Seva ea Discord kapa Tlhaselo ea Sechaba: Letšoao la Bot le Senyehileng, Spam ea Webhook, le Pholiso ea Audit-Log¶

Ho tsoha ho fihla ho likete @everyone tsebiso le ho fumana hore Seva ea hau ea sechaba sa Discord, mokhatlo oa lipapali, kapa subreddit e tlas'a tlhaselo e hokahaneng kapa "server nuke" e ikemetseng ke ts'ohanyetso ea dijithale e potlakileng. Ka nako ea metsotsoana e 30 ho isa ho e 90, ak'haonte e senyehileng, tokeneng ea bot e koetsoeng, kapa webhook e lutiloeng e ka hlakola liteishene tse ngata, e thibelang likete tsa litho tse molaong, ea tlatsa seva sa hau ka li-wallet drainers, kapa ea beha litlolo tse matla tsa Ts'ebeletso (ho kenyeletsoa litšoantšo tse sa lumellaneng kapa Tlhekefetso ea Bana, Tlhekefetso ea Bana. CSAM) e etselitsoeng ho bulela Discord Trust & Safety full-server termination e thibelang le akhaonto ea botho ea mong'a seva. Haeba mohlaseli a romella CSAM e seng molaong, litšokelo tsa bokhukhuni, kapa litšokelo tse haufi tsa tlhekefetso, tlaleha bopaki hang-hang u sebelisa ho tlaleha litaba tse seng molaong le tse kotsi le kholiso ea bana, ho kopana le libatana, le tlaleho ea NCMEC tataisa, le ho buisana le lefats'e la rona dinomoro tsa tshohanyetso directory haeba mang kapa mang a le kotsing ea 'mele.

Ho emisa tlhaselo ka katleho ka nako e ka tlase ho metsotsoana e 60 ho hloka ho tseba hore ** ke efe ho li-vector tse tharo tse hlaselang ** e otlang sechaba sa heno: 1. Tlhaselo ea Kantle ea Join-Wave / User-Bot: Makholo a liak'haonte tsa mosebelisi a phalla ka sehokelo sa memo kapa URL ea lefeela ka nako e le 'ngoe ho liteishene tsa spam le li-DM. 2. Tlhaselo ea Ente ea Webhook: Mohlaseli ea fumaneng mocha oa URL oa Webhook (discord.com/api/webhooks/...) likhohola @everyone pings le lihokelo tsa scam ntle le ho kenella ho seva kapa ho hlaha lenaneng la litho. 3. An Internal Privilege Compromise ("Nuke Server"): Letšoao la kopano ea mookameli (Local Storage / leveldb letšoao le utsoitsoeng ke infostealer malware) kapa Letšoao la Moqapi la bot (Bot ...) le Administrator tumello e koetsoe, ea thunngoa DELETE /channels le PUT /bans Mehala ea API ka lebelo la mochini.

Tataiso ena e fana ka protocol e nepahetseng ea ho koaloa ha maemo a tšohanyetso ea metsotsoana e 60, tatellano e tlamang bakeng sa ho hlakola Bot Tokens tse senyehileng pele ho raha bot e mpe, ho ntšoa ha lintlha tsa morao-rao tsa Audit Log, le semmuso Discord Trust & Safety (dis.gd) le Reddit Mod Support mekhoa ea ho hlaphoheloa.

Etsa sena hona joale¶

1. ** Kenya tshebetsong "Emisa Memo" le "Emisa DMs" ka har'a menu ea Discord's Security Actions hang-hang (e nka metsotsoana e 5).** Tobetsa ** Lebitso la seva ** ka holimo ka ho le letšehali -> khetha ** Liketso tsa Tšireletso ** (kapa ** Litlhophiso tsa Seva -> Setupo sa Tšireletso -> Tšireletso ea Raid **) -> hlahloba ** Emisa * 'Me u Emise, 'me u Emise ** Lihora tse 24 **. Hang-hang sena se thibela sehokelo se seng le se seng sa memo le URL ea hau ea Vanity e tloaelehileng hore e se ke ea lumella liakhaonto tse ncha tse hlaselang hore li kenelle ha o ntse o emisa Melaetsa e otlolohileng e sa batloang ke setho ho setho.
2. Rola the Administrator, Manage Channels, Manage Roles, Manage Webhooks, le Ban Members ditumello ho tswa ho @everyone karolo LE ho tsoa mesebetsing ea hau ea basebetsi/bot. Bula Litlhophiso tsa Seva -> Mesebetsi -> Litumello tse Ileng tsa Peloa (@everyone) -> tsamaisetsa tlase ebe o tobetsa ** Hlakola Litumello ** (kapa o tima ka ho hlaka Send Messages, Mention @everyone, @here, and All Roles, Attach Files, Embed Links, le Create Public/Private Threads). Ebe u tobetsa mesebetsi ea **Mookameli / Tsamaiso / Bot ** ka tlase ho karolo ea hau ea Mong'a 'me u fetole ka nakoana HO TLOA Administrator, Manage Channels, le Ban Members ho emisa nuke e sebetsang ea ho hlakola kanale e shoeleng litseleng tsa eona.
3. Sheba Server Settings -> Audit Log FIRST le sefa ka Ketso (Delete Channel, Ban Member, Create Webhook, Update Role) ho tsebahatsa ak'haonte ea rogue kapa bot. Le ka mohla u se ke ua hakanya hore na ke mookamedi ofe kapa bot efe e sebedisang nuke. Audit Log e bonts'a sebapali se hlileng se phethisang mehala ea API ka nako ea nnete.
4. Haeba Custom Bot e senya seva, HLAKOLA Letšoao la eona la Bot ho Discord Developer Portal (discord.com/developers/applications) kapa e hlobolise Litumello tsa eona PELE e raha kapa e thibela bot. Haeba bot e senyehileng e na le Administrator kapa Manage Server tumello, kapa haeba motho ea sekiselitsoeng a ntse a le ka har'a seva, ho raha bot feela ho lumella mongolo oa mohlaseli hore o meme bot hang-hang kapa o tsoelepele ho thunya mehala ea API ho fihlela letšoao kapa karolo ea eona e tlosoa.
5. Haeba melaetsa ea spam e re APP kapa BOT haufi le lebitso le makatsang le seng lethathamong la litho tsa hau, bula Server Settings -> Integrations -> Webhooks 'me u hlakole li-Webhooks tsohle tse sa tsejoeng hang-hang. Spam ea Webhook ha e tsoe ho mosebelisi seva sa hau; e sutumetsoa ka HTTP POST likopo ho URL e lutletseng ea Webhook mme e ka emisoa feela ka ho hlakola Webhook kahare Likamano -> Webhook (kapa ho hlakola Manage Webhooks ditumello).
6. ** Boloka Sehokelo sa Molaetsa, ID ea mosebelisi (18-to-19-digit Snowflake ID), le Audit Log screenshots PELE ho tlosa litaba tse seng molaong ka bongata.** Haeba bahlaseli ba kentse CSAM, selemo, kapa doxxing ho foreima seva ea hau, etsa screenshot Audit Log e bonts'ang setempe sa nako sa mohlaseli le ho thibela ketso, kopitsa lets'oao la kamehla la mohlaseli Discord User ID, 'me ba tlalehe molaetsa pele ho **Right-Click Messages - Report a Right-Click & Polokelo ea polokelo ea polokelo e tlaleha uena joalo ka mohlahlobi ea tlalehang ho e-na le ho ba mong'a seva.

Sefate sa liqeto: Ho hlahloba le ho emisa tlhaselo ea sechaba ka nako e ka tlase ho metsotsoana e 60¶

Hlalosa hore na ke life ho tse 'ne tsa bosholu tse ntseng li etsahala hona joale 'me u phethe tatellano e nepahetseng ea ho bolaea ka tlase.

flowchart TD
    RaidStart["Tlhaselo ea Seva e Matla, Moroallo oa Spam, kapa ho Hlakoa ha Channel ho fumanoe"] --> PauseInvites["MOHATO 1: Tobetsa Lebitso la Seva -> Liketso Tsa Tšireletso -> Nolofatsa 'Emisa Memo' & 'Emisa li-DM'"]
    PauseInvites --> AuditCheck["MOHATO 2: Open Server Settings -> Audit Log ho Khetholla Motšoantšisi"]
    AuditCheck --> VectorType{"Tlaleho ea Audit kapa Chat e bontša eng?"}
    VectorType -->|"Ho Kenela Liak'haonte tse Ncha tse makholo le li-Spamming Chat/DMs"| JoinRaid["KAROLO EA KA NTLE: Hlobola @emong le e mong 'Romela Melaetsa', 'Hokela Lifaele', & 'Bolela @mong le e mong' -> Phahamisa Boemo ba Netefatso ho 'Holimo (Mohala o Tiisitsoeng)' -> Numella Sefe ea Spam ea AutoMod"]
    VectorType -->|"Melaetsa e tšoailoeng 'APP/BOT' Spamming @emong le e mong, Sebapali ha se Lethathamong la Litho"| WebhookRaid["WEBHOOK SPAM ATTack: Bula Litlhophiso tsa Seva -> Likopano -> Li-Webhooks -> Hlakola Li-Webhooks Tsohle Tse sa Tsejoeng -> Audit Ke Mang a li Thehileng ho Audit Log"]
    VectorType -->|"Ak'haonte ea Motho ea Mookameli kapa Motsamaisi e Hlakola liteishene / E thibela Basebelisi"| ModCompromised["TOKEN EA COMPROMISED MODERATOR TOKEN: Hula Karolo ea Mod Ka Tlas'a Hao kapa Litumello Tsa Karolo ea Hao -> Thibela Ak'haonte ea Mod e Senyehileng -> E-ba le Mod Wipe PC e tšoaelitsoeng 'me U sete Lentsoe la lekunutu bocha"]
    VectorType -->|"Ak'haonte ea Bot ke Mecha e Hlakolang ka Bongata, e Theha Likarolo, kapa e Thibela"| BotNuke["COMPROMISED BOT TOKEN NUKE: Litumello tsa Karolo e Laoloang ea Strip Bot ho Zero -> Seta Bot Token ho Motlakase Portal (discord.com/developers) -> Kick/Ban Bot & Revoke OAuth2"]
    JoinRaid --> EvidenceClean["MOHATO OA 3: Tlaleha Melaetsa Efe kapa Efe e seng molaong ka Tlaleho ea In-App Pele -> Matha ho Hlakola / Pholoso ea Melaetsa"]
    WebhookRaid --> EvidenceClean
    ModCompromised --> EvidenceClean
    BotNuke --> EvidenceClean

Karolo ea 1: Protocol ea Lockdown ea metsotsoana e 60 (Ho emisa ho tsoa ha mali)¶

Ha tlhaselo kapa seva e qala, batsamaisi ba batho ba ke ke ba thibela li-account ka potlako ho feta Python kapa Go script e lelekang likopo tse tšoanang khahlano le Discord REST API (50 requests per second). U tlameha ho khaola bokhoni ba mohlaseli oa API boemong ba tlhophiso ea seva.

1. Joang ho hatsetsa mosebelisi-Bot Join Raid ka metsotsoana e 15¶

Haeba makholo a liak'haonte tsa ho lahla a ikopanya le seva sa hau le liteishene tsa likhohola kapa a hohela litho tsa hau ka bongata. "Free Nitro" kapa "Crypto Airdrop" lihokelo tsa phishing: 1. ** Qala "Liketso Tsa Tšireletso" (Pause Invites + Pause DMs):** - Tobetsa ho theoha ha Lebitso la Seva ** (holimo ka ho le letšehali) -> ** Liketso tsa Tšireletso . - Sheba Emisa Limemo (e khutla "Invites are currently paused for this server" ho sehokelo sefe kapa sefe sa kantle kapa tobetsa ea Vanity URL) le ** Emisa li-DM ** (e thibela bao e seng metsoalle ho seva ho qala likhoele tse ncha tsa molaetsa o tobileng). 2. Phahamisa Boemo ba Netefatso ho Bokaholimo (Highest - Phone Verified): - Eya ho Litlhophiso tsa Seva -> Tlhophiso ea Tšireletseho -> Boemo ba Netefatso -> tobetsa ** Fetola ** -> khetha ** E phahameng ka ho Fetisisa (E tlameha ho ba le mohala o netefalitsoeng akhaonteng ea bona ea Discord). - Li-botnets tse ngata tse ikemetseng li itšetlehile ka li-tokens tse netefalitsoeng ka lengolo-tsoibila.$0.01 per token) ho ena le diakhaonto tse netefaditsweng ke SMS. Ho fetohela ho ** Phahameng ka ho Fetisisa ** hang-hang ho thibela li-tokens tsa bot tse sa netefatsoang tse seng li ntse li le ka har'a seva ho tloha ho romella melaetsa kapa litho tsa melaetsa. 3. Notlela @everyone Litumello tsa Channel Lefatšeng ka Bophara: - Eya ho Litlhophiso tsa Seva -> Mesebetsi -> Litumello tsa kamehla (@everyone). - TIMA: - Send Messages le Send Messages in Threads - Create Public Threads le Create Private Threads - Attach Files le Embed Links - Add Reactions le Use External Emoji / Stickers - Mention @everyone, @here, and All Roles - Tlhahlobo ka Bohlokoa bakeng sa Litlaleho tsa Tumello ea Channel: Haeba mocha o itseng (joalo ka #general kapa #chat) e na le Tlhahiso e Tala (Allow) fetisa holim'a @everyone karolo bakeng sa Send Messages ka hare ** Edit Channel -> Litumello **, ho fetola karolo ea lefats'e ea Litlhophiso tsa Seva ho ke ke ha **** ho notlela mocha oo. Bakeng sa kanale efe kapa efe e ntseng e tsamaea ka spam, tobetsa Letšoao la Gear (Edita Channel) -> Litumello -> @everyone mme o sete Send Messages ho Rhubedu X (Deny) kapa lumella Slowmode (6 hours).

2. Mokhoa oa ho emisa tlhaselo ea "Webhook Spam" ka metsotsoana e 15¶

Beng ba li-server ba bangata ba tšohile ba nahana hore seva ea bona kaofela e utsuoe hobane mosebelisi ea bitsoang "Server Nuke Syndicate" le APP (pele BOT) beche e pinging @everyone makhetlo a 5 ka motsotsoana #announcements 'me e ke ke ea tobetsoa ka nepo le ho thibeloa. - Hobaneng o sa khone ho thibela Webhook: Discord Webhook ke ntlha e bonolo ea HTTP (https://discord.com/api/webhooks/{webhook.id}/{webhook.token}). Mang kapa mang ea fumanang URL eo (ebang ke hobane mookameli a e bonts'itse ka phoso sebakeng sa marang-rang, a e beha polokelong ea sechaba ea GitHub, kapa a e-na le ak'haonte ea mod e senyehileng) a ka romella litefiso tse sa lekanyetsoang tsa JSON seteisheneng seo ntle le ho ba setho sa seva sa hau sa Discord. - Ho e bolaea hang-hang: 1. Bula Litlhophiso tsa seva -> Likopano -> Li-Webhooks. 2. Sheba lethathamo la li-Webhooks 'me u bone hore na e mong le e mong o supa mocha ofe. 3. Tobetsa ho Webhook e 'ngoe le e 'ngoe e sa tsejoeng ebe o tobetsa Delete Webhook (kapa tobetsa Copy Webhook URL bakeng sa lintlha tsa forensic pele, ebe Delete Webhook). Spam e emisa millisecond ha Webhook e hlakotsoe. 4. Bula hanghang Litlhophiso tsa Seva -> Buka ea Litlhahlobo -> Sefa ka Ketso: Create Webhook ho bona ke efe* mookamedi kapa akhaonto ya bot e thehileng Webhook eo. Haeba ak'haonte ea mookameli e thehile Webhook ka 3:00 AM ntle le tsebo ea bona, tokene eo ea "Discord session token" e senyehile: hlobola karolo ea bona 'me u rahe ak'haonte ea bona hang-hang.

Karolo ea 2: Ho emisa "Server Nuke" ea ka hare (Compromised Moderator vs. Compromised Bot Token)¶

"Server Nuke" e etsahala ha mohlaseli a sekisetsa akhaonto kapa bot e nang le tumello e phahameng ea tsamaiso (Administrator, Manage Channels, Manage Roles, Ban Members, Manage Webhooks) mme e tsamaisa mongolo oa timetso o ikemetseng (Nuker). Ka metsotsoana e 10, sengoloa se kenella ho ID e 'ngoe le e' ngoe ea mocha ho hlakola liteishene tsohle tsa mongolo le lentsoe, se theha liteishene tse ncha tse 250 tse rehelletsoeng. #nuked-by-xxx, e hlakola likarolo tsohle tsa li-server, 'me e chese likopo tse thibelang batho ba bangata khahlanong le lenane la litho.

1. Molao oa Tsamaiso ea Karolo ea Discord (Hobaneng o ka khona ho emisa kapa o sa khone ho emisa Mookameli ea khopo)¶

Discord e tiisa ts'ebetso e tiileng Boemo ba Karolo ka hare ho Litlhophiso tsa Seva -> Mesebetsi: - Mong'a Seva (Mofani oa Moqhaka) o lutse ka holim'a karolo e 'ngoe le e 'ngoe ea seva mme a ka hlobolisa kapa a thibela motho leha e le ofe kapa bot ho sa tsotellehe hore na ke karolo efe. - **Motsamaisi Mang kapa Motho eo e seng Mong'a ona FEELA a ka fetola, a hlobolisa, kapa a thibela basebelisi le bots FEELA bao karolo ea bona e phahameng ka ho fetisisa e leng ka tlase ho 'mele karolo ea bona e phahameng ka ho fetisisa lethathamong la Litlhophiso tsa Seva -> Mesebetsi. - Haeba karolo e laoloang ea bot e senyehileng e behiloe ho #2 lethathamong la Likarolo le Batsamaisi ba Hlooho bao u ba tšepang ba lutse ho #3, Baokameli ba Hlooho ea hau ha ba na matla a ho raha bot kapa ho fetola karolo ea eona ha uena (Mong'a Seva) u robetse.

2. Tatelano e nepahetseng ea ho fokotsa Bot Nuke ea Compromised¶

Haeba Audit Log e bonts'a ak'haonte ea bot (ebang ke bot ea hau ea tloaelo ea seva kapa bot ea mokha oa boraro e robehileng) e hlakola liteishene kapa e thibela litho, latela taelo ena ea mehato e 3:

3. Baokameli ba utsuoa joang li-tokens tsa bona tsa Discord (Le hore na ke hobane'ng ha 2FA E SA e emise)¶

Hobaneng ha mookameli oa hau eo u mo tšepang ka ho fetisisa, ea nang le SMS le Authenticator App 2FA e lumelletsoeng akhaonteng ea bona ea Discord, ka tšohanyetso a ile a qala ho tima seva ka 4:00 AM? - Kamoo Li-Tokens tsa Tiiso tsa Discord li Sebetsang: Moreki oa komporo ea Discord (e hahiloeng holim'a Electron/Chromium) le libatli tsa marang-rang li boloka lets'oao le phehellang la netefatso ea mosebelisi ka har'a polokelo e patiloeng ea lehae (%AppData%\discord\Local Storage\leveldb ho Windows). - The 3 Token-Theft Vectors: 1. Fake Game Beta / netefatso Malware (Lumma, RedLine, Blank Grabber, Emerald Stealer): Sehlopha se hlaselang se DM mookamedi wa hao a ba kopa hore ba leke papadi ya indie kapa ba hlahlobe boipiletso ba thibelo .zip faele. Malware e ntša tokene ea "Discord decrypted decrypted" mme hangata e fetola JavaScript ea lehae ea moreki oa Discord.core.asar / index.js injection) e le hore leha mookameli a fetola phasewete ea hae, sesebelisoa sa Discord se trojanized hang-hang se romela letšoao la e lecha ho webhook ea mohlaseli. 2. ** "Bookmarklet" e mpe kapa Developer Console (F12) Boenjiniere ba Sechaba:** Baqhekelli ba qhekella basebelisi ho hulela "Verify Account" bookmarklet bareng ea bona ea sebatli kapa ho maneha snappet ho Ctrl + Shift + I console, e balang letšoao le phelang ka kotloloho ho tsoa mohopolong. 3. ** Fake "Captcha Verification Bot" QR Code Scan (Wick / DoubleCounter Clones):** Bahlaseli ba romela molaetsa oa netefatso ea seva e seng ea nnete e kopang mookameli ho "Skena khoutu ena ea QR ka Discord Mobile App ho netefatsa hore u motho." Ho skena khoutu ea QR ea Discord Login ho sesebelisoa sa mobile hang hang ho fana ka phihlello ea nako eohle ea ho kena ak'haonte ho sebatli sa desktop sa mohlaseli, ho feta password le 2FA ka botlalo.

Karolo ea 3: Sechaba sa Reddit (Subreddit) Pholiso ea Mohlahlobi ea Hlasetsoeng le ea Sekiselitsoeng¶

Haeba u lekanya sechaba sa Reddit (r/YourSubreddit) 'me u fumane hore ak'haonte ea mohlahlobi e senyehileng e amohile CSS/Wiki, e thibetse basebelisi ba makholo, ea nkela tlhaloso ea subreddit ka lihokelo tsa scam, kapa e behile subreddit ho **Private / Restricted **, kapa hore likete tsa li-coordinate brigade bots li tletse mokoloko:

1. Hanghang Subreddit Lockdown & Rogue Moderator Tlosa¶

1. Sheba Sehlopha sa Moderator (Mod Tools -> Moderators):
2. Joalo ka Discord, Reddit e tiisa *maemo a phahameng a holimo-tlase lethathamong la Batsamaisi ho latela letsatsi leo mookameli e mong le e mong a kentsoeng ka lona.
3. Mookameli ofe kapa ofe ea nang le Everything (Litumello tse Felletseng) folakha e ka tlosa kapa ea hlobolisa litumello ho mookameli ofe kapa ofe ea thathamisitsoeng ** ka tlase** ea tsona leqepheng, **empa e ke ke ea ama mookameli leha e le ofe ea thathamisitsoeng ka holimo ho tsona **.
4. Haeba mookameli ea sekiselitsoeng a thathamisitsoe ka tlase uena: bula hang-hang **Mod Tools -> Moderator -> Editable **, tobetsa letšoao la pentšele le haufi le mookameli ea sekiselitsoeng, u se kenye Everything, ebe o tobetsa **Tlosa **.
5. Sheba Mod Log (https://www.reddit.com/r/YOURSUBREDDIT/about/log):
6. Sefa Moderation Log ka lebitso la mosebelisi le senyehileng (Moderator dropdown) le ka Ketso (banuser, wikirevise, editsettings, removelink, removemoderator).
7. ** Kenya tšebetsong Reddit "Tlhaloso ea Bongata" le "Lifilimi tsa Tšireletseho" Nakong ea Tlhaselo e Ntle ea Brigade: **
8. Bula Lisebelisoa tsa Mod -> Lisefe tsa Tšireletso -> Taolo ea Bongata.
9. Beha Boemo ba Poso le Boemo ba Maikutlo ho Boholo / Bo thata (e ts'oara maikutlo le litaba ka bo eona ho tsoa ho basebelisi ba nang le subreddit karma e mpe, liakhaonto tse ncha, le basebelisi ba e-so kene sechabeng pele tlhaselo e qala).
10. Numella Sesefo sa Tlhobotsi le Thibela Sesefo sa ho Qoba (se sebelisang mongolo oa menoana ea sesebelisoa sa Reddit le IP telemetry ho tlosa li-post tsa liakhaonto tse sa tsoa etsoa tsa bahlaseli ba thibetsoeng).
11. Eketsa Hanghang AutoModerator Molao oa ho Lockdown ha Tšohanyetso:
12. Bula ** Lisebelisoa tsa Mod -> Automod (wiki/config/automoderator)** ebe u beha heke ena ea hang-hang ea tšohanyetso holimo ho ts'oara kapa ho tlosa lipapatso / maikutlo ohle ho tsoa liak'haonteng tse ka tlase ho matsatsi a 30 kapa ka karma e tlase ea subreddit:

    ---
    # EMERGENCY RAID LOCKDOWN RULE
    type: any
    author:
        account_age: "< 30 days"
        combined_subreddit_karma: "< 10"
        satisfy_any_threshold: true
    action: filter
    action_reason: "Emergency Raid Lockdown: New account or low subreddit karma [{{match}}]"
    ---
    

2. Seo U Lokelang ho se Etsa Haeba "Mookameli ea Phahameng" oa Subreddit ea Hao a ne a Sekiselitsoe ('Me a Tlosa Sehlopha sa Mod)¶

Haeba ak'haonte ea #1 Top Moderator ho subreddit ea hau e koetsoe (kapa e rekiloe ke mokhatlo oa li-spam tsa crypto/onlyfans) mme ea tlosa sehlopha sohle se molaong sa taolo: 1. Se ke oa leka ho qhekella subreddit ea hau e koetsoeng. 2. Etsa hore mookameli oa bobeli ea tlositsoeng a romele Modmail ka kotloloho ho r/ModSupport(https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Compromised+Top+Moderator+Emergency+Rollback). 3. Hobaneng r/ModSupport Modmail Ke Seteishene sa Semmuso sa Phahamiso: Ho fapana le lipapatso tsa sechaba ho r/redditrequest (tseo e leng tsa li-subreddits tse lahliloeng), **r/ModSupport Modmail e sebetsa ka kotloloho ke Reddit Community Admins ** e nang le sesebelisoa sa kahare sa Mod Action Rollback Tool. 4. Fana ka: - Lebitso le hlakileng la subreddit (r/...); - Lebitso la mosebedisi la Setsi sa Modiredi e Moholo o senyehileng (u/...); - Setempe sa nako sa UTC se nepahetseng ha sehlopha se nepahetseng sa mod se ne se hloekisoa 'me wiki/sidebar/pins e sentsoe; - Lits'oants'o tsa litsebiso tsa hau tsa ho tlosa Modmail. 5. Seo Reddit Admins se Khutlisang: Batsamaisi ba Reddit ba notlela ak'haonte ea Top Moderator e senyehileng, ba khutlisa liphatlalatso tsohle tsa bahlahlobi, lithibelo, liphetoho tsa wiki, le liphatlalatso tsa poso tse entsoeng nakong ea tlolo ea molao, 'me ba khutlisetse mookameli ea setseng ea setseng #1 Top Moderator setulo.

Karolo ea 4: Pholoso ea Kamor'a Tlhaselo: Na Mecha e Hlakotsoeng ea Discord le Basebelisi ba Hanetsoeng ka Bongata ba ka Tsosolosoa?¶

Hang ha tlhaselo e emisitsoe 'me bot / mookameli oa rogue a tlosoa, beng ba li-server ba tobana le' nete e thata ka ho fetisisa ea ts'ebetso ea meralo ea Discord:

1. Na Tšehetso ea Discord e Khutlisa Mecha kapa Melaetsa e Hlakotsoeng Ka mor'a Nuke ea Seva?¶

• 'Nete e Thata ea Tekheniki: Ho fapana le YouTube (e bolokang li-blobs tsa video tse hlakotsoeng sebakeng se batang matsatsi a 14 ho isa ho a 30) kapa Reddit (moo liphatlalatso "tse tlositsoeng" li patiloeng feela mme li-Admins li ka khutlisa Mod Log), ha seteishene se hlakotsoe ho Discord (DELETE /channels/{id}), polokelongtshedimosetso ya Discord's Cassandra/ScyllaDB e hlakola ntho ya kanale ka ho sa feleng le mela yohle ya melaetsa e ka hare ho yona.
• Discord Trust & Polokeho HA E TLA khutlisa liteishene tse tlositsoeng, likarolo tse hlakotsoeng, kapa nalane ea melaetsa e hlakotsoeng ka mor'a seva e senyehileng kapa bot nukes.
• Seo Discord Trust & Safety SE KA SE busetsang: Haeba seva ea hau kaofela e felisitsoe/e holofalitsoe ke Discord Trust & Safety hobane bahlaseli ba rometse litaba tse lonya ho u foreimi, kapa Ak'haonte ea Mong'a Seva ea hau e koetsoe 'me mohlaseli a fetisetsa Bolaoli ba Seva (Transfer Ownership) ho akhaonto ea bona, ho kenya Akhaonto e Senyehileng / Tikete ea Bolaoli ba Seva ho https://dis.gd/request e lumella basebetsi ba Discord ho khutlisetsa ** Moqhaka oa Mong'a Server ** ho khutlela akhaonteng ea hau e fumanoeng.

2. Mokhoa oa ho Haha Bocha Mecha le Likarolo le ho Tlosa Litho tse thibetsoeng ka bongata ka potlako¶

1. Ho Aha bocha Liteishene le Likarolo (Lithempleite tsa Server & Backup Bots):
2. Haeba u kile ua hlahisa letsoalloa Discord Server Template (Server Settings -> Server Template) kapa o nkile senepe sa tlhophiso ka "backup bot" e tsebahalang (joalo ka Xenon Bot, e tšehetsang maemo a liteishene, mebala ea karolo, le tumello ea ho ngola, leha e se melaetsa ea nalane ea basebelisi), o ka khutlisa mocha oa hau le skeleton ea hau ka nako e ka tlase ho metsotso e 2.
3. Lithibelo tsa Bongata tsa ho Fetola ka Bongata ka Lenane la Litlhahlobo:
4. Haeba bot e senyehileng e thibela litho tse 500 tse molaong nakong ea nuke ea metsotso e 2, bula Litlhophiso tsa Seva -> Tlaleho ea Tlhahlobo -> Sefa ka Ketso: Ban Member -> Sefa ka Mosebelisi: [The Compromised Bot/Mod].
5. Kenyelletso e 'ngoe le e' ngoe ea thibelo ho Lebokose la Libuka e bonts'a ID ea mosebelisi e nepahetseng le setempe sa nako sa motho ea hlasetsoeng a thibetsoeng fensetereng eo ea metsotso e 2. U ka li thibela ka letsoho ka Litlhophiso tsa Seva -> Lithibelo, kapa u sebelise taelo e tšepahalang ea bot (joalo ka Carl-bot, Dyno, kapa mokhoa o bonolo oa ho bala mongolo oa tsamaiso ea mela e 15. guild.audit_logs(action=discord.AuditLogAction.ban) tlhotliloeng ka thata ho entry.user.id == COMPROMISED_ACTOR_ID) ho letsetsa ka tsela e iketsang guild.unban(entry.target) ho setho se seng le se seng se molaong se thibetsoeng ke setšoantšisi seo sa molotsana.
6. Ho Hlakola Liketekete tsa Melaetsa ea Raid Ntle le ho Hlakola Channel:
7. Haeba kanale e tletse melaetsa ea spam e 2,000, u se ke oa hlakola le ho kopanya kanale ntle le haeba u batla ho lahleheloa ke melaetsa eohle ea khale ea molao, melaetsa e pineng, le likhokahano tsa webhook.
8. Sebakeng seo, sebelisa e hahelletsoeng ka har'a Discord ** Tobetsa ka ho le letona Raider -> Thibela -> Hlakola Nalane ea Molaetsa: Previous 24 Hours (kapa Previous 7 Days)**, e hlakisang molaetsa o mong le o mong o rometsoeng ke mohlaseli eo ho kanale e 'ngoe le e 'ngoe ka har'a seva ka nako e le ngoe.
9. Bakeng sa spam ea li-account tse ngata, sebelisa bot e netefalitsoeng ea ho lekanya /purge taelo (up to 100 to 1,000 messages under 14 days old ka Discord's Bulk Delete API endpoint).

Karolo ea 5: Lethathamo la Litlhaselo tsa ka ho sa Feleng le Lethathamo la ho Raid-Hardening ea Sechaba¶

Hang ha seva sa hau se tsitsitse, lokisa tsena ** tse tšeletseng tse hahelletsoeng ka har'a li-zero-four-four-forum ** e le hore botnet ea tlhaselo e kantle kapa PC e le 'ngoe e tšoaelitsoeng e ke ke ea hlola e senya seva ea hau hape:

1. Numella li-Filter tsa Native tsa Discord "AutoMod" (Server Settings -> Safety Setup -> AutoMod)¶

Letsoalloa la Discord AutoMod le thiba le ho thiba meputso pele molaetsa o fanoa moqoqong kapa o hlahisa tsebiso mehalang ea litho: - Thibela ho Bua Spam: Beha Moeli oa ho Bua ho **5 (kapa 3) lipolelo tse ikhethang ka molaetsa o mong le o mong **, ebe u khetha Thibela Molaetsa + Setho sa Nako e Felletseng (1 Hour kapa 24 Hours) + Romela Tlhokomeliso. Sena se etsa hore ho se khonehe 'meleng hore mohlaseli a ping basebelisi ba 30 ka molaetsa o le mong. - Thibela Likahare tse belaelloang tsa Spam & Mantsoe a Tlwaelehileng a Tlalehang: Fetolela ho manane a hahelletsoeng ka bobeli. - Mantsoe a Tloaelehileng le Melao ea Regex bakeng sa Scam: Eketsa molao oa tloaelo oa AutoMod o thibelang mekhoa e tloaelehileng ea bolotsana: - Mantsoe a sehlooho: *discord.gift*, *steamcommunity.com/gift*, *free nitro*, *airdrop claim*, *t.me/*, *whatsapp.com*. - Mekhoa ea Regex e ts'oara lihokelo tsa memo tse sa hlakang: (?:https?://)?(?:www\.)?(?:discord\.(?:gg|io|me|li)|discordapp\.com/invite)/[a-zA-Z0-9-]+ (ho lokolla mesebetsi ea hau ea basebetsi).

2. Etsa hore "Hloka 2FA bakeng sa liketso tsa Moderator" (Server Settings -> Safety Setup -> Permissions)¶

• Ho bulela Server-Wide 2FA Requirement e qobella Discord's API ho netefatsa hore mosebelisi ofe kapa ofe ea lekang ho hlakola liteishene, ho thibela litho, ho laola mesebetsi, kapa ho laola li-webhooks o na le Tiiso ea Lintho tse peli e sebetsang akhaonteng ea bona.
• ** Habohlokoa le ho feta, hlobolisa Administrator tumello ho tsoa ho Likarolo TSOHLE tsa Mookameli oa Batho le 99% ea Bots:**
• Molao oa Khauta oa Ts'ireletso ea Discord: Hoo e ka bang ** ha ho mookameli oa motho ebile ha ho bot ea sepheo se akaretsang e kileng ea hloka Administrator switjha e butswe.**
• Hobaneng? The Administrator fetola lithuso tse felletseng holim'a senotlolo se seng le se seng sa liteishene, lithuso Manage Webhooks, lithuso Manage Server, 'me e lumella mod e sekiselitsoeng nuke seva ka metsotsoana e 3.
• Sebakeng seo, fa Baokameli ba hau ba batho feela Kick Members, Ban Members, Moderate Members (Timeout), le Manage Messages. Ba fe zero tumello ea ho Delete Channels, Manage Roles, kapa Manage Webhooks. Haeba PC ea mookameli e ka tšoaetsoa ke motho ea utsoang matšoao, mohlaseli ** a ke ke a hlakola mocha o le mong 'me a ke ke a etsa webhook e le' ngoe **.

3. Kenya ts'ebetsong "Bot Quarantine & Anti-Nuke Rate Limiting"¶

• Tlhahlobo Server Settings -> Integrations Kgwedi le kgwedi: Tlosa bot e nngwe le e nngwe e sa sebediswang ya mmino, mini-game bot, kapa bot ya netefatso eo o e kentseng dilemong tse fetileng. Litlhaselong tse 'maloa tse kholo tsa nalane, seva sa marang-rang se lahliloeng sa bot se ile sa thuloa ke linokoane tse sebelisitseng boroko ba eona. Administrator karolo ea ho hlasela li-server tse 10,000 ka nako e le 'ngoe.
• Le ka mohla Grant Administrator Ha U Mema Bot: Ha u fana ka tumello ea bot ka OAuth2 URL (discord.com/oauth2/authorize?...&permissions=8), hlokomela seo permissions=8 ke bitfield bakeng sa ho tlala Administrator. Tlosa ho hlahloba Administrator ka potlako ea OAuth 'me u fane feela ka litumello tse khethehileng tseo bot e li hlokang.
• Boikhethelo ba Anti-Nuke Watchdog: Ho li-server tse kholo (10,000+ members), beha Anti-Nuke Rate-Limiter Bot* e netefalitsoeng (e kang Wick)* ka holimo ho Lefapha la Boikarabello ba Mosebetsi (#1 Position ka tlas'a Mong'a Seva)** e lokiselitsoe hore haeba mookameli kapa bot e hlakola liteishene tse fetang 2 ka metsotsoana e 60 kapa e thibela ho feta basebelisi ba 5 ka metsotsoana e 60, molebeli o tla amoha sebapali seo hore se be zero ka 200 milliseconds.

Linomoro tsa libaka tsa tšohanyetso le liprothokholo tsa mekhatlo¶

Ha litlhaselo tsa sechaba li kena botlokotsebe bo feteletseng ba marang-rang, bosholu, litšokelo tse fetelletseng, kapa ho ajoa ha Lisebelisuoa tsa Tlhekefetso ea Bana ka Thobalano (CSAM), latela liprothokholo tsena tsa semmuso hanghang:

• Tlaleho ea Global CSAM (E Tlamehileng): Le ka mohla u se ke ua khoasolla, ua boloka, kapa ua fetisa linepe tse nang le CSAM. Sebelisa ka hare ho app ea Discord Molaetsa oa Tlaleho -> Ho Intša Kotsi kapa Boitsebiso ba Tlhekefetso ea Thobalano (e fetisang hashi e khomaretsoeng ka lehlakoreng la seva le e kenyang IP ka kotloloho ho Setsi sa Naha sa Bana ba Lahlehileng le ba Hatelloang, NCMEC CyberTipline), kapa tlaleha ho report.cybertip.org (1-800-843-5678) US kapa Internet Watch Foundation (iwf.org.uk) UK/EU. Bona kholiso ea bana, ho kopana le libatana, le tlaleho ea NCMEC.
• United States: Tlaleha litlhaselo tsa bosholu, litšokelo, kapa litlhaselo tsa DDoS ho Setsi sa Litletlebo sa Botlokotsebe ba Marang-rang sa FBI (ic3.gov). Haeba mookameli a tsielehile 'me a tšosoa ka ho romela molaetsa oa tšohanyetso oa bohata ("Swatting"), letsetsa mapolesa a sebakeng sa heno **setafole sa tšohanyetso sa maemo a tšohanyetso ** hang-hang ho beha Swatting / Premise Alert Note atereseng ea hau. Bakeng sa kotsi e potlakileng ea 'mele, letsetsa 911.
• Canada: Tlaleha bosholu ba marang-rang le litlhaselo tsa litaba tse seng molaong ho Setsi sa Canada sa Tšireletso ea Bana (cybertip.ca), Setsi sa Khahlanong le Bomenemene sa Canada (1-888-495-8501), kapa mapolesa a lehae (911 maemong a tšohanyetso).
• United Kingdom: Tlaleha tšebeliso e mpe ea khomphutha le bosholu ba marang-rang ho Boqhekanyetsi ba Ketso (actionfraud.police.uk, 0300 123 2040) le ho tlaleha tlhekefetso e seng molaong ho Internet Watch Foundation (iwf.org.uk) kapa CEOP (ceop.police.uk). Nomoro ea maemo a tšohanyetso: 999 kapa 112 (mapolesa ao e seng a tšohanyetso: 101).
• European Union: Tlaleha puo e seng molaong ea lehloeo, litaba tsa bokhukhuni, kapa litlhaselo tsa CSAM ka naha ea heno INHOPE (inhope.org) setsi sa mohala le sepolesa sa cybercrime tlasa EU Digital Services Act (DSA). Nomoro ya tshohanyetso: 112.
• Australia le New Zealand: Australia, li tlalehela **eSafety Commissioner tlhekefetso e matla ea marang-rang kapa litlhaselo tse seng molaong ho eSafety Commissioner (esafety.gov.au) le ReportCyber (cyber.gov.au, 1300 292 371). New Zealand, tlalehela Netsafe (netsafe.org.nz, 0508 638 723). Linomoro tsa tšohanyetso: 000 (Australia), 111 (New Zealand).
• India le Asia-Pacific: India, kenya tlaleho hang hang ho ** National Cyber Crime Reporting Portal (cybercrime.gov.in, mohala oa thuso 1930)**. Sheba lethathamo la rona le felletseng ho dinomoro tsa tshohanyetso.

Lipotso tse botsoang khafetsa¶

Hobaneng ba @everyone li-spam pings li ntse li hlaha ka mor'a hore ke thibele bahlaseli le ho notlela @everyone ditumello?¶

Ha melaetsa ea spam e tsoela pele ho tšollela mocha o nang le **`APP`** kapa **`BOT`** tag haufi le lebitso la mosebelisi 'me u ke ke ua tobetsa mosebelisi ka ho le letona ho ba thibela, mohlaseli o sebelisa **Discord Webhook** ho fapana le ak'haonte ea mosebelisi. Li-webhooks ha li hlahe lenaneng la Litho tsa Seva ea hau 'me u iphapanyetse `@everyone` karolo lithibelo tsa ho romela molaetsa. Bula ** Litlhophiso tsa Seva -> Likopano -> Li-Webhooks **, fumana Webhook e supang mocha o amehileng, 'me u tobetse **Delete Webhook**. Ka mor'a moo, hlahloba **Litlhophiso tsa seva -> Audit Log** e tlhotliloeng ka `Create Webhook` ho bona hore na ke molaodi ofe kapa bot e e entseng.

Haeba ke raha kapa ke thibela bot e senyehileng nakong ea seva ea nuke, e ka ikopanya joang ka boeona?¶

Bot e ke ke ea itlhahisa ka bo eona, **empa** haeba mohlaseli le eena a sekisitse tokene ea "discord" ea motho (kapa e filoe). `Manage Server` / `Administrator` ho karolo e patiloeng ea bobeli ha bot e ntse e laola), sengoloa sa mohlaseli se sebelisa lets'oao leo la motho ho fana ka tumello ea ho mema URL ea OAuth2 ea bot (`permissions=8`) motsotsoana ka mor'a hore u e rahe. Ka ho amoha litumello tsa karolo ea bot ho zero pele, ho khutlisetsa Bot Token kahare `discord.com/developers/applications`, le ho hlahloba **Audit Log** bakeng sa mesebetsi e sa lumelloeng e filoeng litho tsa batho, u khaolitse bot le vector ea eona ea ho memela bocha.

Na Discord Support e ka khutlisa seva ea ka 'me ea khutlisa liteishene tsa ka tse tlositsoeng haeba senokoane se e kopile?¶

Che. Ho fapana le Reddit kapa YouTube, Discord ha e boloke linepe tsa liteishene tse tlositsoeng, mesebetsi e tlositsoeng, kapa melaetsa e hlakotsoeng ho li-server tsa eona tsa database. Hang a `DELETE /channels/{id}` Kopo ea API e etsoa ke akhaonto e ts'oereng `Manage Channels` kapa `Administrator` tumello, likanale tseo le nalane ea melaetsa ea tsona li hlakotsoe ruri. Leha ho le joalo, haeba senokoane se fetisitse **Bolaoli ba Seva ** hole le akhaonto ea hau e senyehileng, kapa haeba seva sa hau se holofalitsoe ka phoso ke Trust & Safety nakong ea tlhaselo ea meralo, e fana ka tekete ho `dis.gd/request` tlas'a ** Akhaonto e Hacked / Bolaoli ba Seva ** e lumella Tšehetso ea Discord ho khutlisetsa moqhaka oa Mong'a Seva ho uena.

Ak'haonte ea mookameli e ile ea koeteloa ke motho ea utsoang litaba 'me ea senya seva sa rona. Na ho bolokehile ho ba fetola hape ka mor'a hore ba fetole password ea bona?¶

Le ka mohla u se ke ua khutlisetsa litumello tsa mookameli ho mosebeletsi ea senyehileng hobane feela a fetotse li-password tsa bona komporong e le 'ngoe. Ba utsoang li-token tsa kajeno tsa Discord (`Lumma`, `Blank Grabber`, `RedLine`) kenya litefo tse sa khaotseng tsa JavaScript ka kotloloho ho ts'ebeliso ea komporo ea Discord `index.js` / `core.asar` lifaele ka `%AppData%\discord`. Hang ha mookameli a khutlela ho PC e sa hlakoloang, mongolo o kentsoeng o utsoa letšoao le lecha ebe o le khutlisetsa ho mohatelli. E hloka hore mookameli a kenye Windows e hloekileng ea USB pele a ba fa mesebetsi hape.

Ke sireletsa seva ea ka joang khahlanong le scam ea "Fake QR Code Verification" e koetelang batsamaisi le litho?¶

Ruta basebetsi le sechaba sa heno hore **ha ho na bot ea netefatso ea Discord e nepahetseng (`Wick`, `DoubleCounter`, `Pandez`, `Sledgehammer`) e tla hlola e o kopa ho skena khoutu ya QR o sebedisa kh'amera ya Discord mobile app.** Sekena sa khoutu ya QR se hahelletsweng ho Discord mobile app se teng bakeng sa ho kenya komporo e ncha ya komporo akhaonteng ya hao ya Discord. Koetlisa batsamaisi ho thibela li-DM tse kenang ho tsoa ho bao e seng metsoalle tlas'a ** Litlhophiso tsa Basebelisi -> Content & Social -> Litumello tsa Sechaba** 'me le ka mohla u se ke ua hlahloba khoutu ea QR kapa ua tsamaisa `.exe`/`.zip` faele e rometsoe ka DM.

Litataiso tse amanang¶

• Ho nkeloa ak'haonte ea litaba tsa sechaba le ho hacking
• Ho tlaleha litaba tse seng molaong le tse kotsi inthaneteng
• Boikoetliso ba bana, ho kopana le libatana, ho qhekella bana ka thobalano, le tlaleho ea NCMEC
• Tlhekefetso ea Marang-rang, doxxing, le cyberbullying
• Seteishene sa baqapi se koetsoe ke li-crypto scam livestreams
• Linomoro tsa maemo a tshohanyetso

Mehloli le tataiso ea semmuso¶

• Setsi sa Discord Trust & Safety le Safety (discord.com/safety): Ho Sireletsa Seva ea Hao ho Tlhaselo (Safety Setup, AutoMod, Raid Protection, le Security Actions: Emisa Limemo / Emisa li-DM) le Boemo ba Litumello le Netefatso ea Lintlha tse peli bakeng sa Batsamaisi.
• Litokomane tsa Discord Developer (discord.com/developers/docs): Mekhahlelo ea Tumello ea Bot ea OAuth2, Lifolakha tsa Tumello tsa Bitwise (Administrator = 0x8), Tshireletso ya Webhook, le Token Revocation.
• ** Thuso ea Reddit & Tšehetso ea Mookameli (support.reddithelp.com / r/ModSupport):** Taolo ea Matšoele a Subreddit, Lisefe tsa Thibelo tsa ho Qoba, Litlhophiso tsa Boemo ba Tšohanyetso ba AutoModerator, le Mekhoa ea ho khutlisa Moemeli e Senyehileng.
• Cybersecurity and Infrastructure Security Agency (CISA) & National Cyber Security Center (NCSC): Mitigating Info-Steal Malware, Electron Application Enjection (asar tampering), le OAuth/Session Token Hijacking.
• Setsi sa Naha sa Bana ba Lahlehileng le ba Hatelloang (NCMEC) & Internet Watch Foundation (IWF): Melao e Tlamang ea ho Tlaleha bakeng sa Litaba tse Se Seng Molaong le Liketsahalo tse Lonya tsa Seva ea Marang-rang.