & Safety hiki ke hoʻihoʻi: Inā ua hoʻopau ʻia kāu kikowaena holoʻokoʻa e Discord Trust & Safety** no ka mea, ua hoʻopaʻa ʻia e nā mea hoʻopiʻi i nā ʻikepili ʻino e hoʻopaʻa iā ʻoe, a i ʻole inā ua kāʻili ʻia kāu Server Owner account a ua hoʻololi ka mea hoʻouka i ka Mana Pūnaewele (Transfer Ownership) i kā lākou moʻokāki ponoʻī, e waiho ana i kahi Compromised Account / Server Ownership Ticket ma https://dis.gd/request hiki i nā limahana Discord ke hoʻihoʻi i ka Server Owner Crown i kāu moʻokāki i hoʻihoʻi ʻia.

2. Pehea e kūkulu hou ai i nā ala a me nā kuleana a me ka wehe koke ʻana i nā lālā i pāpā ʻia e ka lehulehu

  1. Kūkulu hou ʻana i nā ala a me nā kuleana (nā laʻau kikowaena a me nā bots hoʻihoʻi):
  2. Inā ʻoe i hana mua i kahi ʻōiwi Discord Server Template (Server Settings -> Server Template) a i ʻole i kiʻi i ka paʻi kiʻi hoʻonohonoho me ka bot backup kaulana (e like me Xenon Bot, e kākoʻo ana i nā hierarchies channel, nā waihoʻoluʻu kuleana, a me ka ʻae ʻana i ke kākau ʻana, ʻaʻole naʻe nā memo mea hoʻohana mōʻaukala), hiki iā ʻoe ke hoʻihoʻi i kāu kahawai a me kāu iwi iwi ma lalo o 2 mau minuke.
  3. Ka Hoʻopaʻa Paʻa Nui ma o ka Log Audit:
  4. Inā pāpā ʻia kahi bot compromised 500 mau lālā pono i ka manawa o 2 mau minuke nuke, e wehe i Server Settings -> Audit Log -> Filter by Action: Ban Member -> kānana e ka mea hoʻohana: [The Compromised Bot/Mod].
  5. Hōʻike ʻia kēlā me kēia hoʻopaʻa komo i loko o ka Audit Log i ka ID mea hoʻohana pololei a me ka hōʻailona manawa o ka mea i pāpā ʻia i loko o kēlā pukaaniani 2 minuke. Hiki iā ʻoe ke wehe iā lākou me ka lima ma o Server Settings -> Bans, a i ʻole e hoʻohana i kahi kauoha bot moderation hilinaʻi (e like me Carl-bot, Dyno, a i ʻole kahi heluhelu palapala hoʻokele 15 laina maʻalahi. guild.audit_logs(action=discord.AuditLogAction.ban) kānana loa i entry.user.id == COMPROMISED_ACTOR_ID) e kelepona ʻakomi guild.unban(entry.target) ma kēlā me kēia lālā kūpono i pāpā ʻia e kēlā mea hana kolohe.
  6. Ke hoʻomaʻemaʻe ʻana i nā tausani o nā memo Raid me ka holoi ʻole ʻana i ke Kanal:
  7. Inā hoʻopiha ʻia kahi ala me 2,000 raid spam memo, mai holoi a hoʻopaʻa i ke kahawai ke ʻole ʻoe makemake e nalowale i nā memo kahiko kahiko, nā memo i hoʻopaʻa ʻia, a me nā hoʻohui pūnaewele.
  8. Akā, e hoʻohana i kā Discord i kūkulu ʻia ** Right-Click Raider -> Ban -> Delete Message History: Previous 24 Hours (a i ʻole Previous 7 Days)**, e hoʻomaʻemaʻe ʻokoʻa i kēlā me kēia memo i hoʻouna ʻia e kēlā mea hao ma kēlā me kēia kahawai ma ke kikowaena i ka manawa like.
  9. No ka spam moʻokāki lehulehu, e hoʻohana i nā bot hoʻololi i hōʻoia ʻia /purge kauoha (up to 100 to 1,000 messages under 14 days old ma o Discord's Bulk Delete API endpoint).

Mahele 5: Papa inoa Hoʻopaʻa Paʻa Paʻa a me nā Community Raid-hardening

Ke hoʻokūpaʻa ʻia kāu kikowaena, e hoʻonohonoho i kēia ** ʻeono mau pale hale kūʻai kumu kūʻai ʻole i kūkulu ʻia** no laila ʻaʻole hiki i kahi botnet raid waho a i ʻole kahi PC moderator i hoʻopili ʻia e hiki ke hoʻokuke hou i kāu kikowaena:

1. E ho'ā i nā kānana maoli "AutoMod" Discord (Server Settings -> Safety Setup -> AutoMod)

Kākoʻo ʻo Discord AutoMod a hoʻopaʻa i nā uku hoʻouka kaua * ma mua o ka hāʻawi ʻia ʻana o ka leka ma ke kamaʻilio ʻana a i ʻole ka hoʻomaka ʻana i kahi leka hoʻolaha ma nā kelepona o nā lālā: - Paʻa i ka Spam haʻi ʻōlelo: E hoʻonoho i ka Ka palena haʻihaʻi i 5 (a i ʻole 3) nā ʻōlelo kū hoʻokahi no kēlā me kēia memo, a koho iā Block Message + Timeout Member (1 Hour a i ʻole 24 Hours) + Hoʻouna i ka ʻōlelo leka. ʻAʻole hiki i ka mea hoʻouka ke ping 30 mea hoʻohana i hoʻokahi memo. - E ālai i ka maʻiʻo Spam i manaʻo ʻia a me nā huaʻōlelo i hōʻailona maʻamau: E hoʻololi i ka papa inoa i kūkulu ʻia. - Ka hua'ōlelo maʻamau a me nā lula Regex no nā scams: Hoʻohui i kahi lula AutoMod maʻamau e ālai ana i nā kumu hoʻopunipuni maʻamau: - Hua'ōlelo: *discord.gift*, *steamcommunity.com/gift*, *free nitro*, *airdrop claim*, *t.me/*, *whatsapp.com*. - Nā kumu Regex e hopu ana i nā loulou kono ʻino: (?:https?://)?(?:www\.)?(?:discord\.(?:gg|io|me|li)|discordapp\.com/invite)/[a-zA-Z0-9-]+ (ka hoʻokuʻu ʻana i kāu kuleana limahana).

2. E ho'ā i ka "Koi i ka 2FA no nā hana ho'oponopono" (Server Settings -> Safety Setup -> Permissions)

  • ʻO ka hoʻā ʻana i ka Server-Wide 2FA Requirement e hoʻoikaika i ka Discord's API e hōʻoia i ka mea hoʻohana e hoʻāʻo nei e holoi i nā kahawai, pāpā i nā lālā, hoʻokele i nā kuleana, a hoʻokele paha i nā webhooks ua loaʻa ʻo Two-Factor Authentication i kā lākou moʻokāki.
  • ** ʻO ka mea nui, wehe i ka Administrator ʻae ʻia mai ALL Human Moderator Roles a me 99% o Bots:**
  • Ke Rula Gula o ka Discord Security: Aneane ** ʻaʻohe mea hoʻoponopono kanaka a ʻaʻohe bot kumu nui e pono ai i ka Administrator hoʻololi i ka ON.**
  • No ke aha? ʻO ka Administrator e hoʻololi i nā hāʻawi kaʻawale piha ma luna o kēlā me kēia laka channel, hāʻawi Manage Webhooks, haawina Manage Server, a hoʻokuʻu i kahi mod nuke i ke kikowaena i 3 kekona.
  • Akā, hāʻawi i kāu mau Luna Hoʻoponopono kanaka wale Kick Members, Ban Members, Moderate Members (Timeout), a Manage Messages. Hāʻawi iā lākou zero ʻae iā lākou Delete Channels, Manage Roles, a i ʻole Manage Webhooks. Inā loaʻa ka PC o ka mea hoʻoponopono i ka maʻi ʻaihue hōʻailona, ​​ʻaʻole hiki i ka mea hoʻouka ** hiki ke holoi i kahi kahawai hoʻokahi a ʻaʻole hiki ke hana i hoʻokahi webhook**.

3. E hoʻokō i ka "Bot Quarantine & Anti-Nuke Rate Limiting"

  • ** Hooia Server Settings -> Integrations ʻO kēlā me kēia mahina:** Wehe i kēlā me kēia pahu mele i hoʻohana ʻole ʻia, bot pāʻani liʻiliʻi, a i ʻole bot hōʻoia āu i hoʻohui ai i nā makahiki i hala. I loko o kekahi mau hoʻouka kaua mōʻaukala nui, ua uhaki ʻia kahi kikowaena kapuaʻi o ka ʻaoʻao ʻekolu e ka poʻe hackers i hoʻohana i kāna mea moe. Administrator kuleana e hoʻouka i nā kikowaena 10,000 i ka manawa like.
  • Mai Grant Administrator Ke kono ʻana i kahi Bot: Ke ʻae nei i ka bot ma o ka URL OAuth2 (discord.com/oauth2/authorize?...&permissions=8), e hoʻomaopopo i kēlā permissions=8 ʻo ia ka bitfield no ka piha Administrator. Wehe Administrator ma ka ʻōlelo OAuth a hāʻawi wale i nā ʻae kikoʻī e pono ai ka bot.
  • Ati-Nuke Watchdog koho: Ma nā kikowaena nui (10,000+ members), kau i kahi Anti-Nuke Rate-Limiter Bot (e like me Wick) ma ka luna o kāu Role Hierarchy (#1 Position aia ma lalo o ka Server Owner) i hoʻonohonoho ʻia a inā e holoi kekahi mea hoʻoponopono a i ʻole bot i ka ʻoi aku ma mua o 2 nā kaha i loko o 60 kekona a i ʻole e pāpā ʻia ma mua o 5 mau mea hoʻohana i 60 kekona, e hoʻokaʻawale ka ʻīlio kiaʻi i nā kuleana o ka mea keaka i ka zero i 200 milliseconds.

Nā helu ulia pōpilikia āpana a me nā protocols oihana

I ka wā e komo ai nā hui kaiaulu i felony cybercrime, extortion, swatting hoʻoweliweli, a i ʻole ka hāʻawi ʻana i nā mea hana hoʻomāinoino keiki (CSAM), e hahai koke i kēia mau kaʻina hōʻike kūhelu:

  • ** Hōʻike CSAM honua (Koe):** Mai hoʻoiho, mālama, a i ʻole i mua i nā kiʻi paʻi kiʻi me CSAM. E hoʻohana i kā Discord's in-app Report Message -> Child Self-Horm or Sexual Abuse Material (e hoʻouna pololei ana i ka ʻaoʻao server-side attachment hash a me ka mea hoʻouka IP pololei i ka National Center for Missing & Exploited Children, NCMEC CyberTipline), a i ʻole hōʻike ma report.cybertip.org (1-800-843-5678) ma ka US a i ʻole ka Internet Watch Foundation (iwf.org.uk) ma UK/EU. E nana ka hoʻomaʻamaʻa keiki, ka hoʻopili predator, a me ka hōʻike NCMEC.
  • ** ʻAmelika Hui Pū ʻIa:** E hōʻike i ka hoʻouka kaua, ka hoʻoweliweli ʻana, a i ʻole ka hoʻouka kaua DDoS i ka FBI Internet Crime Complaint Center (ic3.gov). Inā ua hoʻohewa ʻia ka mea hoʻoponopono a hoʻoweliweli ʻia me ka hoʻouna ʻana i ka pilikia hoʻopunipuni ("Swatting"), e kelepona i kāu mākaʻi kūloko ** keʻena hoʻouna ʻole ulia pōpilikia ** e kau koke i kahi Swatting / Premise Alert Note ma kāu helu wahi. No ka pilikia kino koke, e kelepona iā 911.
  • Kanada: E hōʻike i ka hoʻopio pūnaewele a me ka hoʻouka ʻana i nā maʻiʻo i ke kānāwai i ka Canadian Center for Child Protection (cybertip.ca), ka Canadian Anti-Fraud Center (1-888-495-8501), a i ʻole nā mākaʻi kūloko (911 i nā pilikia ulia pōpilikia).
  • United Kingdom: E hōʻike i ka hoʻohana hewa ʻana i ka lolouila a me ka hoʻoheheʻe pūnaewele iā Action Fraud (actionfraud.police.uk, 0300 123 2040) a hōʻike hoʻomāinoino i ka Internet Watch Foundation (iwf.org.uk) aiʻole CEOP (ceop.police.uk). Helu ulia pōpilikia: 999 a i ʻole 112 (makai pilikia ʻole: 101).
  • European Union: E hōʻike i ka ʻōlelo inaina kūʻokoʻa, ʻike mea hoʻoweliweli, a i ʻole CSAM hoʻouka kaua ma o kāu lāhui INHOPE (inhope.org) hotline a me nā mākaʻi cybercrime unit ma lalo o ka EU Digital Services Act (DSA). Helu pilikia: 112.
  • Australia a me New Zealand: Ma Australia, e hōʻike i ka hōʻike hoʻomāinoino i ka pūnaewele puni honua a i ʻole nā mea hoʻouka kaua kānāwai i ka eSafety Commissioner (esafety.gov.au) a me ReportCyber (cyber.gov.au, 1300 292 371). Ma New Zealand, hōʻike iā Netsafe (netsafe.org.nz, 0508 638 723). Helu ulia pōpilikia: 000 (Australia), 111 (New Zealand).
  • India a me Asia-Pacific: Ma Inia, e waiho i ka hoike koke ma ka National Cyber Crime Reporting Portal (cybercrime.gov.in, laina kōkua 1930). E ʻike i kā mākou papa kuhikuhi piha ma helu pilikia.

Nīnau pinepine

No ke aha @everyone ʻIke mau ʻia nā ping spam ma hope o koʻu pāpā ʻana i ka poʻe hao a laka @everyone nā ʻae?

Ke hoʻomau nei nā memo spam i loko o kahi ala me kahi **`APP`** aiʻole **`BOT`** tag ma ka ʻaoʻao o ka inoa inoa a ʻaʻole hiki iā ʻoe ke kaomi ʻākau i ka mea hoʻohana e pāpā iā lākou, ke hoʻohana nei ka mea hoʻouka i kahi **Discord Webhook** ma mua o kahi moʻokāki mea hoʻohana. ʻAʻole ʻike ʻia nā Webhooks i kāu papa inoa o nā lālā Server a nānā ʻole `@everyone` kuleana hoʻouna leka. E wehe i **Server Settings -> Integrations -> Webhooks**, e huli i ka Webhook e kuhikuhi ana i ke kahawai i pili, a kaomi **Delete Webhook**. Ma hope iho, e nānā iā **Server Settings -> Audit Log** i kānana ʻia e `Create Webhook` e ʻike i ka mea hoʻoponopono a i ʻole bot i hana.

Inā e kīki a pāpā paha au i ka bot compromised i ka wā o ka server nuke, pehea lā e hui hou ai iā ia iho?

ʻAʻole hiki i ka bot ke kono iā ia iho e hoʻi iā ia iho, **akā** inā ua hoʻopaʻapaʻa ka mea hoʻouka i ka hōʻailona hui Discord a ke kanaka moderator (a ʻae ʻia. `Manage Server` / `Administrator` i kahi kūlana lua huna i ka wā i mana ka bot), hoʻohana ka palapala a ka mea hoʻouka i kēlā hōʻailona kanaka e ʻae hou i ka URL kono OAuth2 o ka bot (`permissions=8`) he māhele kekona ma hope o kou kīkē ʻana. Ma ka wehe ʻana i ka ʻae ʻana o ka bot i ka zero mua, e hoʻihoʻi i ka Bot Token i loko `discord.com/developers/applications`, a me ka loiloi ʻana i ka **Audit Log** no nā kuleana ʻae ʻole i hāʻawi ʻia i nā lālā kanaka, ʻoki ʻoe i ka bot a me kāna vector kono kono hou.

Hiki i ke Kākoʻo Discord ke hoʻihoʻi i kaʻu kikowaena a hoʻihoʻi i kaʻu mau ala i hoʻopau ʻia inā hoʻopaʻa ʻia e kahi hacker?

ʻAʻole. ʻAʻole like me Reddit a i ʻole YouTube, ʻaʻole mālama ʻo Discord i nā kiʻi paʻi o nā ala i holoi ʻia, nā kuleana i holoi ʻia, a i ʻole nā ​​​​memo i holoi ʻia ma kāna mau kikowaena waihona. Once a `DELETE /channels/{id}` Hoʻokō ʻia ka noi API e kahi mālama moʻokāki `Manage Channels` a i ʻole `Administrator` ʻae ʻia, holoi mau ʻia kēlā mau ala a me kā lākou mau moʻolelo memo. Eia nō naʻe, inā hoʻololi ka mea hacker iā **Server Ownership** mai kāu moʻokāki i hoʻopaʻa ʻia, a i ʻole i hoʻopau hewa ʻia kāu kikowaena e Trust & Safety i ka wā o ka hoʻouka kaua ʻana, e waiho ana i kahi tikiki ma `dis.gd/request` ma lalo o **Ka moʻokāki Hacked / Server Ownership** e ʻae iā Discord Support e hoʻihoʻi i ka lei o ka Server Owner iā ʻoe.

Ua kāʻili ʻia ka moʻokāki a ka mea hoʻoponopono e ka mea hoʻoheheʻe ʻike a hoʻopaʻa i kā mākou kikowaena. He palekana paha ke hoʻololi hou iā lākou ma hope o ka hoʻololi ʻana i kā lākou ʻōlelo huna?

Mai hoʻihoʻi hou i ka ʻae ʻana o ka mea hoʻoponopono i kahi limahana i ʻae ʻia no ka mea ua hoʻololi lākou i kā lākou ʻōlelo huna ma ka kamepiula hoʻokahi. ʻaihue hōʻailona Discord hou (`Lumma`, `Blank Grabber`, `RedLine`) e hoʻokomo pololei i nā uku uku JavaScript i loko o ka palapala noi papa Discord `index.js` / `core.asar` waihona i loko `%AppData%\discord`. I ka manawa e hoʻopaʻa hou ai ka mea hoʻoponopono i kēlā PC i holoi ʻole ʻia, ʻaihue ka palapala i hoʻopaʻa ʻia i ka hōʻailona hou a hoʻihoʻi iā ia i ka hacker. E koi i ka mea hoʻoponopono e hana i kahi hoʻonohonoho USB maʻemaʻe o Windows ma mua o ka hāʻawi ʻana iā lākou i nā kuleana.

Pehea wau e pale ai i kaʻu kikowaena mai ka scam "Fake QR Code Verification" e kāʻili ana i nā mea hoʻoponopono a me nā lālā?

E aʻo i kāu koʻokoʻo a me ke kaiāulu ʻaʻole ** ʻaʻohe bot hōʻoia Discord kūpono (`Wick`, `DoubleCounter`, `Pandez`, `Sledgehammer`) e noi aku iā ʻoe e nānā i kahi QR code me ka hoʻohana ʻana i ka pahupaʻikiʻi polokalamu kelepona Discord.** ʻO ka QR code scanner i kūkulu ʻia i loko o ka polokalamu kelepona Discord aia wale nō e hoʻopaʻa i kahi kamepiula papapihi hou i kāu moʻokāki Discord. E hoʻomaʻamaʻa i nā mea hoʻoponopono e hoʻopau i nā DM e hiki mai ana mai nā hoa ʻole ma lalo o **Nā hoʻonohonoho hoʻohana -> Maʻiʻo a me Social -> Nā ʻae Kaiapili** a ʻaʻole loa e nānā i kahi code QR a holo i kahi `.exe`/`.zip` faila i hoʻouna ʻia ma kahi DM.

Nā alakaʻi pili

Nā kumu a me ke alakaʻi kūhelu

  • Discord Trust & Safety and Safety Center (discord.com/safety): Ka pale ʻana i kāu kikowaena mai nā hoʻouka kaua (Safety Setup, AutoMod, Raid Protection, a Security Actions: Hoʻomaha i ke kono / hoʻomaha i nā DMs) a me ka *Hierarchy ʻae a me ʻelua-Factor Authentication no nā mea hoʻoponopono.
  • Ka Palapala Hoʻolaha Discord (discord.com/developers/docs): OAuth2 Bot Manaʻo Manaʻo, Bitwise ʻae Hae (Administrator = 0x8), Palekana Webhook, a me ka Hoʻopau ʻana i nā Token.
  • Kokua Reddit & Kākoʻo Hoʻoponopono (support.reddithelp.com / r/ModSupport): Subreddit Crowd Control, Ban Evasion Filters, AutoModerator Emergency Configurations, and Compromised Moderator Rollback Procedures.
  • Cybersecurity and Infrastructure Security Agency (CISA) & National Cyber Security Center (NCSC): Mitigating Info-Stealer Malware, Electron Application Injection (asar hoʻopunipuni), a me OAuth/Session Token Hijacking.
  • ** Kikowaena Aupuni no na keiki nalo a hoohana wale ia (NCMEC) & Pūnaewele Watch Foundation (IWF):** Nā Kaʻina Hoʻolaha Manaʻo no ka ʻike kūʻē i ke kānāwai a me nā mea hoʻoheheʻe ʻana i nā mea hoʻohana ʻino.