Ihe nkesa Discord ma ọ bụ mwakpo obodo: Bot Token mebiri emebi, Spam Webhook, na Audit Log Recovery¶

Na-eteta ruo puku kwuru puku @everyone pings ngosi na ịchọpụta na ihe nkesa obodo ** Discord, guild egwuregwu, ma ọ bụ subreddit ** nọ n'okpuru mwakpo a na-ahazi ** ma ọ bụ "nuke nkesa" akpaghị aka bụ ihe mberede dijitalụ dị elu. N'ime 30 ruo 90 sekọnd, akaụntụ nchịkwa mebie, bot token hijacked, ma ọ bụ webhook leaked nwere ike ihichapụ ọtụtụ ọwa, machibido ọtụtụ puku ndị otu ziri ezi, kpuchie ihe nkesa gị na ndị na-ebu obere akpa ego cryptocurrency, ma ọ bụ biputere mmebi iwu nke ọrụ siri ike (gụnyere onyonyo na-akwadoghị ma ọ bụ ihe mmetọ ụmụaka. CSAM) emebere ka ọ kpalite ** Discord Trust & Safety nkwụsị nkesa zuru oke ** nke machibidokwara akaụntụ onye nwe ihe nkesa. Ọ bụrụ na onye mwakpo na-ekesa CSAM iwu na-akwadoghị, iyi egwu ndị na-eyi ọha egwu, ma ọ bụ iyi egwu nke ime ihe ike na-adịghị anya, jiri akwụkwọ anyị kọsaa ihe akaebe ozugbo. na-akọ ọdịnaya nke iwu na-akwadoghị ma na-emerụ ahụ na ejiji ụmụaka, kọntaktị anụ anụ, na mkpesa NCMEC ndị ndu, ma jụọ ụwa anyị nọmba mberede ndekọ ma ọ bụrụ na onye ọ bụla nọ n'ihe egwu anụ ahụ.

Na ịga nke ọma ịkwụsị mbuso agha n'ihe na-erughị sekọnd 60 chọrọ nchọpụta ** nke n'ime ọgụ ọgụ atọ na-eti obodo gị: 1. Mpụga Join-Wave / Onye ọrụ-Bot Raid: Ọtụtụ narị akaụntụ ndị ọrụ akpaaka na-ejupụta site na njikọ ịkpọ òkù ma ọ bụ URL efu n'otu oge na ọwa spam na DM. 2. ** Mwakpo Injection Webhook: ** Onye na-awakpo nwetara ọwa Webhook URL (discord.com/api/webhooks/...) idei mmiri @everyone pings na scam njikọ na-enweghị mgbe ịbanye na ihe nkesa ma ọ bụ pụta na ndepụta otu. 3. ** Nkwekọrịta ihe ùgwù dị n'ime ("Server Nuke"):** Ihe ngosi nnọkọ nnọkọ (Local Storage / leveldb Token nke infostealer malware zuru) ma ọ bụ akara ngosi bot's Developer Token (Bot ...) na Administrator a napụrụ ikike, agbapụ DELETE /channels na PUT /bans API na-akpọ na ọsọ igwe.

Ntuziaka a na-enye kpọmkwem usoro mkpọchi mkpọchi mberede nke nkeji iri isii, usoro iwu kwadoro maka ịkagbu Bot Tokens tupu agbaa bot rogue, ihe nyocha nyocha nyocha, yana onye ọrụ ** Discord Trust & Safety (dis.gd** na ** Reddit Mod Nkwado ** usoro mgbake.

Mee nke a ugbu a¶

1. ** Tinye "Kwụsị ịkpọ òkù" na "kwụsịtụ DM" n'ime menu ọrụ nchekwa Discord ozugbo (na-ewe 5 sekọnd). ** 24 awa ***. Nke a na-egbochi njikọ ịkpọ òkù ọ bụla yana URL Vanity omenala gị ka ị ghara ikwe ka akaụntụ mbuso agha sonye mgbe ọ na-ekpochapụ ozi ozugbo ndị otu na otu na-achọghị.
2. ** Kpachapụ anya Administrator, Manage Channels, Manage Roles, Manage Webhooks, na Ban Members ikike site na @everyone Ọrụ NA site na ndị ọrụ / bot gị.** Mepee ** Ntọala ihe nkesa -> Ọrụ -> Ikikere ndapụta (@everyone*** -> gbadaa wee pịa ** Kpochapụ ikike ** (ma ọ bụ gbanyụọ n'ụzọ doro anya). Send Messages, Mention @everyone, @here, and All Roles, Attach Files, Embed Links, na Create Public/Private Threads). Wee pịa ọrụ ** Onye njikwa / onye nchịkwa / Bot** n'okpuru ọrụ onye nwe gị wee gbanyụọ nwa oge Administrator, Manage Channels na Ban Members ịkwụsị ọwa na-arụ ọrụ-ehichapụ nuke nwụrụ anwụ na egwu ya.
3. ** Lelee Server Settings -> Audit Log Mbụ na nzacha site Action (Delete Channel, Ban Member, Create Webhook, Update Role) iji chọpụta kpọmkwem akaụntụ rogue ma ọ bụ bot.** Echela mgbe onye nhazi ma ọ bụ bot na-eme nuke ahụ. Ndekọ ** Nyochaa ** na-egosiputa onye na-eme ihe nkiri na-eme oku API ozugbo.
4. ** Ọ bụrụ na Bot Custom na-emebi ihe nkesa ahụ, gbanwegharịa Bot Token ya na Portal Developer Discord (discord.com/developers/applications) ma ọ bụ wepụ ikike ọrụ ya tupu ịgba ma ọ bụ machibido bot ahụ.** Ọ bụrụ na bot mebie nwere Administrator ma ọ bụ Manage Server ikike, ma ọ bụ ọ bụrụ na onye nlekọta mmadụ mebiri emebi ka nọ n'ime ihe nkesa ahụ, naanị ịgba bot ahụ na-enye ohere ka edemede onye mwakpo ahụ kpọọ bot ahụ ozugbo ma ọ bụ gaa n'ihu na-agbapụ oku API ruo mgbe ewepụrụ akara ngosi ya ma ọ bụ ọrụ ya.
5. ** Ọ bụrụ na ozi spam kwuru APP ma ọ bụ BOT na-esote aha iju nke na-abụghị na listi ndị otu gị, mepee Server Settings -> Integrations -> Webhooks ma hichapụ ihe niile na-amataghị Webhooks ozugbo.** Webhook spam anaghị esi n'aka onye ọrụ na ihe nkesa gị; a na-ebugharị ya site na HTTP POST Arịrịọ maka URL Webhook agbagoro na enwere ike ịkwụsị naanị site na ihichapụ Webhook n'ime Mmekọrịta -> Webhooks (ma ọ bụ ịkagbu Manage Webhooks ikike).
6. ** Chekwaa njikọ ozi, ID onye ọrụ (18-to-19-digit Snowflake ID), na Audit Log screenshots tupu ikpochapụ ọtụtụ ọdịnaya iwu na-akwadoghị.** Ọ bụrụ na ndị na-awakpo biputere CSAM, gore, ma ọ bụ doxxing iji hazie ihe nkesa gị, lelee ** Audit Log** na-egosi ntinye oge nke onye na-awakpo na mmachibido ihe omume, detuo onye na-awakpo ahụ na-adịgide adịgide ** Discord User ID**, wee kọọ ozi site na *Right buck. Ebe nchekwa data Discord Trust & Safety na-edekọ * gị dị ka onye nhazi mkpesa kama ịbụ onye nwe ihe nkesa siri ike.

Osisi mkpebi: Ịchọpụta na ịkwụsị mwakpo obodo na-arụ ọrụ n'okpuru 60 sekọnd¶

Chọpụta nke n'ime igwe ọrụ mwakpo anọ a na-eme ugbu a wee mee usoro igbu egbu kwekọrọ n'okpuru.

flowchart TD
    RaidStart["Achọpụtara Mwakpo Sava na-arụ ọrụ, Iju Mmiri Spam, ma ọ bụ ihichapụ ọwa"] --> PauseInvites["Ntụpụ ụkwụ 1: Pịa Aha nkesa -> Ọrụ nchekwa -> Kwado 'kwụsịtụ oku' & 'kwụsịtụ DM'"]
    PauseInvites --> AuditCheck["Nzọụkwụ 2: Mepee Ntọala nkesa -> Audit Log iji mata onye na-eme ihe nkiri"]
    AuditCheck --> VectorType{"Kedu ihe ndekọ nyocha ma ọ bụ nkata egosiri?"}
    VectorType -->|"Ọtụtụ narị Akaụntụ Ọhụrụ na-esonye & Spamming Chat/DM"| JoinRaid["Mpụga JOIN RAID: Strip @ onye ọ bụla 'Zipu ozi', 'Tinye faịlụ', & 'Kwuo @ onye ọ bụla' -> welie ọkwa nkwenye ka ọ bụrụ 'Eli elu (ekwentị enwetara)' -> Kwado AutoMod Kwuo Spam Filter"]
    VectorType -->|"Ozi akpọrọ 'APP/BOT' Spamming @ onye ọ bụla, onye na-eme ihe nkiri anọghị na ndepụta ndị otu"| WebhookRaid["WEBHOOK SPAM ATTACK: Mepee Ntọala nkesa -> Njikọ -> Webhooks -> Hichapụ Webhooks niile a na-amataghị -> Nyochaa Onye Mepụtara Ha na Ndekọ Audit"]
    VectorType -->|"Akaụntụ mmadụ onye njikwa ma ọ bụ onye nchịkwa na-ehichapụ ọwa / machibido ndị ọrụ"| ModCompromised["AKWỤKWỌ NDỊ MMADỤ KWESỊRỊ: Dọrọ Mod Role N'okpuru nke gị ma ọ bụ wepụ ikike ọrụ -> Machibido akaụntụ Mod mebiri emebi -> nwee Mod Hichapụ PC butere & Tọgharịa okwuntughe"]
    VectorType -->|"Akaụntụ Bot bụ ọwa ikpochapụ oke, imepụta ọrụ ma ọ bụ machibido"| BotNuke["NUKE BOT TOKEN emebiela: Wepụ ikike ikike njikwa Bot na efu -> Tọgharịa Bot Token na Portal Onye Mmepụta (discord.com/developers) -> Kick/Ban Bot & Kagbuo OAuth2"]
    JoinRaid --> EvidenceClean["Kwụpụ 3: Kpesa ozi ọ bụla na-ezighi ezi site na mkpesa In-App -> Gbaa mkpochapụ / mgbake ozi buru ibu."]
    WebhookRaid --> EvidenceClean
    ModCompromised --> EvidenceClean
    BotNuke --> EvidenceClean

Akụkụ 1: Usoro mgbochi mkpọchi mberede nke nkeji iri isii (ịkwụsị ọbara ọgbụgba)¶

Mgbe mwakpo ma ọ bụ ihe nkesa malitere, ndị na-ahazi mmadụ enweghị ike iji aka machibido akaụntụ ngwa ngwa karịa Python ma ọ bụ script na-akpaghị aka na-agba arịrịọ na-aga n'ihu megide Discord REST API (50 requests per second). Ị ga-ebipụ ike API onye mwakpo na ọkwa nhazi nkesa.

1. Otu esi ifriizi onye ọrụ-Bot Join Raid na 15 sekọnd¶

Ọ bụrụ na ọtụtụ narị akaụntụ tụfuo na-esonye na sava gị yana ọwa ide mmiri ma ọ bụ DM na-eji adịgboroja na-eme ka ndị otu gị. "Free Nitro" ma ọ bụ "Crypto Airdrop" njikọ phishing: 1. ** kpalite "Ọrụ nchekwa" (Pause Invites + Pause DMs):** - Pịa ndọpụta ** Aha nkesa * (n'elu aka ekpe) -> ** Ọrụ nchekwa . - Lelee ** kwụsịtụ ịkpọ òkù ** (nlaghachi "Invites are currently paused for this server" na njikọ mpụga ọ bụla ma ọ bụ Vanity URL pịa) na ** kwụsịtụ DMs ** (na-egbochi ndị na-abụghị ndị enyi na sava ahụ ibido eri ozi ozugbo). 2. ** welie ọkwa nkwenye ruo nke kachasị (Highest - Phone Verified): - Gaa na ** Ntọala nkesa -> Ntọala nchekwa -> Ọkwa nkwenye *** -> pịa ** Gbanwee *** -> họrọ ** Nke kachasị elu (Ekwesịrị ịnwe ekwentị enwetara na akaụntụ Discord ha). - Ọtụtụ botnets wakporo akpaghị aka na-adabere na akara ngosi ozi-e dị ọnụ ala.$0.01 per token) karịa akaụntụ SMS kwadoro. Ịtụgharị na ** Kachasị Elu *** na-egbochi ozugbo bot token enyochaghị n'ime sava ahụ izipu ozi ma ọ bụ ndị otu izipu ozi. 3. ** Mkpọchi @everyone Ikikere ọwa zuru ụwa ọnụ: - Gaa na ** Ntọala ihe nkesa -> Ọrụ -> Ikikere ndapụta (@everyone). - Gbanyụọ: - Send Messages na Send Messages in Threads - Create Public Threads na Create Private Threads - Attach Files na Embed Links - Add Reactions na Use External Emoji / Stickers - Mention @everyone, @here, and All Roles - Nleba anya dị mkpa maka ikike ọwa na-ewepụ: Ọ bụrụ na otu ọwa (dịka #general ma ọ bụ #chat) nwere ** Green Checkmark (Allow gụgharịa na @everyone ọrụ maka Send Messages n'ime ** Dezie ọwa -> Ikikere , ịgbanwe ọrụ ntọala sava zuru ụwa ọnụ agaghị emechi ọwa ahụ. Maka ọwa ọ bụla ka na-eji spam na-agagharị, pịa ** Gear Icon (Dezie ọwa) -> Ikikere -> @everyone na setịpụ Send Messages na ** Red X (Deny** ma ọ bụ mee ka ** Slowmode (6 hours)**.

2. Otu esi akwụsị ọgụ "Webhook Spam" na 15 sekọnd¶

Ọtụtụ ndị nwe ihe nkesa na-atụ ụjọ na-eche na emebiela ihe nkesa ha niile n'ihi na onye ọrụ aha ya bụ "Server Nuke Syndicate" ya na APP (na mbụ BOT) baajị na-akụ @everyone 5 ugboro n'otu sekọnd n'ime #announcements na enweghị ike ịpị aka nri ma machibido ya. - ** Ihe kpatara na ị nweghị ike machibido Webhook: *** A Discord Webhook bụ njedebe HTTP dị mfe (https://discord.com/api/webhooks/{webhook.id}/{webhook.token}). Onye ọ bụla nwetara URL ahụ (ma ọ bụ n'ihi na onye nhazi gosipụtara ya na mberede na mgbasa ozi ndụ, nyefee ya na ebe nchekwa GitHub ọha, ma ọ bụ nwee akaụntụ mod mebie mebie otu) nwere ike izipu ụgwọ JSON na-akparaghị ókè na ọwa ahụ na-enweghị ọbụna onye so na sava Discord gị. - Otu esi egbu ya ozugbo: 1. Mepee ** Ntọala nkesa -> Ngwakọta -> nko webụ**. 2. Lelee ndepụta nke Webhooks wee hụ ọwa nke ọ bụla na-atụ aka. 3. Pịa na Webhook ọ bụla a na-amataghị wee pịa ** Hichapụ Webhook ** (ma ọ bụ pịa ** Detuo URL Webhook ** maka ndekọ ndekọ mbụ, wee * Hichapụ Webhook**). Ihe spam na-akwụsị miliịsekọnd nke Webhook ehichapụrụ. 4. Mepee ozugbo ** Ntọala ihe nkesa -> Ndekọ nyocha -> nyocha site na omume: Create Webhook** ịhụ * nke * onye nhazi ma ọ bụ akaụntụ bot mepụtara Webhook ahụ. Ọ bụrụ na akaụntụ onye njikwa mebere Webhook n'elekere 3:00 nke ụtụtụ na-amaghị ha, ** ihe ngosi nnọkọ Discord nke onye nhazi ahụ na-emebi ***: wepụ ọrụ ha wee gbapụ akaụntụ ha ozugbo.

Nkebi 2: Ịkwụsị "Nuke Server" nke dị n'ime (Onye Nhazi Na-emebi Mma vs. Compromised Bot Token)¶

A "Server Nuke" na-eme mgbe onye na-awakpo mebie akaụntụ ma ọ bụ bot nke na-ejide ikike nchịkwa dị elu (Administrator, Manage Channels, Manage Roles, Ban Members, Manage Webhooks) ma na-eme edemede mbibi akpaaka (Nuker). N'ime 10 sekọnd, script loops site na ọwa ọ bụla ID ka ihichapụ niile ederede na ọwa olu, na-emepụta 250 ọhụrụ ọwa aha. #nuked-by-xxx, na-ehichapụ ọrụ sava niile, wee gbaa arịrịọ mmachibido iwu megide ndepụta ndị otu.

1. Usoro Ọchịchị Ọchịchị Discord (Ihe kpatara na ị nwere ike ma ọ bụ enweghị ike ịkwụsị onye nchịkwa rogue)¶

Esemokwu na-amanye kwụ ọtọ ** Ọrụ Ọchịchị ** n'ime ** Ntọala nkesa -> Ọrụ *: - ** Onye nwe ihe nkesa (onye na-ejide okpueze) *** na-anọdụ n'elu ọrụ ọ bụla na sava ahụ ma nwee ike wepụ ma ọ bụ machibido mmadụ ma ọ bụ bot ọ bụla n'agbanyeghị usoro ọrụ. - ** Onye nchịkwa ọ bụla na-abụghị onye nwe nwere ike gbanwee, kewapụ, ma ọ bụ machibido ndị ọrụ na bots ndị ọrụ ha kacha elu nọ ọdụ ** n'okpuru anụ ahụ ** ọrụ ha kachasị elu na ndepụta ** Ntọala sava -> Ọrụ . - Ọ bụrụ na edobere ọrụ jikwaa bot na #2 na lti ọrụ yana ndị isi nchịkwa ntụkwasị obi gị na-anọdụ ala #3, **Ndị isi nchịkwa gị enweị ike ịkụ bot ma ọ bụ dezie ọrụ ya mgbe gị (Onye nwe ihe nkesa) nọ n'ụra.

2. Usoro ziri ezi iji kpochapụ Bot Nuke mebiri emebi¶

Ọ bụrụ na ** Audit Log *** na-egosi akaụntụ bot (ma bot sava omenala gị ma ọ bụ bot nke ndị ọzọ mebiri) na-ehichapụ ọwa ma ọ bụ machibido ndị otu, soro usoro usoro atọ a.

3. Kedu ka ndị na-eme nhazi ga-esi zuo ihe ngosi Discord ha (na ihe kpatara 2FA anaghị akwụsị ya)¶

Kedu ihe kpatara onye njikwa ntụkwasị obi kacha ntụkwasị obi, onye nwere ** SMS na Authenticator App 2FA** nyere aka na akaụntụ Discord ha, malite nuking ihe nkesa na mberede na 4:00 AM? - ** Otu akara njirimara Discord si arụ ọrụ:** Onye ahịa desktọpụ Discord (wuru na Electron/Chromium) yana ihe nchọgharị weebụ na-echekwa akara njirimara onye ọrụ na-adịgide adịgide n'ime nchekwa ezoro ezo mpaghara (%AppData%\discord\Local Storage\leveldb na Windows). - ** 3 Token - Vectors izu ohi:** 1. ** Egwuregwu adịgboroja beta / nkwenye Malware (Lumma, RedLine, Blank Grabber, Emerald Stealer):** Otu wakporo DM onye nhazi gị na-arịọ ha ka ha nwalee egwuregwu indie ma ọ bụ nyochaa mkpesa mmachibido iwu .zip faịlụ. malware ahụ na-ewepụta akara ngosi Discord decrypted nke onye nhazi ma na-agbanwekarị Javascript mpaghara onye ahịa Discord.core.asar / index.js injection) nke mere na ọbụlagodi mgbe onye nhazi gbanwere paswọọdụ ha, ngwa Discord trojanized na-ezigaghachi akara * ọhụrụ * na webụ webhook onye mwakpo ahụ ozugbo. 2. ** "Bookmarklet" ọjọọ ma ọ bụ onye nrụpụta (Console)F12) Social Engineering:** Ndị scammers na-aghọgbu ndị ọrụ ka ha dọkpụrụ ibe edokọbara "Verify Account" na ihe nchọgharị ha ma ọ bụ mado snippet n'ime ụlọ ọrụ ahụ. Ctrl + Shift + I console, nke na-agụ akara ngosi ndụ ozugbo site na ebe nchekwa. 3. ** Nyochaa koodu QR adịgboroja "Captcha nkwenye Bot" (Wick / DoubleCounter Clones):** Ndị na-awakpo na-ezipụ ozi nkwenye nke ihe nkesa adịgboroja na-arịọ onye nhazi ka "Jiri Discord Mobile App gị nyochaa koodu QR a iji chọpụta na ị bụ mmadụ." Ịnyocha koodu QR nbanye Discord na ngwa mkpanaaka na-enye ohere nbanye nbanye akaụntụ zuru ezu na ihe nchọgharị desktọpụ onye mwakpo, na-agafe paswọọdụ na 2FA kpamkpam.

Akụkụ 3: Obodo Reddit (Subreddit) wakporo na mebie onye nhazi mgbake¶

Ọ bụrụ na ị na-ahazi obodo ** Reddit (r/YourSubreddit)** wee chọpụta na akaụntụ onye njikwa emebiela ewepụla CSS/Wiki, machibido ọtụtụ narị ndị ọrụ iwu, jiri njikọ aghụghọ dochie nkọwa subreddit, ma ọ bụ debe subreddit na ** Nkeonwe / amachibidoro **, ma ọ bụ na ọtụtụ puku bots ndị na-ahazi brigade na-ejupụta n'ahịrị:

1. Mkpọchi Subreddit ozugbo & Mwepụ Onye Nhazi Rogue¶

1. ** Lelee usoro nhazi onye nhazi (Mod Tools -> Moderators):**
2. Dị ka Discord, Reddit na-amanye usoro nlekọta siri ike ** nke dị n'elu ** na ndepụta Moderators dabere na ụbọchị agbakwunyere onye nhazi ọ bụla.
3. Onye njikwa ọ bụla nwere Everything (Ikikere zuru oke) ọkọlọtọ nwere ike wepu ma ọ bụ wepụ ikike n'aka onye nhazi ọ bụla edepụtara ** n'okpuru ya na ibe, ** mana enweghị ike imetụ onye nhazi ọ bụla edepụtara n'elu ha aka.
4. Ọ bụrụ na edepụta onye nrụzi emebi emebi ** n'okpuru *** gị: mepee ozugbo ** Ngwaọrụ Mod -> Ndị nhazi -> Editable**, pịa akara ngosi pensụl n'akụkụ onye nrụzi mebiri emebi, wepụ ya Everything, wee pịa Wepụ.
5. ** Nyochaa Mod Log (https://www.reddit.com/r/YOURSUBREDDIT/about/log):**
6. Jiri aha njirimara onye nrụzi emebi emebi ** debanye aha nnabata **Moderator dropdown) na site ** Action *** (banuser, wikirevise, editsettings, removelink, removemoderator).
7. ** Tinye Reddit "njikwa igwe mmadụ" na "ihe nzacha nchekwa" n'oge mwakpo ndị agha mpụga:**
8. Mepee ** Ngwa Mod -> Ihe nzacha nchekwa -> Njikwa igwe mmadụ ***.
9. Tọọ ** ọkwa ọkwa *** na ** ọkwa nkwupụta *** ka ** Kachasị / siri ike ** (na-ejide nkwupụta na ozi sitere n'aka ndị ọrụ nwere karma subreddit na-adịghị mma, akaụntụ ọhụrụ na ndị ọrụ na-esonyebeghị obodo tupu mwakpo ahụ amalite).
10. Kwado ihe nzacha ** mmanye egwu *** na ** mmachibido ihichapụ ihe nzacha ** (nke na-eji akara mkpịsị aka ngwaọrụ ime Reddit na telemetry IP iji wepu ozi na akpaaka na akaụntụ alt nke ndị ọgba aghara amachibidoro).
11. ** Tinye ngwa ngwa AutoModerator Iwu mkpọchi ihe mberede:**
12. Mepee ** Ngwa Ngwa -> Automod (wiki/config/automoderator*** ma mado ọnụ ụzọ mberede ngwa ngwa a n'elu iji jide ma ọ bụ wepu posts / nkwupụta niile na akaụntụ ndị na-erubeghị ụbọchị 30 ma ọ bụ nwere karma subreddit dị ala:

    ---
    # EMERGENCY RAID LOCKDOWN RULE
    type: any
    author:
        account_age: "< 30 days"
        combined_subreddit_karma: "< 10"
        satisfy_any_threshold: true
    action: filter
    action_reason: "Emergency Raid Lockdown: New account or low subreddit karma [{{match}}]"
    ---
    

2. Ihe ị ga-eme ma ọ bụrụ na emebiela "Onye njikwa kacha elu" nke Subreddit gị (ma wepụrụ ndị otu Mod)¶

Ọ bụrụ na ezuru akaụntụ #1 Top Moderator dị na subreddit gị (ma ọ bụ zụta ya site n'aka ndị na-eme spam na-emekọ ihe n'otu ntabi anya) wee wepụ ndị otu nrụzigharị ziri ezi: 1. ** Anwala ịnwa brigade subreddit nke gị ezutere.** 2. Mee ka onye nzizi wepụrụ nke abụọ kachasị elu ziga Modmail ozugbo na r/ModSupport (https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Compromised+Top+Moderator+Emergency+Rollback). 3. ** Gịnị kpatara ya r/ModSupport Modmail bụ ọwa Escalation gọọmentị:** N'adịghị ka ọkwa ọhaneze na r/redditrequest (nke bụ maka subreddits gbahapụrụ), **r/ModSupport Modmail bụ Reddit Community Admins na-arụ ọrụ ozugbo nwere ngwa n'ime ** Mod Action Rollback Tool ***. 4. Nye: - Aha subreddit kpọmkwem (r/...); - Aha njirimara nke Top Moderator mebiri emebi (u/...); - Kpọmkwem UTC timestamp mgbe emechara ndị otu mod ziri ezi ma mebie wiki/sidebar/ntụtụ; - nseta ihuenyo nke ọkwa mwepụ Modmail gị. 5. Ihe Reddit Admins weghachi: Reddit Admins kpochie akaụntụ Top Moderator mebiri emebi, weghachi mwepu onye nhazi niile, mmachibido iwu, ndezi wiki, na nhichapụ biputere n'oge mpio mmebi ahụ, wee weghachi onye nhazi kachasị dị ndụ na nke ahụ. #1 Top Moderator oche.

Part 4: Post-Raid Iweghachite: Enwere ike ihichapụ ọwa Discord na ndị ọrụ amachibidoro Mass?¶

Ozugbo a kwụsịrị mwakpo ahụ wee wepụ bot/moderator rogue, ndị nwe ihe nkesa na-eche ihu n'eziokwu arụmọrụ kachasị sie ike nke ụlọ ọrụ Discord:

1. Discord na-akwado weghachi ọwa ehichapụ ma ọ bụ ozi mgbe Nuke Server gasịrị?¶

• ** Eziokwu Teknụzụ siri ike: ** N'adịghị ka YouTube (nke na-edobe blọgụ vidiyo ehichapụ na nchekwa oyi ruo ụbọchị 14 ruo 30) ma ọ bụ Reddit (ebe ezoro ezo "wepụrụ" naanị yana Admins nwere ike weghachite Mod Log), ** mgbe ehichapụ ọwa na Discord (DELETE /channels/{id}), Discord's Cassandra/ScyllaDB nchekwa data na-ehichapụ ihe ọwa na ahịrị ozi niile dị n'ime ya kpamkpam.
• ** Discord Trust & Safety enweghị ike iweghachi ọwa ehichapụ, ọrụ ehichapụ, ma ọ bụ akụkọ ozi ehichapụrụ mgbe onye nchịkwa mebie ma ọ bụ bot nukes sava.
• ** Kedu ihe ntụkwasị obi Discord na nchekwa nwere ike iweghachi:** Ọ bụrụ na Discord Trust & Safety kwụsịrị ihe nkesa gị niile** n'ihi na ndị omempụ na-emebi ọdịnaya ọjọọ iji mebie gị, ma ọ bụ ọ bụrụ na e jidere ** Akaụntụ Onye nwe ihe nkesa ** ma nyefee onye na-awakpo ihe nkesa nkesa (Transfer Ownership) na akaụntụ nke ha, na-ede akwụkwọ ** Akaụntụ mebiri emebi / Tiketi nwe ihe nkesa na https://dis.gd/request** na-enye ndị ọrụ Discord ohere ibugharị ** Okpueze Onye nkesa ** laghachi na akaụntụ gị enwetara.

2. Otu esi ewughachi ọwa & ọrụ yana ndị otu amachibidoro iwu ngwa ngwa¶

1. Iwughachi ọwa & Ọrụ (Ụdị ihe nkesa na Bots ndabere):
2. Ọ bụrụ na ị mepụtaburu nwa afọ ** Discord Server Template (Server Settings -> Server Template** ma ọ bụ were foto nhazi ya na bot ndabere ama ama (dị ka Xenon Bot, nke na-akwado ndị isi ọwa, agba ọrụ na ikike na-edegharị, ọ bụ ezie na ọ bụghị ozi onye ọrụ akụkọ ihe mere eme), ị nwere ike iweghachi ọwa gị na ọkpụkpụ ọrụ n'ime nkeji 2.
3. ** Mgbochi uka na-atụgharị ọtụtụ site na ndekọ nyocha:**
4. Ọ bụrụ na bot mebiri emebi machibido ndị otu 500 ziri ezi n'oge nuke nkeji 2, mepee ** Ntọala ihe nkesa -> Ndekọ nyocha -> Nyocha site na omume: Ban Member -> Nyocha site n'aka onye ọrụ: [The Compromised Bot/Mod]** .
5. Ntinye mmachibido iwu ọ bụla na Ndekọ Audit na-egosi kpọmkwem NJ onye ọrụ yana stampụ oge nke onye ahụ amachibidoro n'ime windo nkeji 2 ahụ. Ị nwere ike iji aka machibido ha iwu site na ** Ntọala nkesa -> Mmachibido iwu **, ma ọ bụ jiri iwu bot ntụkwasị obi ntụkwasị obi (dịka Carl-bot, Dyno, ma ọ bụ ọgụgụ nhazi nhazi 15 dị mfe). guild.audit_logs(action=discord.AuditLogAction.ban) yochaa nke ọma ka entry.user.id == COMPROMISED_ACTOR_ID) ịkpọ na-akpaghị aka guild.unban(entry.target) na onye ọ bụla ziri ezi nke onye omempụ ahụ machiri.
6. ** Na-ekpochapụ puku kwuru puku ozi Raid na-enweghị ihichapụ ọwa:**
7. Ọ bụrụ na idei mmiri juputara ọwa 2,000 ozi spam wakporo, ** ehichapụla ma mechie ọwa ahụ *** belụsọ na ịchọrọ idafu ozi niile ziri ezi, ozi kpara akpa na njikọ webhook.
8. Kama, jiri Discord arụnyere n'ime ** Right-Click Raider -> Ban -> Hichapụ Akụkọ Ozi: Previous 24 Hours (ma ọ bụ Previous 7 Days***, nke na-ehichapụ ozi ọ bụla onye ohi ahụ zipụrụ n'ofe ọwa ọ bụla na sava n'otu oge.
9. Maka spam ọtụtụ akaụntụ, jiri bot's moderation akwadoro /purge iwu (up to 100 to 1,000 messages under 14 days old site na Discord's Bulk Delete API endpoint).

Nkebi 5: Esemokwu Na-adịgide adịgide & Ndepụta Nyocha nke Raid-Hardening Community¶

Ozugbo ihe nkesa gị kwụsiri ike, hazie ihe nchekwa nchekwa ụlọ isii na-efu efu ** yabụ na botnet mpụga ma ọ bụ otu PC onye njikwa ọrịa nwere ike imebi ihe nkesa gị ọzọ:

1. Kwado Discord "AutoMod" nzacha ala ala (Server Settings -> Safety Setup -> AutoMod)¶

Nwa afọ Discord AutoMod na-egbochi ma gbochie ibu ọrụ mbuso agha * tupu ewepụta ozi ahụ na nkata ma ọ bụ kpalite ọkwa ntinye na ekwentị ndị otu: - ** Gbochie ịkpọ spam:** Tọọ ** oke oke** na 5 (ma ọ bụ 3) aha pụrụ iche n'otu ozi, wee họrọ Mgbochi ozi + Onye otu oge gafechara (1 Hour ma ọ bụ 24 Hours) + Zipụ ọkwa. Nke a na-eme ka ọ bụrụ ihe na-agaghị ekwe omume n'anụ ahụ onye wakporo ndị ọrụ ping 30 n'otu ozi. - ** Gbochie ọdịnaya spam na-enyo enyo na okwu ndị a na-akpọkarị:** Gbanwee na ndepụta abụọ arụnyere n'ime ya. - Isiokwu omenala & Iwu Regex maka ojoro: Tinye iwu AutoMod omenala na-egbochi ụkpụrụ ojoro nkịtị: - Okwu: *discord.gift*, *steamcommunity.com/gift*, *free nitro*, *airdrop claim*, *t.me/*, *whatsapp.com*. - Ụkpụrụ Regex na-ejide njikọ ịkpọ òkù ezoro ezo: (?:https?://)?(?:www\.)?(?:discord\.(?:gg|io|me|li)|discordapp\.com/invite)/[a-zA-Z0-9-]+ (na-ahapụ ọrụ ndị ọrụ gị).

2. Kwado "Chọọ 2FA maka Omume Nhazi" (Server Settings -> Safety Setup -> Permissions)¶

• Ịgbanwuo ** Ihe achọrọ 2FA nke sava-Wide ** na-amanye Discord API iji chọpụta na onye ọrụ ọ bụla na-anwa ihichapụ ọwa, machibido ndị otu, jikwaa ọrụ, ma ọ bụ jikwaa webhooks nwere nkwenye ihe abụọ na-arụ ọrụ na akaụntụ ha.
• ** Nke kachasị mkpa, yipụ ihe ahụ Administrator ikike sitere n'aka ọrụ nchịkwa mmadụ niile na 99% nke Bots:**
• ** Iwu ọla edo nke nchekwa discord: ** fọrọ nke nta ka ọ bụrụ ** enweghị onye njikwa mmadụ yana enweghị ebumnuche ebumnuche bot mgbe ọ bụla chọrọ Administrator gbanye gbanye.**
• Gịnị kpatara? Nke Administrator ịgbanwee onyinye zuru oke n'ofe mkpọchi ọwa ọ bụla, enyem aka Manage Webhooks, onyinye Manage Server, wee hapụ mod mebie ihe nkesa ahụ n'ime sekọnd 3.
• Kama, nye ndị nhazi mmadụ gị ** naanị *** Kick Members, Ban Members, Moderate Members (Timeout), na Manage Messages. Nye ha ikike ** efu ** Delete Channels, Manage Roles, ma ọ bụ Manage Webhooks. Ọ bụrụ na PC onye njikwa ihe butere ọrịa token-ohi, onye na-awakpo ** enweghị ike ihichapụ otu ọwa na enweghị ike imepụta otu nko webụ.

3. Mejuputa "Bot Quarantine & Anti-Nuke Rate Limiting"¶

• ** Nyochaa Server Settings -> Integrations Kwa ọnwa:** Wepụ bot egwu ọ bụla ejighi ya, obere egwuregwu bot, ma ọ bụ bot nkwenye ị gbakwunyere afọ gara aga. N'ọtụtụ nnukwu mwakpo akụkọ ihe mere eme, ndị ọchụnta ego mebiri ihe nkesa igwe ojii bot nke ndị ọzọ gbahapụrụ agbahapụ. Administrator ọrụ iji wakpo sava 10,000 n'otu oge.
• **Enyela onyinye Administrator Mgbe ị na-akpọ Bot: *** Mgbe ị na-enye ikike ikike site na URL OAuth2 (discord.com/oauth2/authorize?...&permissions=8), mara na permissions=8 bụ bitfield zuru ezu Administrator. Wepu aha Administrator na ngwa ngwa OAuth wee nye naanị ikike nke bot chọrọ.
• ** Nhọrọ Anti-Nuke Watchdog:** Na nnukwu sava (10,000+ members), tinye nkwenye * Anti-Nuke Rate-Limiter Bot* (dị ka Wick) n'isi ** n'elu ọkwa ọkwa gị (#1 Position ziri ezi n'okpuru Onye nwe nkesa) *** ahazi ya ka ọ bụrụ na onye nhazi ọ bụla ma ọ bụ bot na-ehichapụ ihe karịrị ọwa ** 2 n'ime sekọnd 60 ma ọ bụ machibido ndị ọrụ ** 5 n'ime sekọnd 60, ndị na-ahụ maka ihe na-eme ihe na-eme ka ọ bụrụ efu na 200 milliseconds.

Nọmba mberede mpaghara na ụkpụrụ ụlọ ọrụ¶

Mgbe mwakpo obodo gafere n'ime ** mpụ cyber jọgburu onwe ya, ịpụnara mmadụ ihe, iyi egwu egwu, ma ọ bụ nkesa ihe mmetọ ụmụaka.CSAM***, soro usoro mkpesa gọọmentị ndị a ozugbo:

• Nkọkọ CSAM zuru ụwa ọnụ (mmanyere iwu): Budata, chekwaa ma ọ bụ bugharịa nseta ihuenyo nwere CSAM. Jiri Discord's in-app ** Ozi mkpesa -> Mmebi onwe onye ma ọ bụ ihe mmetọ mmekọ nwoke na nwanyị ** (nke na-ebunye hash mgbakwunye akụkụ nkesa yana IP na-ebugo ozugbo na ** National Center maka ụmụaka na-efu efu na erigbu, NCMEC CyberTipline**), ma ọ bụ kwuo na report.cybertip.org (1-800-843-5678* na US ma ọ bụ ** Internet Watch Foundation (iwf.org.uk*** na UK/EU. Lee ejiji ụmụaka, kọntaktị anụ anụ, na mkpesa NCMEC.
• United States: Kpesa mpụ mpụ, iyi egwu egwu, ma ọ bụ ọgụ DDoS na FBI Internet Complaint Centeric3.gov). Ọ bụrụ na etinyere onye nhazi ihe ma yie ya egwu izipu ihe mberede adịgboroja ("Swatting"), kpọọ ndị uwe ojii mpaghara gị ** oche izipu na-abụghị ihe mberede ** ozugbo ka idobe Swatting / Premise Alert Note na adreesị gị. Maka ihe egwu anụ ahụ ozugbo, kpọọ 911.
• Canada: Kpesa mpụ cyber na mwakpo ọdịnaya iwu na-akwadoghị na Centre Canada maka Nchekwa ụmụaka.cybertip.ca, ụlọ ọrụ mgbochi aghụghọ nke Canada (Canada)1-888-495-8501, mọ bụ ndị uwe ojii mpaghara (911 na mberede).
• United Kingdom: Kpesa iji kọmputa eme ihe na ịpụnara mmadụ ihe n'ịntanetị na ** Action Fraud (actionfraud.police.uk, 0300 123 2040*** ma kọọ akụkọ mmebi iwu na-akwadoghị na Internet Watch Foundation (iwf.org.uk* ma ọ bụ ** CEO (ceop.police.uk)**. Nọmba mberede: 999 ma ọ bụ 112 (Ndị uwe ojii na-abụghị ihe mberede: 101).
• European Union: Kpesa okwu ịkpọasị iwu na-akwadoghị, ọdịnaya ndị na-eyi ọha egwu, ma ọ bụ mwakpo CSAM site na mba gị INHOPE (inhope.org* hotline na ngalaba ndị uwe ojii cybercrime n'okpuru ** EU Digital Services Act (DSA)**. Nọmba mberede: 112.
• Australia na New Zealand: N'Australia, kọọrọ onye ọrụ ** eSafety Commissioner maka mmetọ ịntanetị siri ike ma ọ bụ ihe mwakpo iwu na-akwadoghị.esafety.gov.au*** na ReportCyber (cyber.gov.au, 1300 292 371). Na New Zealand, kọọrọ ya Netsafe (netsafe.org.nz, 0508 638 723). Nọmba mberede: 000 (Australia), 111 (New Zealand).
• India na Asia-Pacific: N'India, tinye akwụkwọ mkpesa ozugbo na ** National Cyber Crime Reporting Portal.cybercrime.gov.in, eriri enyemaka 1930)**. Hụ akwụkwọ ndekọ aha anyị na nọmba mberede.

Ajụjụ a na-ajụkarị¶

Gịnị mere @everyone spam pings ka na-apụta mgbe m machibidoro ndị omempụ ma kpọchie ya @everyone ikike?¶

Mgbe ozi spam na-aga n'ihu na-awụba na ọwa nwere **`APP`** ma ọ bụ **`BOT`** mkpado n'akụkụ aha njirimara ma ị nweghị ike ịpị onye ọrụ aka nri ka amachibido ha, onye na-awakpo ahụ na-eji ** Discord Webhook ** kama akaụntụ onye ọrụ. Webhooks anaghị apụta na ndetu ndị otu nkesa gị wee leghara ya anya `@everyone` ọrụ izipu-ozi mmachi. Mepee ** Ntọala nkesa -> Njikọ -> Webhooks **, chọta Webhook na-atụ aka na ọwa emetụtara, wee pịa ** Hichapụ Webhook **. E mechaa, lelee **Ntọala ihe nkesa -> Audit Log** nke emechara `Create Webhook` ịhụ onye nhazi ma ọ bụ bot kere ya.

Ọ bụrụ na m gbaa ma ọ bụ machibido bot emebi emebi n'oge nuke nkesa, kedu ka ọ ga-esi sonye n'onwe ya?¶

Bot enweghị ike ịkpọghachi onwe ya n'onwe ya, ** mana ọ bụrụ na onye mwakpo ahụ mebiela akara nnọkọ Discord nke mmadụ (ma ọ bụ nye ya). `Manage Server` / `Administrator` n'ọrụ nke abụọ zoro ezo mgbe bot nwere njikwa), edemede onye mwakpo ahụ na-eji akara mmadụ ahụ nyeghachi URL nke bot's OAuth2 òkù (`permissions=8`) nkeji nke abụọ mgbe ị gbachara ya. Site na iwepu ikike ọrụ bot na efu, na-atụgharị Bot Token n'ime `discord.com/developers/applications`, na nyochaa ** Audit Log *** maka ọrụ akwadoghị enyere ndị otu mmadụ, ị wepụrụ ma bot na vector nnabata ọzọ.

Nkwado Discord nwere ike weghachite ihe nkesa m ma weghachite ọwa m ehichapụ ma ọ bụrụ na onye na-agba ọsọ nupụrụ ya?¶

Mba. N'adịghị ka Reddit ma ọ bụ YouTube, Discord anaghị ejide foto nke ọwa ehichapụ, ọrụ ehichapụ, ma ọ bụ ozi ehichapụ na sava nchekwa data ya. Otu oge a `DELETE /channels/{id}` A na-eme arịrịọ API site na njide akaụntụ `Manage Channels` ma ọ bụ `Administrator` ikike, ọwa ndị ahụ na akụkọ ozi ha na-ehichapụ kpamkpam. Agbanyeghị, ọ bụrụ na onye ọchụnta ego bufee ** Nwe nke ihe nkesa ** pụọ na akaụntụ gị mebiri emebi, ma ọ bụ ọ bụrụ na ntụkwasị obi & Safety nwere nkwarụ nke sava gị n'ụzọ ụgha n'oge mwakpo a na-awakpo, na-enyefe tiketi na `dis.gd/request` n'okpuru ** Akaụntụ / Akaụntụ Hacked / Onye nwe nkesa ** na-enye nkwado Discord iweghachi gị okpueze Onye nwe nkesa.

Onye infostealer weghaara akaụntụ onye njikwa ma kechie ihe nkesa anyị. Ọ dị mma ịmegharị ha ka ha gbanwee paswọọdụ ha?¶

Eweghachila ikike onye nhazi ikike n'aka onye ọrụ emejọrọ naanị n'ihi na ha gbanwere paswọọdụ ha n'otu kọmputa ahụ. Ndị na-ezu ohi Discord Modern`Lumma`, `Blank Grabber`, `RedLine`) gbanye ibu Javascript na-adịgide adịgide ozugbo n'ime ngwa desktọpụ Discord `index.js` / `core.asar` faịlụ na `%AppData%\discord`. Ozugbo onye nhazi ahụ batara na PC ahụ na-ehichabeghị, script etinyere na-ezu ohi akara ọhụrụ wee zighachi ya na onye na-agba ọsọ. Rịọ onye nhazi ka ọ rụọ nrụnye USB dị ọcha nke Windows tupu inye ha ọrụ ọzọ.

Kedu otu m ga-esi chebe ihe nkesa m pụọ na ojoro "Nkwenye koodu QR adịgboroja" nke na-apụnara ndị nhazi na ndị otu?¶

Kụziere ndị ọrụ gị na ndị obodo na ** enweghị bot nkwenye Discord ziri ezi (`Wick`, `DoubleCounter`, `Pandez`, `Sledgehammer`) ga-ajụ gị ka ị nyochaa koodu QR site na iji igwefoto ngwa mkpanaaka Discord.** Ihe nyocha koodu QR arụnyere n'ime ngwa ekwentị Discord dị naanị ịbanye na kọmpụta desktọpụ ọhụrụ n'ime akaụntụ Discord gị. Zụlite ndị nhazi ka ha gbanyụọ DM na-abata site na ndị na-abụghị ndị enyi n'okpuru ** Ntọala onye ọrụ -> Ọdịnaya & Ọhammadụ -> Ikikere Ọhammadụ** na enyochala koodu QR ma ọ bụ mee ihe `.exe`/`.zip` ezigara faịlụ na DM.

Ntuziaka emetụtara¶

• Social media akaụntụ weghara na hacking
• Na-akọ ọdịnaya nke iwu akwadoghị na emerụ ahụ n'ịntanetị
• Ịkwado ụmụaka, ịkpọtụrụ ndị na-eri anụ, sextortion nke ụmụaka, na mkpesa NCMEC
• Mmaja ọnlaịnụ, doxxing, na cyberbullying
• Ọwa Onye Okike ji ndụ iyi egwu ojoro crypto tọọrọ
• Nọmba mberede

Isi mmalite na nduzi ọchịchị¶

• ** Discord Trust & Safety and Safety Center (discord.com/safety): *** * Chebe ihe nkesa gị na mbuso agha (Safety Setup, AutoMod, Raid Protection, na Security Actions: kwụsịtụ ịkpọ oku / kwụsịtụ DM)* na Ikikere ndị isi na nkwenye ihe abụọ maka ndị nhazi.
• ** Akwụkwọ onye nrụpụta discord (discord.com/developers/docs): *** * OAuth2 Bot Ikike Oke, Ọkọlọtọ Ikikere Bitwise (Administrator = 0x8), Nchekwa Webhook, na mwepu Token*.
• ** Enyemaka Reddit & Nkwado Onye Nhazi (support.reddithelp.com / r/ModSupport):** * Njikwa igwe mmadụ nke Subreddit, mmachibido ihe nzacha ọpụpụ, Nhazi Mberede AutoModerator, yana Usoro mweghachi nke mebie *.
• Cybersecurity and Infrastructure Security Agency (CISA) & National Cyber Security Center (NCSC): * Mbelata Ozi-Stealer Malware, Ngwa Ngwa Electronasar imebi), na OAuth/Session Token Hijacking*.
• ** National Center maka ụmụaka na-efu efu na erigbu (NCMEC) & Internet Watch Foundation (IWF): *** * Usoro mkpesa amanyere iwu maka ọdịnaya iwu na-akwadoghị yana ihe omume mwepu nkesa.