Serveri ya Discord canke Igitero c'Umuryango: Ikimenyetso ca Bot, Webhook Spam, n'Igenzura-Igitabo co Gusubirana¶

Kuvyuka gushika ku bihumbi vy’abantu . @everyone imenyekanisha pings no kumenya ko Server yawe y'umuryango wa Discord, umugwi w'imikino, canke subreddit iri munsi y'igitero gikora igitero gihujwe canke "server nuke" yihuta cane. Mu masegonda 30 gushika kuri 90, konti y’umuyobozi yashizwe mu kaga, ikimenyetso ca bot cafashwe, canke webhook yasohotse birashobora gukuraho imirongo myinshi, guhagarika abantu benshi ibihumbi vy’abanyamuryango bemewe, gusesagura server yawe n’ibikoresho vy’amahera y’amahera, canke gushiramwo ukurenga ku mategeko y’ibikorwa bikomeye, Abxuterial Maxuterial canke Abxuterial- CSAM) yagenewe gutuma Discord Trust & Safety ihagarika server yose ibuza konti y’umuntu ku giti ciwe ya nyen’serveri na yo nyene. Nimba uwutera ariko arashiraho CSAM itemewe n’amategeko, iterabwoba ry’iterabwoba, canke iterabwoba ry’ubukazi bwo ku mubiri, uce utangaza ibimenyamenya ukoresheje urubuga rwacu . gutanga raporo y'ibitemewe n'amategeko kandi bitera ingorane kandi kwitunganya abana, gukorana n’ibikoko bifata abantu, no gutanga raporo ya NCMEC abarongozi, kandi urabe ivyacu vyo kw’isi yose inomero z'ivyihutirwa ububiko nimba hari uwuri mu kaga k’umubiri.

Kugira ngo ushobore guhagarika igitero mu masegonda atarenga 60 bisaba gusuzuma ikihe muri ivyo bitero bitatu kiriko kiratera umuryango wawe: 1. An External Join-Wave / User-Bot Raid: Amajana y'amakonti y'abakoresha yikoresha aseseka biciye ku nzira y'ubutumire canke URL y'ubusa icarimwe ku mihora ya spam n'ama DMs. 2. Igitero c'urushinge rwa Webhook: Umuterabwoba yaronse umurongo wa Webhook URL (discord.com/api/webhooks/...) imyuzure @everyone pings n'amahuza y'ubuhendanyi utarigeze winjira muri server canke ngo uboneke mu rutonde rw'abanyamuryango. 3. Ugusenyera ku mugozi umwe ("Server Nuke"): Ikimenyetso c'ikiganiro c'umurongozi (Local Storage / leveldb ikimenyetso cibwe na infostealer malware) canke ikimenyetso c'umuhinguzi wa bot (Bot ...) n'ivyo Administrator uruhusha rwanyazwe, kurasa DELETE /channels kandi PUT /bans API ihamagara ku muvuduko w’imashini.

Iyi nkuru itanga uburyo nyabwo bwo gufunga vyihutirwa bw’amasegonda 60, urutonde rw’ingenzi rwo gukuraho ibimenyetso vya Bot vyahungabanijwe imbere yo gutera umupira bot y’ubuhendanyi, gukuraho igitabu c’igenzura ry’ivy’amategeko, n’ivy’ubutegetsi Discord Trust & Safety (dis.gd) na Ishigikiro rya Reddit Mod uburyo bwo gusubirana.

Ivyo ubikore ubu¶

1. Gukoresha "Hagarika Ubutumire" na "Hagarika DMs" imbere mu rutonde rw'Ibikorwa vy'Umutekano vya Discord ubwo nyene (bifata amasegonda 5). Kanda kuri Izina rya Serveri yawe hejuru ibubamfu -> uhitemwo Ibikorwa vy'Umutekano (canke Imiterere ya Serveri -> Gutegura Umutekano -> Pa ->vick te DMs**, hanyuma ushireho igihe ku Asaha 24. Ivyo bica bihagarika ubutumire bwose n'URL yawe y'ubusa kureka konti nshasha z'igitero zigafatanya mu gihe uhagarika ubutumwa bwose butasabwe buva ku banyamuryango.
2. Kura Administrator, Manage Channels, Manage Roles, Manage Webhooks, na Ban Members uruhusha ruva kuri @everyone uruhara KANDI kuva ku bakozi bawe/uruhara rwa robot. Gufungura Imiterere ya Serveri -> Uruhara -> Uruhusha mburabuzi (@everyone) -> genda hasi ukande Kuraho uruhusha (canke uhindure OFF Send Messages, Mention @everyone, @here, and All Roles, Attach Files, Embed Links, na Create Public/Private Threads). Hanyuma ukande Umurongozi / Umuyobozi / Uruhara rwawe rwa Bot munsi y'uruhara rwawe rwa Nyir'uwundi maze uzimye by'igihe gito Administrator, Manage Channels, na Ban Members guhagarika nuke ikora y’ugukuraho umurongo yapfuye mu nzira zayo.
3. Suzuma Server Settings -> Audit Log MBERE n'akayunguruzo n'Igikorwa (Delete Channel, Ban Member, Create Webhook, Update Role) kugira ngo umenye neza konti canke bot y’umunyaruyeri. Ntukigere wibaza umurongozi canke bot ariko arakora nuke. Igitabo c'igenzura kigaragaza umukinyi nyawe akora amahamagara ya API mu gihe nyaco.
4. Niba Bot igenewe iriko iratera umuyagankuba kuri server, SUBIZAHO ikimenyetso cayo ca Bot mu rubuga rw'abahinguzi ba Discord (discord.com/developers/applications) canke gukuraho Uruhara rwayo IMBERE yo gutera canke guhagarika bot. Nimba bot yahungabanijwe ifise Administrator canke Manage Server uruhusha, canke iyo umuyobozi w’umuntu yashizwe mu kaga akiri imbere muri server, gutera gusa bot bituma inyandiko y’uwutera ishobora gusubira gutumira bot canke ikomeza gutera amahamagara ya API gushika ikimenyetso canke uruhara rwayo bikuweho.
5. Nimba ubutumwa butari bwo buvuga APP canke BOT iruhande y'izina ridasanzwe RIRI mu rutonde rw'abanywanyi bawe, fungura Server Settings -> Integrations -> Webhooks kandi usibe Webhooks zose zitamenyekanye ubwo nyene. Webhook spam ntiva ku mukoresha ari muri server yawe; birasunikwa biciye kuri HTTP POST bisaba kuri URL y'urubuga rwasohotse kandi bishobora guhagarara gusa mu gukuraho urubuga imbere muri Ivyiyumviro -> urubuga (canke gukuraho Manage Webhooks uruhusha).
6. Zigama Ubutumwa Buhuza, Indangamuntu y'Ukoresha (18-to-19-digit Snowflake ID), n’amafoto y’Igitabo c’Igenzura IMBERE yo gukuraho ibintu vyinshi bitemewe n’amategeko. Nimba abasazi bashizeho CSAM, gore, canke doxxing kugira ngo bashireho server yawe, fata amafoto y’Igitabo c’Igenzura** yerekana igihe c’ugufatanya n’igikorwa co kubuza umuterabwoba, kopira Discord User IDssack> right meli-C y’umuterabwoba, hanyuma umenyeshe gukoresha ubutumwa bwinshi bwo gusukura rero urutonde rw'amakuru rwa Discord Trust & Safety rwanditse wewe nk'umurongozi w'iraporo aho kwandika umunyaserveri w'umufatanyabikorwa.

Igiti c'ingingo: Gusuzuma no guhagarika igitero c'abanyagihugu mu masegonda atarenga 60¶

Raba uwuhe muri abo bane b’ibitero bariko baraba ubu nyene maze ukore urutonde nyarwo rwo kwica-guhindura ruri aha hepfo.

flowchart TD
    RaidStart["Igitero ca Server gikora, Umwuzure wa Spam, canke Gukuraho umurongo vyabonetse"] --> PauseInvites["INTAMBWE YA 1: Kanda Izina rya Serveri -> Ibikorwa vy'Umutekano -> Gushoboza 'Hagarika Ubutumire' & 'Hagarika DMs'."]
    PauseInvites --> AuditCheck["INTAMBWE YA 2: Gufungura amategeko ya Server -> Igitabo c'igenzura kugira ngo umenye umukinyi"]
    AuditCheck --> VectorType{"Igitabo c’Igenzura canke Ikiganiro vyerekana iki?"}
    VectorType -->|"Amajana y'amakonti mashasha yifatanya n'ubutumwa butari bwo mu biganiro/DMs"| JoinRaid["EXTERNAL JOIN RAID: Gukuraho @everyone 'Ohereza ubutumwa', 'Gufata amadosiye', & 'Vuga @everyone' -> Zamura urugero rwo kugenzura ku 'Rwo hejuru (Telefone yagenzuwe)' -> Gushoboza AutoMod kuvuga akayunguruzo k'ubutumwa butari bwo"]
    VectorType -->|"Ubutumwa bwashizweko ikimenyetso 'APP/BOT' Ubutumwa butari bwo @umuntu wese, umukinyi ntari mu rutonde rw'abanywanyi"| WebhookRaid["WEBHOOK SPAM ATTACK: Gufungura amategeko ya Server -> Integrations -> Webhooks -> Gukuraho Webhooks zose zitamenyekanye -> Igenzura Uwaziremye mu gitabu c'igenzura"]
    VectorType -->|"Umurongozi canke Umuyobozi Konti y'Umuntu Ariko Arafuta Imirongo / Ubuza Abakoresha"| ModCompromised["IKIGANIRO C'UMUGENZUZI: Kurura uruhara rwa Mod munsi y'urwawe canke ukureho uruhara rwawe -> Buza Konti ya Mod yashizweho -> Ugire Mod Uhanagure PC Yanduye & Usubiremo Ijambobanga"]
    VectorType -->|"Konti ya Bot ni ugukuraho imirongo myinshi, guhingura uruhara, canke guhagarika"| BotNuke["NUKE: Gukuraho Uburenganzira bw'Uruhara rwa Bot ku Zero -> Gusubiramwo Ikimenyetso ca Bot mu Rubuga rw'Abahinguzi (discord.com/abahinguzi) -> Gutera/Kubuza Bot & Gukuraho OAuth2."]
    JoinRaid --> EvidenceClean["INTAMBWE YA 3: Gutanga raporo y'ivyo vyose bitemewe n'amategeko biciye ku raporo yo muri porogaramu mbere -> Gukoresha ubutumwa bwinshi bwo gusukura / gusubizaho"]
    WebhookRaid --> EvidenceClean
    ModCompromised --> EvidenceClean
    BotNuke --> EvidenceClean

Igice ca 1: Amasezerano y'ugufunga vyihutirwa mu masegonda 60 (Guhagarika amaraso)¶

Igihe igitero canke nuke ya server itanguye, abagenzuzi b’abantu ntibashobora guhagarika amakonti vyihuta kuruta inyandiko ya Python canke Go ikoresha ibisabwa bihuye ku bijanye na Discord REST API (50 requests per second). Utegerezwa guca ubushobozi bwa API bw'umuterabwoba ku rugero rwa server-configuration.

1. Uko wohagarika igitero c'abakoresha-Bot mu masegonda 15¶

Nimba amajana y’amakonti y’ibijugunya ariko arifatanya na server yawe kandi akagwiza imihora canke akagira amakuru menshi ku banywanyi bawe n’ibinyoma "Free Nitro" canke "Crypto Airdrop" amahuza y'ubuhendanyi: 1. Gutera "Ibikorwa vy'umutekano" (Pause Invites + . Pause DMs): - Fyonda kuri Izina rya Server (hejuru ibubamfu) -> Ibikorwa vy'Umutekano. - Suzuma Hagarika ubutumire (ibigaruka "Invites are currently paused for this server" ku nzira iyo ari yo yose yo hanze canke Vanity URL click) na Pause DMs (ibuza abatari abagenzi muri server gutangura ubutumwa bushasha butaziguye). 2. Kuduza urugero rwo kugenzura ku rugero rwo hejuru (Highest - Phone Verified): - Genda kuri Imitunganyirize ya Server -> Imitunganyirize y'umutekano -> Urugero rwo kugenzura -> ukande kuri Hindura -> uhitemwo Iyirengeye (Itegerezwa kuba ifise telefone yagenzuwe kuri konti yabo ya Discord). - Ivyinshi mu bitero vy'ubuhinga bwa none vyishingikiriza ku bimenyetso vy'imeyili bihendutse ($0.01 per token) aho gukoresha amakonti agenzurwa na SMS. Guhindukira kuri Ivyiza bica bibuza ubwo nyene ibimenyetso vya bot bitagenzuwe bisanzwe biri muri server kohereza ubutumwa canke abagize ubutumwa. 3. Gufunga @everyone Uruhusha rw'imirongo kw'isi yose: - Genda kuri Imiterere ya Serveri -> Uruhara -> Uruhusha mburabuzi (@everyone). - Zima: - Send Messages kandi Send Messages in Threads - Create Public Threads kandi Create Private Threads - Attach Files kandi Embed Links - Add Reactions kandi Use External Emoji / Stickers - Mention @everyone, @here, and All Roles - Igenzura rikomeye ry'uruhusha rw'umurongo rurengewe: Nimba umurongo wihariye (nk' #general canke #chat) ifise Ikimenyetso c'Icatsi kibisi (Allow) guhindura ku @everyone uruhara rwa Send Messages imbere Guhindura Umurongo -> Uruhusha, guhindura uruhara rw'Imiterere ya Serveri y'isi yose ntibizo gufunga uwo murongo. Ku murongo wose ukiriko uragendagenda n'ibitari vyo, kanda Igishushanyo c'Igikoresho (Guhindura Umurongo) -> Uruhusha -> @everyone kandi ushireho Send Messages ku Umutuku X (Deny) canke ushoboze Uburyo buhoro (6 hours).

2. Uko wohagarika igitero ca "Webhook Spam" mu masegonda 15¶

Benshi mu bafise ama server barahagarika umutima biyumvira ko server yabo yose yaciwe kubera umukoresha yitwa . "Server Nuke Syndicate" n'APP (imbere BOT) ikimenyetso kiriko kirakora ping @everyone 5 incuro ku segonda mu 2019. #announcements kandi ntishobora gukanda iburyo ngo ibuzwe. - Igituma udashobora kubuza urubuga: urubuga rwa Discord ni iherezo ryoroshe rya HTTP (https://discord.com/api/webhooks/{webhook.id}/{webhook.token}). Umuntu wese aronka iyo URL (yaba ari kubera ko umurongozi yayerekanye mu mpanuka ku murongo w’ubuzima, akayishira mu bubiko bwa GitHub bwa bose, canke yari afise konti ya mod yahinduwe) arashobora kohereza amafaranga y’i JSON ataco amaze kuri iyo nzira ata n’umwe ari umunyamuryango wa server yawe ya Discord. - Uko woyica ubwo nyene: 1. Gufungura Imiterere ya Serveri -> Ugushiramwo -> Ivyuma vy'urubuga. 2. Raba urutonde rw’ama Webhooks maze urabe umurongo umwe wese yerekana. 3. Fyonda kuri Webhook yose itamenyekanye hanyuma ukande Sukura Webhook (canke ukande Kopa URL ya Webhook ku bitabo vy’ubuhinga bwa none mbere, hanyuma Sukura Webhook). Ivyo bimenyetso bihagarika milisegonda iyo Webhook isubiwemwo. 4. Ubwo nyene fungura Imiterere ya Serveri -> Igitabo c'igenzura -> Kuyungurura hakurikijwe ibikorwa: Create Webhook kugira ngo ubone uwuhe murongozi canke konti ya bot yaremye iyo Webhook. Iyo konti y’umurongozi yaremye Webhook isaha zitatu z’ijoro ataco bazi, ico kimenyetso c’ikiganiro ca Discord c’umurongozi kirahungabanywa: bakureho uruhara rwabo maze ushireko konti yabo ubwo nyene.

Igice ca 2: Guhagarika "Server Nuke" yo mu mutima (Umurongozi yashizweho n'Ikimenyetso ca Bot)¶

"Server Nuke" ibaho iyo umuterabwoba ateye akaga konti canke bot ifise uburenganzira bwo gutwara burengeye (Administrator, Manage Channels, Manage Roles, Ban Members, Manage Webhooks) kandi ikoresha inyandiko y'ugusambura yikora (Nuker). Mu masegonda 10, iyo nyandiko iraca muri ID y’umurongo wose kugira ngo ikureho imirongo yose y’inyandiko n’ijwi, igahingura imirongo mishasha 250 yitwa . #nuked-by-xxx, ifuta inshingano zose za server, kandi igakuraho ibisabwa vyo kubuza abantu benshi ku rutonde rw'abanyamuryango.

1. Itegeko ry'Uburongozi bw'Uruhara rwa Discord (Kubera iki ushobora canke udashobora guhagarika Admin w'umunyaruyeri)¶

Discord ishira mu ngiro ubuhagaze bukomeye Uruhara imbere Imiterere ya Serveri -> Uruhara: - Uwufise Server (Crown holder) yicara hejuru y’uruhara rwose muri server kandi arashobora gukuraho canke guhagarika umuntu wese canke bot ataco afatiye ku rutonde rw’uruhara. - Umurongozi wese atari nyen'ivyo bikoresho ashobora GUSA guhindura, gukuraho, canke guhagarika abakoresha n'amaboti afise uruhara rwo hejuru rwicaye mu mubiri munsi ya uruhara rwabo rwo hejuru mu rutonde rwa Imiterere ya Serveri -> Uruhara. - Niba uruhara rwa bot rwahungabanijwe rushizwe kuri #2 ku rutonde rw'ibikorwa n'abarongozi bawe mwizigira bicara kuri #3, aba Head Admins bawe nta bubasha bafise bwo gutera bot canke guhindura uruhara rwayo mu gihe wewe (Nyene Server) usinziriye.

2. Urutonde nyarwo rwo gukuraho Bot Nuke¶

Niba Igitabo c'Igenzura kigaragaza konti ya bot (yaba bot yawe ya server canke bot y'uwundi muntu yacitse intege) iriko irafuta imirongo canke ibuza abanywanyi, kurikiza iyi nzira nyayo y'intambwe 3:

3. How moderators get their Discord tokens stolen (And why 2FA does NOT stop it)¶

Why did your most trusted moderator, who has SMS and Authenticator App 2FA enabled on their Discord account, suddenly start nuking the server at 4:00 AM? - How Discord Authentication Tokens Work: The Discord desktop client (built on Electron/Chromium) and web browsers store a persistent user authentication token inside local encrypted storage (%AppData%\discord\Local Storage\leveldb on Windows). - The 3 Token-Theft Vectors: 1. Fake Game Beta / Verification Malware (Lumma, RedLine, Blank Grabber, Emerald Stealer): A raid group DMs your moderator asking them to test an indie game or review a ban appeal .zip file. The malware extracts the moderator's decrypted Discord token AND often modifies the Discord desktop client's local JavaScript (core.asar / index.js injection) so that even when the moderator changes their password, the trojanized Discord app immediately sends the new token back to the attacker's webhook. 2. Malicious "Bookmarklet" or Developer Console (F12) Social Engineering: Scammers trick users into dragging a "Verify Account" bookmarklet to their browser bar or pasting a snippet into the Ctrl + Shift + I console, which reads the live token directly from memory. 3. Fake "Captcha Verification Bot" QR Code Scan (Wick / DoubleCounter Clones): Attackers send a fake server verification message asking the moderator to "Scan this QR code with your Discord Mobile App to verify you are human." Scanning a Discord Login QR code in the mobile app instantly grants full account login session access to the attacker's desktop browser, bypassing password and 2FA completely.

Part 3: Reddit Community (Subreddit) Raid and Compromised Moderator Recovery¶

If you moderate a Reddit community (r/YourSubreddit) and discover that a compromised moderator account has stripped the CSS/Wiki, banned hundreds of users, replaced the subreddit description with scam links, or set the subreddit to Private / Restricted, or that thousands of coordinate brigade bots are flooding the queue:

1. Immediate Subreddit Lockdown & Rogue Moderator Removal¶

1. Check the Moderator Hierarchy (Mod Tools -> Moderators):
2. Just like Discord, Reddit enforces a strict top-down seniority hierarchy in the Moderators list based on the date each moderator was added.
3. Any moderator with the Everything (Full Permissions) flag can remove or strip permissions from any moderator listed below them on the page, but cannot touch any moderator listed above them.
4. If the compromised moderator is listed below you: immediately open Mod Tools -> Moderators -> Editable, click the pencil icon next to the compromised moderator, uncheck Everything, and click Remove.
5. Suzuma Mod Log (https://www.reddit.com/r/YOURSUBREDDIT/about/log):
6. Kuyungurura Igitabo c'ubugenzuzi n'izina ry'ukoresha ry'umugenzuzi (Moderator gumanuka) na Igikorwa (banuser, wikirevise, editsettings, removelink, removemoderator).
7. Gukoresha Reddit "Igenzura ry'abantu benshi" na "Ivyunguruzo vy'umutekano" mu gihe c'Igitero ca Brigade y'Inyuma:
8. Gufungura Ibikoresho vya Mod -> Ivyunyuro vy'umutekano -> Gucungera abantu benshi.
9. Tegura Urugero rw’Ivyashizweho na Urwego rw’Ibitekerezo ku Ivyiyumviro vyinshi / Bikomeye (bifata ubwavyo ibitekerezo n’ivyashizweho n’abakoresha bafise karma mbi ya subreddit, amakonti mashasha, n’abakoresha batarinjiye mu muryango imbere y’uko igitero gitanguye).
10. Gukoresha Iyunguruzo ry’Ugutotezwa na Iyunguruzo ry’Uguhunga (ikoresha urutoke rw’igikoresho co mu mutima ca Reddit n’ubuhinga bwa IP kugira ngo ikureho ubwayo ivyanditswe ku ma konti mashasha yashizweho y’abasuma babujijwe).
11. Kwongerako ubwo nyene AutoModerator Itegeko ryo gufunga vyihutirwa:
12. Gufungura Ibikoresho vya Mod -> Automod (wiki/config/automoderator) hanyuma ushire iri rembo ry’ivyihutirwa ry’aho nyene hejuru kugira ngo ufate canke ukureho ibintu vyose vyashizweko/ibivugwa kuri konti zitarashika imisi 30 canke zifise karma nto ya subreddit:

    ---
    # EMERGENCY RAID LOCKDOWN RULE
    type: any
    author:
        account_age: "< 30 days"
        combined_subreddit_karma: "< 10"
        satisfy_any_threshold: true
    action: filter
    action_reason: "Emergency Raid Lockdown: New account or low subreddit karma [{{match}}]"
    ---
    

2. Ico wokora iyo "Top Moderator" wa Subreddit yawe yacitse intege (Kandi akuraho ikipe ya Mod)¶

Niba konti ya #1 Top Moderator kuri subreddit yawe yafashwe (canke yaguzwe n’ishirahamwe ry’abagenzuzi ba crypto/onlyfans) maze ikuraho umugwi wose w’abagenzuzi wemewe: 1. NTUgerageze gutera brigade subreddit yawe bwite. 2. Umugenzuzi wa kabiri akuweho yohereze Modmail kuri r/ModSupport (https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Compromised+Top+Moderator+Emergency+Rollback). 3. Kubera iki r/ModSupport Modmail Ni Umuhora Wemewe wo Gutera imbere: Bitandukanye n'ivyo abantu bose bashira ku r/redditrequest (ari vyo vy’ibice vy’inyuma vyahebwe), r/ModSupport Modmail is staffed directly by Reddit Community Admins equipped with an internal Mod Action Rollback Tool. 4. Provide: - The exact subreddit name (r/...); - The username of the compromised Top Moderator (u/...); - The exact UTC timestamp when the legitimate mod team was purged and the wiki/sidebar/pins were vandalized; - Screenshots of your Modmail removal notices. 5. What Reddit Admins Restore: Reddit Admins lock the compromised Top Moderator account, roll back all moderator removals, bans, wiki edits, and post deletions executed during the breach window, and restore the highest surviving moderator to the #1 Top Moderator seat.

Part 4: Post-Raid Recovery: Can Deleted Discord Channels and Mass-Banned Users Be Restored?¶

Once the raid is stopped and the rogue bot/moderator is removed, server owners face the hardest operational reality of Discord's architecture:

1. Does Discord Support Restore Deleted Channels or Messages After a Server Nuke?¶

• The Hard Technical Reality: Unlike YouTube (which keeps deleted video blobs in cold storage for 14 to 30 days) or Reddit (where "removed" posts are merely hidden and Admins can roll back a Mod Log), when a channel is deleted on Discord (DELETE /channels/{id}), Discord's Cassandra/ScyllaDB database permanently purges the channel object and all message rows inside it.
• Discord Trust & Safety CANNOT restore deleted channels, deleted roles, or deleted message history after a compromised admin or bot nukes a server.
• What Discord Trust & Safety CAN Restore: If your entire server was terminated/disabled by Discord Trust & Safety because raiders spammed malicious content to frame you, or if your Server Owner account was hijacked and the attacker transferred Server Ownership (Transfer Ownership) to their own account, filing a Compromised Account / Server Ownership Ticket at https://dis.gd/request allows Discord staff to transfer the Server Owner Crown back to your recovered account.

2. How to Rebuild Channels & Roles and Unban Mass-Banned Members Quickly¶

1. Rebuilding Channels & Roles (Server Templates & Backup Bots):
2. If you previously generated a native Discord Server Template (Server Settings -> Server Template) or took a configuration snapshot with a reputable backup bot (such as Xenon Bot, which backs up channel hierarchies, role colors, and permission overwrites, though not historical user messages), you can restore your channel and role skeleton in under 2 minutes.
3. Bulk-Reversing Mass Bans via the Audit Log:
4. If a compromised bot banned 500 legitimate members during a 2-minute nuke, open Server Settings -> Audit Log -> Filter by Action: Ban Member -> Filter by User: [The Compromised Bot/Mod].
5. Every ban entry in the Audit Log shows the exact User ID and timestamp of the victim banned during that 2-minute window. You can unban them manually via Server Settings -> Bans, or use a trusted moderation bot command (such as Carl-bot, Dyno, or a simple 15-line administrative script reading guild.audit_logs(action=discord.AuditLogAction.ban) yayunguruwe neza kuri entry.user.id == COMPROMISED_ACTOR_ID) guhamagara ubwawe guild.unban(entry.target) ku munyamuryango wese wemewe yabujijwe n’uwo mukinyi w’umunyaruyeri.
6. Gukuraho ubutumwa ibihumbi vy'ibitero ata gukuraho umurongo:
7. Iyo umurongo wuzuye ubutumwa 2.000 bw'ibitero, ntufute kandi ukore clone y'umurongo kiretse ushaka gutakaza ubutumwa bwose bwa kera bubereye, ubutumwa bwashizweko, n'ubufatanye bwa webhook.
8. Ahubwo, koresha Discord yubatswemwo Fyonda iburyo Raider -> Kubuza -> Gukuraho Amateka y'Ubutumwa: Previous 24 Hours (canke Previous 7 Days), ihita isukura ubutumwa bwose bwoherejwe n'uwo munyagihugu ku nzira yose iri muri server icarimwe.
9. Ku bijanye n'ubutumwa butari bwo bwa konti nyinshi, koresha bot y'ubugenzuzi yagenzuwe /purge itegeko (up to 100 to 1,000 messages under 14 days old biciye ku mpera ya API ya Discord).

Igice ca 5: Amakimbirane ahoraho n'urutonde rw'ibitero vy'abanyagihugu¶

Igihe server yawe izoba ihagaze neza, ushireho ibi uburyo butandatu bwo kwikingira bw'ubwubatsi butagira igiciro kugira ngo ntihagire botnet y'inyuma canke PC imwe y'umugenzuzi yanduye ishobora gusubira gutera server yawe:

1. Enable Discord "AutoMod" Native Filters (Server Settings -> Safety Setup -> AutoMod)¶

Discord's native AutoMod intercepts and blocks raid payloads before the message is ever rendered in chat or triggers a push notification on members' phones: - Block Mention Spam: Set the Mention Limit to 5 (canke 3) ubutumwa bwihariye buvugwa, hanyuma uhitemwo Ubutumwa bwo guhagarika + Umunyamuryango w'igihe (1 Hour canke 24 Hours) + Wohereze Imburi. Ivyo bituma umunyagihugu adashobora gutera ping ku bantu 30 mu butumwa bumwe. - Guhagarika Ibirimwo Bikekwa ko ari Spam n'Amajambo Asanzwe Akoreshwa: Hindura ON urutonde rwompi rwubakiwemwo. - Ijambo ry'ingenzi ry'umuntu ku giti ciwe n'amategeko ya Regex ku bihendahenda: Wongereko itegeko ry'umuntu ku giti ciwe rya AutoMod ribuza ubuhendanyi busanzwe: - Keywords: *discord.gift*, *steamcommunity.com/gift*, *free nitro*, *airdrop claim*, *t.me/*, *whatsapp.com*. - Regex patterns catching obfuscated invite links: (?:https?://)?(?:www\.)?(?:discord\.(?:gg|io|me|li)|discordapp\.com/invite)/[a-zA-Z0-9-]+ (exempting your staff roles).

2. Enable "Require 2FA for Moderator Actions" (Server Settings -> Safety Setup -> Permissions)¶

• Turning on Server-Wide 2FA Requirement forces Discord's API to verify that any user attempting to delete channels, ban members, manage roles, or manage webhooks has Two-Factor Authentication active on their account.
• More importantly, strip the Administrator permission from ALL Human Moderator Roles and 99% of Bots:
• The Golden Rule of Discord Security: Almost no human moderator and no general-purpose bot ever needs the Administrator switch toggled ON.
• Why? The Administrator toggle grants full bypass over every channel lock, grants Manage Webhooks, grants Manage Server, and lets a compromised mod nuke the server in 3 seconds.
• Instead, give your human Moderators only Kick Members, Ban Members, Moderate Members (Timeout), na Manage Messages. Give them zero permission to Delete Channels, Manage Roles, canke Manage Webhooks. If a moderator's PC gets infected with a token-stealer, the attacker cannot delete a single channel and cannot create a single webhook.

3. Implement "Bot Quarantine & Anti-Nuke Rate Limiting"¶

• Audit Server Settings -> Integrations Buri kwezi: Kuraho bot yose y'umuziki idakoreshwa, bot y'umukino mutoyi, canke bot y'ukugenzura wongereyeko imyaka iheze. Mu bitero vyinshi bikomeye vyabaye mu mateka, urubuga rw’igicu rw’uwundi muntu rwahebwe rwaciwemwo n’abasuma bakoresheje urubuga rwarwo rwari rudakora . Administrator role to raid 10,000 servers simultaneously.
• Never Grant Administrator Igihe utumira Bot: Igihe wemerera bot biciye kuri OAuth2 URL (discord.com/oauth2/authorize?...&permissions=8), menya ko . permissions=8 ni bitfield yuzuye Administrator. Gukuraho Administrator ku nzira ya OAuth maze ugatanga gusa uruhusha rwihariye bot ikeneye.
• Imbwa y'Ukurwanya Nuke: Ku ma server manini (10,000+ members), shira Bot y'Ikigereranyo c'Ibirwanisho vya Nuke yagenzuwe (nk'iyitwa Wick) ku hejuru y'Uruhara rwawe (#1 Position right under the Server Owner) yatunganijwe ku buryo iyo umugenzuzi canke bot uwo ari we wese asubije imirongo irenga 2 mu masegonda 60 canke akabuza abakoresha barenga 5 mu masegonda 60, imbwa y’umucungezi ikuraho uruhara rw’uwo mukinyi ku zero mu masegonda 200.

Inomero z'ivyihutirwa zo mu karere n'amategeko y'ibigo¶

Iyo ibitero vy’abanyagihugu bijabuka bikaja mu ubugizi bwa nabi bukomeye bwo kuri Internet, gufata amahera, gutera ubwoba, canke gutanga ibikoresho vy’uguhohotera abana mu vy’igitsina (CSAM), ukurikize aya mabwirizwa yemewe yo gutanga raporo ubwo nyene:

• Raporo ya CSAM kw’isi yose (Itegeko): Ntukigere ukura, ubika canke ngo urungike amafoto arimwo CSAM. Koresha ubutumwa bwa Discord buri muri app Ubutumwa bwo gutanga raporo -> Ibikoresho vyo kwigirira nabi canke guhohotera umwana mu vy'igitsina (birungika hash nyayo y'uruhande rwa server n'IP y'uwuyishira kuri Ikigo c'igihugu c'abana babuze n'abakoreshwa nabi, NCMEC Impanuro zo kuri Internet), canke raporo kuri report.cybertip.org (1-800-843-5678) muri Amerika canke Ishirahamwe ry’Internet (iwf.org.uk) mu Bwongereza/Ubumwe bw’Uburayi. Raba kwitunganya abana, gukorana n’ibikoko bifata abantu, no gutanga raporo ya NCMEC.
• Leta Zunze Ubumwe za Amerika: Gutanga raporo y’ibitero vy’ugufata amahera, ugutera ubwoba, canke ibitero vya DDoS ku Ikigo ca FBI kijejwe gutanga ikirego c’ubugizi bwa nabi kuri Internet (ic3.gov). Niba umurongozi ya doxxed kandi agatera ubwoba ko azorungika ubutumwa bwihutirwa bw'ibinyoma ("Swatting"), hamagara abapolisi bo mu karere kawe biro vy'ubutumwa bitajanye n'ivyihutirwa ubwo nyene kugira ngo bashire Swatting / Premise Alert Note kuri aderesi yawe. Ku bijanye n’akaga k’umubiri, hamagara 911.
• Canada: Raporo y'ubusuma bwo kuri internet n'ibitero bitemewe n'amategeko ku Ikigo ca Canada kijejwe gukingira abana (cybertip.ca), Ikigo co muri Kanada kirwanya ubuhendanyi (1-888-495-8501), canke abapolisi bo mu karere (911 mu bihe vy’ivyihutirwa).
• Ubwongereza: Raporo ikoreshwa nabi rya mudasobwa n'ugufata amahera ku mbuga ngurukanabumenyi ku Action Fraud (actionfraud.police.uk, 0300 123 2040) kandi umenyeshe Ishirahamwe ry’Ivy’Internet (iwf.org.uk) canke umuyobozi mukuru (ceop.police.uk). Inomero y’ivyihutirwa: 999 canke 112 (abapolisi batagira ivyihutirwa: 101).
• Ubumwe bw'Uburaya: Raporo amajambo y'urwanko atemewe n'amategeko, ibintu vy'iterabwoba, canke ibitero vya CSAM biciye ku gihugu cawe INHOPE (inhope.org) umurongo w’ubutumwa n’igipolisi kijejwe ubugizi bwa nabi ku mbuga ngurukanabumenyi hakurikijwe Itegeko ry’Ubumwe bw’Uburayi ryerekeye ibikorwa vy’ubuhinga bwa none (DSA). Inomero y’ivyihutirwa: 112.
• Ostraliya na Nouvelle-Zélande: Muri Australiya, numenyeshe Umukuru w'umutekano wo kuri interineti (esafety.gov.au) na Raporo ya Cyber ​​(cyber.gov.au, 1300 292 371). Muri Nouvelle-Zélande, ushire raporo kuri Netsafe (netsafe.org.nz, 0508 638 723). Inomero z’ivyihutirwa: 000 (Ostraliya), 111 (Nouvelle-Zélande).
• Ubuhindi na Aziya-Pacifique: Mu Buhindi, ushireho raporo ubwo nyene ku Kubuga bw'Igihugu bwo Gutanga Raporo ku Bugizi bwa nabi bwo kuri Internet (cybercrime.gov.in, umurongo w'ubufasha 1930). Raba ububiko bwacu bwose kuri inomero z'ivyihutirwa.

Ibibazo bikunda kubazwa¶

Kuki ari @everyone spam pings zica ziboneka inyuma y'aho mbujije abatera n'ugufunga @everyone uruhusha?¶

Igihe ubutumwa butari bwo bubandanya gusuka mu muhora ufise **`APP`** canke **`BOT`** tag iruhande y'izina ry'ukoresha kandi ntushobora gukanda iburyo kuri uwo muntu kugira ngo umubuze, uwutera ariko arakoresha **Discord Webhook** aho gukoresha konti y'ukoresha. Webhooks ntiziboneka ku rutonde rw'abagize Server yawe kandi ntizirengagize `@everyone` uruhara kohereza-ubutumwa amategeko. Gufungura **Imiterere ya Serveri -> Integuro -> Urubuga**, urondere Urubuga rwerekana umurongo washikiwe, hanyuma ukande **Sukura Urubuga**. Inyuma, reba **Imiterere ya Serveri -> Igitabo c'igenzura** cayunguruwe na `Create Webhook` kugira ngo ubone umurongozi canke bot yabiremye.

Iyo nteye canke nkabuza bot yashizwe mu kaga mu gihe ca nuke ya server, yoshobora gute gusubira kwifatanya ubwayo?¶

Bot ntishobora kwitumira ubwayo, **ariko** iyo uwuyitera na we nyene yateye akaga ikimenyetso c'ikiganiro c'umugenzuzi w'umuntu (canke yemerewe `Manage Server` / `Administrator` ku ruhara rwa kabiri rwihishije mu gihe bot yari ifise ububasha), inyandiko y'umuterabwoba ikoresha ico kimenyetso c'umuntu kugira ngo yongere yemerere URL y'ubutumire bwa bot OAuth2 (`permissions=8`) igice c’isegonda umaze kuyitera. Mu gukuraho uruhara rwa bot ku zero mbere, gusubiramwo Bot Token imbere `discord.com/developers/applications`, no kugenzura **Igitabo c'Igenzura** ku bikorwa bitaremewe vyahawe abagize umuryango w'abantu, uca bot n'umurongo wayo wo gusubira gutumira.

Mbega Discord Support yoshobora gusubiza inyuma server yanje maze igasubizaho imirongo yanje yasubiwemwo iyo umunyaruyeri ayiteye?¶

Oya, bitandukanye na Reddit canke YouTube, Discord ntizigama amafoto y’imirongo yasimbuwe, uruhara rwasibwe, canke ubutumwa bwasibwe ku maserukira yayo y’urutonde rw’amakuru. Igihe kimwe a `DELETE /channels/{id}` Igisabwa ca API gishirwa mu ngiro na konti ifise `Manage Channels` canke `Administrator` uruhusha, iyo mihora n’amateka y’ubutumwa bwayo birafutwa ubuziraherezo. Ariko rero, nimba uwo munyavyaha yimuriye **Ubutunzi bwa Server** kure ya konti yawe yashizwe mu kaga, canke nimba server yawe yazimijwe mu buryo butari bwo na Trust & Safety mu gihe c’igitero co gukora amabara, gutanga itike kuri . `dis.gd/request` munsi ya **Konti ya Hacked / Uwufise Server** iremeza Discord Support kugusubiza igitsibo ca Server.

Konti y’umuyobozi umwe yanyazwe n’umusuma w’amakuru aca atera umuyagankuba kuri server yacu. Mbega biratekanye kubasubiramwo bamaze guhindura ijambobanga ryabo?¶

Ntukigere usubiza uburenganzira bw’umugenzuzi ku mukozi yagirijwe nabi kubera gusa yahinduye ijambobanga ryiwe kuri mudasobwa imwe. Abasuma b'ibimenyetso vya Discord bo muri iki gihe (`Lumma`, `Blank Grabber`, `RedLine`) gutera ibikoresho vya JavaScript bihoraho mu buryo butaziguye muri porogaramu y'ibiro ya Discord `index.js` / `core.asar` dosiye muri `%AppData%\discord`. Igihe nyene uwo murongozi asubira kwinjira muri iyo PC itahanaguwe, iyo nyandiko yashizwemwo ica yiba ico kimenyetso gishasha maze ikagisubiza uwo munyavyaha. Saba umurongozi gukora igikorwa co gusubira gushiramwo Windows imbere y’uko yongera kubaha uruhara.

Nokingira gute server yanje ubuhendanyi bwa "Fake QR Code Verification" bufata abarongozi n'abanyamuryango?¶

Niwigishe abakozi bawe n'abanyagihugu ko **ata bot yemewe yo kugenzura Discord (`Wick`, `DoubleCounter`, `Pandez`, `Sledgehammer`) azokwigera akusaba gucapura kode ya QR ukoresheje kamera ya porogarama ya Discord.** Igikoresho co gucapura kode ya QR cubatswe muri porogarama ya Discord kiriho gusa kugira ngo winjize mudasobwa nshasha yo ku biro muri konti yawe ya Discord. Toza abagenzuzi guhagarika ama DMs yinjira avuye ku batari abagenzi munsi ya **Imiterere y'Ukoresha -> Ibirimwo n'Imibano -> Uruhusha rw'Imibano** kandi ntimwigere mucapura kode ya QR canke ngo mukoreshe `.exe`/`.zip` dosiye yoherejwe muri DM.

Inyobora zifitaniye isano¶

• Gufata konti yo ku mbuga ngurukanabumenyi no kuyifata
• Gutanga raporo y'ibintu bitemewe n'amategeko kandi bitera ingorane kuri internet
• Ukwitunganya abana, gukorana n’ibikoko bifata abantu, gusambanya abana bato, no gutanga raporo ya NCMEC
• Gutotezwa kuri Internet, doxxing, no gutotezwa kuri Internet
• Umuhora w'umuremyi wanyazwe n'ubuhendanyi bwa crypto
• Inomero z'ivyihutirwa

Amasoko n'ubuyobozi buzwi¶

• Ikigo ca Discord Trust & Umutekano n'Umutekano (discord.com/safety): Gukingira Server yawe Ibitero (Safety Setup, AutoMod, Raid Protection, na Security Actions: Hagarika Ubutumire / Hagarika DMs) na Uburongozi bw'Uruhusha n'Ivyemezo vy'Ibintu Bibiri ku Barongozi.
• Inyandiko z'umuhinguzi wa Discord (discord.com/developers/docs): OAuth2 Uruhusha rwa Bot, Ibendera ry'Uruhusha rwa Bitwise (Administrator = 0x8), Umutekano wa Webhook, n’Ugukuraho Ikimenyetso.
• Ifashanyo ya Reddit & Infashanyo y'Umugenzuzi (support.reddithelp.com / r/ModSupport): Igenzura ry'abantu benshi ry'i Subreddit, Ivyunguruzo vyo guhunga, Ivyiyumviro vyihutirwa vy'Umugenzuzi, n'Imirongo y'Ivyihutirwa vy'Umugenzuzi.
• Ikigo kijejwe umutekano wo kuri interineti n'ibikorwa remezo (CISA) & Ikigo c'igihugu kijejwe umutekano wo kuri interineti (NCSC): Gugabanya ubusuma bw'amakuru, gutera urushinge rw'ibikoresho vy'ubuhinga bwa none (asar guhindura), na OAuth/Ugufata Ikimenyetso c'Igihe.
• Ikigo c'igihugu c'abana babuze n'abakoreshwa nabi (NCMEC) & Ishirahamwe ry'Ivy'Ikoranabuhanga (IWF): Itegeko ryo gutanga raporo y'ibintu bitemewe n'amategeko n'ibintu bitera ububi bwa Server.