Iseva yeDiscord okanye uhlaselo loluntu: iToken yeBot eNcitshisiweyo, iWebhook Spam, kunye noPhicotho lweLog yoBuyiselo¶

Ukuvuka ukuya kumawaka @everyone i-pings yesaziso kunye nokufumanisa ukuba i-Discord iseva yoluntu, umbutho wemidlalo, okanye i-subreddit* iphantsi kohlaselo olusebenzayo ** olulungelelanisiweyo lohlaselo okanye oluzenzekelayo "umncedisi we-nuke"** yimeko kaxakeka yedijithali enesantya esiphezulu. Ngaphakathi kwemizuzwana engama-30 ukuya kwengama-90, iakhawunti yomlawuli ebhetyebhetye, ithokheni yebhot eqweqwedisiweyo, okanye i-webhook evuzayo inokucima amajelo amaninzi, isithintelo esikhulu samawaka amalungu asemthethweni, ikhukulise iseva yakho nge-cryptocurrency wallet drainers, okanye ithumele iMiqathango eqatha yokwaphulwa kweNkonzo (kubandakanya imifanekiso engavumelekanga okanye ukuxhaphaza ngokwesondo kwabantwana. CSAM) eyilelwe ukuvusa i-automated Discord Trust & Safety full-server termination evala iakhawunti yobuqu yomnikazi weseva nayo. Ukuba umhlaseli uthumela iCSAM engekho mthethweni, izigrogriso zabanqolobi, okanye izoyikiso ezizayo zogonyamelo, xela ubungqina ngokukhawuleza usebenzisa ukuchaza umxholo ongekho mthethweni nonobungozi kwaye ukuqeqeshwa kwabantwana, ukudibana namarhamncwa, kunye nokunika ingxelo ngeNCMEC isikhokelo, kwaye uqhagamshelane nehlabathi lethu amanani kaxakeka ulawulo ukuba nabani na usengozini ngokwasemzimbeni.

Ukumisa ngempumelelo uhlaselo phantsi kwemizuzwana engama-60 kufuna uxilongo yeyiphi kwezi zintathu izikhuseli zohlaselo ebetha uluntu lwakho: 1. I-Join-Wave yaNgaphandle / Ukuhlaselwa kweBot yomsebenzisi: Amakhulu eeakhawunti zabasebenzisi ezizihambelayo ziphuphuma ngekhonkco lokumema okanye i-URL engamampunge ngaxeshanye kwitshaneli zespam kunye neeDM. 2. Uhlaselo lwe-Webhook Injection: Umhlaseli ofumene i-URL ye-Webhook yetshaneli (discord.com/api/webhooks/...) izikhukula @everyone iipings kunye namakhonkco enkohliso ngaphandle kokujoyina umncedisi okanye ukuvela kuluhlu lwamalungu. 3. I-Internal Privilege Compromise ("Nuke yeServer"): Ithokheni yeseshoni yomodareyitha (Local Storage / leveldb uphawu olubiwe yi-infostealer malware) okanye iBot's Developer Uphawu (Bot ...) kunye ne Administrator imvume iyaqweqwediswa, ukudubula DELETE /channels kwaye PUT /bans Iifowuni ze-API ngesantya somatshini.

Esi sikhokelo sibonelela ngeyona ndlela ichanekileyo yemizuzwana engama-60 yomthetho wokuvala unxunguphalo, ulandelelwano olusisinyanzelo lokurhoxisa iiTokens zeBot ngaphambi kokukhaba ibhot ekhohlakeleyo, ukutsalwa kweLogi yoPhicotho-zincwadi, kunye negosa Discord Trust & Safety (dis.gd) kunye **neReddit Mod Inkxaso ** iinkqubo zokubuyisela.

Yenza oku ngoku¶

1. Vuselela "Misa izimemo" kwaye "Misa i-DMs" ngaphakathi kwimenyu ye-Discord's Security Actions ngokukhawuleza (ithatha imizuzwana emi-5). Cofa eyakho Igama leseva phezulu ngasekhohlo -> khetha Iizenzo zoKhuseleko (okanye ** Iisetingi zeSeva -> Ukuseta uKhuseleko -> Ukuhlaselwa koKhuseleko ) -> khangela i-DM kwaye Misa * Ukumisa * Ukumisa * Ukumisa i-DM kwaye Misa iMima. Iiyure ezingama-24. Oku kuthintela ngoko nangoko ikhonkco ngalinye lokumema kunye ne-URL yakho ye-Vanity yesiko ekuvumeleni ii-akhawunti ezintsha zokuhlaselwa zijoyine ngelixa ukhulula yonke iMiyalezo ethe ngqo yelungu-kwilungu engacelwanga.
2. Hluba i Administrator, Manage Channels, Manage Roles, Manage Webhooks, kwaye Ban Members iimvume kwi @everyone indima KUNYE nabasebenzi bakho/iindima zebhot. Vula IiSetingi zeSeva -> Iindima -> IiMvume eziMiselweyo (@everyone) -> skrolela ezantsi kwaye ucofe Cima iiMvume (okanye ucime ngokucacileyo Send Messages, Mention @everyone, @here, and All Roles, Attach Files, Embed Links, kwaye Create Public/Private Threads). Emva koko cofa eyakho uModareyitha / uMlawuli / iindima zeBot ezantsi kwendima yakho yoMnini kwaye uguqule okwethutyana OFF Administrator, Manage Channels, kwaye Ban Members ukumisa umjelo osebenzayo wokucima i-nuke efile kwiingoma zayo.
3. Khangela Server Settings -> Audit Log FIRST kwaye hluza ngesenzo (Delete Channel, Ban Member, Create Webhook, Update Role) ukuchonga eyona akhawunti imbi okanye ibhot. Ungaze uqikelele ukuba yeyiphi imodareyitha okanye ibhot ephumeza i-nuke. I Ingxelo yoPhicotho-zincwadi ibonisa owona mdlali uqhuba iminxeba ye-API ngexesha lokwenyani.
4. *Ukuba iBhoti yesiNtu inyusela umncedisi, HLAZIYA iToken yayo yeBot kwiDiscord Developer Portal (discord.com/developers/applications) okanye ikhulule iiMvume zendima yayo PHAMBI kokukhaba okanye ukuvala ibhot. Administrator okanye Manage Server imvume, okanye ukuba umlawuli othotyiweyo usengaphakathi kwiseva, ukukhaba nje ibhot kuvumela umbhalo womhlaseli ukuba aphinde ameme i-bot okanye aqhubeke nokuduba iminxeba ye-API de ithokheni okanye indima yayo ihluthwe.
5. Ukuba imiyalezo spam ithi APP okanye BOT ecaleni kwegama elingaqhelekanga AKUKHO kuluhlu lwakho lwamalungu, vula Server Settings -> Integrations -> Webhooks kwaye ucime zonke iiWebhooks ezingaziwayo ngokukhawuleza. I-spam yeWebhook ayiphumi kumsebenzisi kumncedisi wakho; ityhalwa nge-HTTP POST izicelo kwi-URL yeWebhook evuzayo kwaye inokuyekwa kuphela ngokucima iWebhook ngaphakathi Udityaniso -> IiWebhooks (okanye ukurhoxisa Manage Webhooks iimvume).
6. Gcina ikhonkco loMyalezo, i-ID yomsebenzisi (18-to-19-digit Snowflake ID), kunye noPhicotho lweLog yesikrini PHAMBI kokuhlanjululwa ngobuninzi komxholo ongekho mthethweni. Ukuba abahlaseli bathumele i-CSAM, i-gore, okanye i-doxxing ukwenza isakhelo somncedisi wakho, umfanekiso wekhusi Ilog yoPhicotho ebonisa umhlaseli wesitampu sexesha kunye nokuvalwa komsebenzi, khuphela isigxina somhlaseli Discord User ID, kwaye uchaze umyalezo nge Right-Click message, kwaye uchaze umyalezo nge klzwxh:0211 & Ukhuseleko lwedathabheyisi irekhodi wena njengomodareyitha onika ingxelo endaweni yokuba umnini weseva ebandakanyekileyo.

Umthi wesigqibo: Ukuxilongwa kunye nokumisa uhlaselo loluntu olusebenzayo ngaphantsi kwemizuzwana engama-60¶

Chonga ukuba ngowuphi oomatshini bokugqogqa okwenzekayo ngoku kwaye wenze ulandelelwano oluhambelanayo lokubulala-tshintsha ngezantsi.

flowchart TD
    RaidStart["I-Server Raid esebenzayo, iSpam Flood, okanye ukucinywa kweSiteshi kufunyenwe"] --> PauseInvites["INYATHELO 1: Cofa iGama leSeva -> Izenzo zoKhuseleko -> Yenza 'Misa izimemo' & 'Misa i-DMs'"]
    PauseInvites --> AuditCheck["INYATHELO 2: Vula iSetingi zeSeva -> Ilog yoPhicotho lokuchonga umdlali"]
    AuditCheck --> VectorType{"Ingaba iLog yoPhicotho-zincwadi okanye iNgxoxo ibonisa ntoni?"}
    VectorType -->|"Amakhulu eeakhawunti eziNtsha zokuDityaniswa kunye neNcoko yeSpam/DMs"| JoinRaid["JOIN RAID NGAPHANDLE: Strip @wonke umntu 'Thumela iMiyalezo', 'Namathisela iiFayile', & 'Khankanya @wonke umntu' -> Nyusa iNqanaba lokuQinisekisa ukuya 'kweyona iPhakamileyo (iFowuni eQinisekisiweyo)' -> Vumela i-AutoMod yokukhankanya iSihluzo seSpam"]
    VectorType -->|"Imiyalezo Ephawulwe 'APP/BOT' Spamming @wonke umntu, Umdlali ongekho kuLuhlu lwamaLungu"| WebhookRaid["UHLAselo lwe-WEBHOOK SPAM: Vula iiSetingi zeSeva -> Udibaniso -> IiWebhooks -> Cima zonke iiWebhooks ezingaQondwanga -> uPhicotho-zincwadi olwenze kwiLog yoPhicotho"]
    VectorType -->|"UMlawuli okanye uMlawuli weAkhawunti yoMntu Ucima amajelo / uvala abasebenzisi"| ModCompromised["UMPHAWU OMDERATORE OKWENZIWAYO: Tsala indima yeMod apha ngezantsi kweyakho okanye iNxibele iiMvume zendima -> Vala iAkhawunti yeMod eyoyisiweyo -> Yiba neMod Sula iPC eyosulelekileyo kunye nokuSeta kwakhona igama lokugqithisa."]
    VectorType -->|"I-akhawunti yeBot yi-Mass-Deleting Channels, ukudala iindima, okanye ukuvalwa"| BotNuke["I-COMPROMISED BOT TOKEN NUKE: IiMvume zendima eLawulwayo ye-Strip Bot ukuya ku-Zero -> Seta kwakhona uMqondiso weBot kwiPortal yoMphuhlisi (discord.com/abaphuhlisi) -> Kick/Ban Bot & Remoke OAuth2"]
    JoinRaid --> EvidenceClean["INYATHELO LESI-3: Xela Naziphi na iZithuba eziLawulayo ngokuNgasemthethweni ngeNgxelo ye-In-App kuQala -> Qhuba uMyalezo oMninzi wokucoca / uBuyiselo"]
    WebhookRaid --> EvidenceClean
    ModCompromised --> EvidenceClean
    BotNuke --> EvidenceClean

Icandelo loku-1: Iprothokholi yokutshixa engxamisekileyo yemizuzwana engama-60 (Ukuphelisa ukopha)¶

Xa uhlaselo okanye i-nuke yeseva iqala, iimodareyitha zabantu azikwazi ukuvala ii-akhawunti ngesandla ngokukhawuleza kunePython ezenzekelayo okanye i-Go script edubula izicelo ezifanayo ngokuchasene neDiscord REST API (50 requests per second). Kufuneka unqumle amandla omhlaseli we-API kwinqanaba loqwalaselo lomncedisi.

1. Indlela yokukhenkcisa umsebenzisi-Bot Dibanisa uRaid kwimizuzwana eyi-15¶

Ukuba amakhulu eakhawunti yokulahla ajoyina iseva yakho kunye namajelo ezikhukula okanye ubunzima-DMing amalungu akho ngenkohliso "Free Nitro" okanye "Crypto Airdrop" amakhonkco enkohliso: 1. Qalisa "iZenzo zoKhuseleko" (Pause Invites + Pause DMs): - Cofa eyakho i-Igama leseva ehlayo (phezulu ekhohlo) -> Iintshukumo zoKhuseleko. - Jonga Misa izimemo (ibuyisela "Invites are currently paused for this server" kulo naliphi na ikhonkco langaphandle okanye i-URL ye-Vanity cofa) kwaye ** Misa i-DMs ** (ithintela abangabahlobo kumncedisi ekuqaliseni imisonto yomyalezo othe ngqo). 2. Nyusa iNqanaba lokuQinisekisa ukuya kuBubona bukhulu (Highest - Phone Verified): - Yiya ku IiSetingi zeSeva -> Ukuseta uKhuseleko -> iNqanaba lokuQinisekisa -> cofa Tshintsho -> khetha Ephakamileyo (Kufuneka ube nefowuni eqinisekisiweyo kwiakhawunti yabo yeDiscord). - Uninzi lwee-botnets ezizenzekelayo zokuhlaselwa zixhomekeke kwiithokheni eziqinisekisiweyo ze-imeyile ($0.01 per token) kuneeakhawunti eziqinisekisiweyo ngeSMS. Ukutshintshela ku-Eyona iPhakamileyo ngokukhawuleza ivala iithokheni ze-bot ezingangqinisiswanga esele zingaphakathi kwiseva ekuthumeleni imiyalezo okanye amalungu emiyalezo. 3. Tshixa @everyone IiMvume zeSitishi kwihlabathi jikelele: - Yiya ku-*Useto lweSeva-> Iindima-> Iimvume eziMiselweyo (@everyone). - Cima: - Send Messages kwaye Send Messages in Threads - Create Public Threads kwaye Create Private Threads - Attach Files kwaye Embed Links - Add Reactions kwaye Use External Emoji / Stickers - Mention @everyone, @here, and All Roles - Ujongo olubalulekileyo lweMvume yeSitishi iThatha indawo: Ukuba itshaneli ethile (enje #general okanye #chat) ine Inqaku eliLuhlaza (Allow) ngaphezulu kwe @everyone indima ye Send Messages ngaphakathi Hlela isitishi -> Iimvume **, ukutshintsha indima yeSeva yehlabhi jikelele akuyi kulitshixa elo jelo. Kulo naliphi na elo elisaskrola ngogaxekile, cofa i-Umfanekiso weGear (Hlela isitishi-> Iimvume -> @everyone kwaye usete Send Messages kwi Bomvu X (Deny) okanye uvule Indlela ecothayo (6 hours).

2. Indlela yokumisa ukuhlaselwa kwe-"Webhook Spam" kwimizuzwana ye-15¶

Abanini beeseva abaninzi bayoyika becinga ukuba iseva yabo yonke igqekeziwe ngenxa yokuba umsebenzisi ogama lakhe lingumsebenzisi "Server Nuke Syndicate" nge APP (ngaphambili BOT) ibheji iyajinga @everyone Amaxesha ama-5 ngesekondi #announcements kwaye ayinakucofa-ekunene kwaye kuvalwe. - Kutheni ungenako ukuthintela iWebhook: IDiscord Webhook yindawo elula yokuphela kweHTTP (https://discord.com/api/webhooks/{webhook.id}/{webhook.token}). Nabani na ofumana loo URL (mhlawumbi ngenxa yokuba imodareyitha ibonise ngempazamo kwi-livestream, izinikele kwindawo yokugcina i-GitHub kawonke-wonke, okanye i-akhawunti yemod esetyenzisiweyo yenza enye) unokuthumela ukulayisha okungenamkhawulo kwe-JSON kweso jelo ngaphandle kokuba lilungu leseva yakho yeDiscord. - Uyibulala njani kwangoko: 1. Vula ** Useto lweSeva -> Udibaniso -> IiWebhooks . 2. Jonga kuluhlu lweeWebhooks kwaye ubone ukuba yeyiphi ijelo nganye ekhomba kuyo. 3. Cofa kuyo yonke iWebhook engaziwayo kwaye nqakraza Delete Webhook (okanye nqakraza ** Khuphela i-URL yeWebhook ** kwiilogi ze-forensic kuqala, emva koko Cima iWebhook). Ugaxekile umisa imillisecond iWebhook icinyiwe. 4. Vula kwangoko ** Useto lweseva -> Ilog yoPhicotho -> Hlunga ngesenzo: Create Webhook ukubona yeyiphi imodareyitha okanye i-akhawunti ye-bot edale loo Webhook. Ukuba i-akhawunti yomodareyitha idale i-Webhook ngo-3:00 AM ngaphandle kolwazi lwabo, **loo tokeni yeseshoni yeDiscord yomodareyitha isengozini **: bahlube indima yabo kwaye bayikhabe ngoko nangoko iakhawunti yabo.

Icandelo 2: Ukumisa i-"Nuke yeServer" yangaphakathi (i-Moderator Compromised vs. Compromised Bot Token)¶

A "Iseva iNuke" yenzeka xa umhlaseli elalanisa iakhawunti okanye ibhot ebambe iimvume zolawulo eziphezulu (Administrator, Manage Channels, Manage Roles, Ban Members, Manage Webhooks) kwaye iqhuba iscript sokutshabalalisa esizenzekelayo (Nuker). Ngemizuzwana eli-10, iskripthi singena kwi-ID yesitishi ngasinye ukucima yonke isicatshulwa kunye netshaneli yelizwi, senza amajelo amatsha angama-250 abizwe ngokuba. #nuked-by-xxx, icima zonke iindima zeseva, kwaye ivuse izicelo zokuvalwa kobuninzi ngokuchasene noluhlu lwamalungu.

1. Indima yeDiscord's Ulawulo lweHierarchy¶

IDiscord inyanzelisa nkqo engqongqo Ulawulo Lwendima ngaphakathi IiSetingi zeSeva -> Iindima: - UMnikazi weSeva (Umphathi wesithsaba) uhleli ngaphezulu kwayo yonke indima kumncedisi kwaye unokuhluba okanye avale nawuphi na umntu okanye ibhot nokuba ithini indima. - Nawuphi na uMlawuli Ongenguye uMnini-Mnini UNGAHLANGANISA KUPHELA, ukuhluba, okanye ukuvalwa komsebenzisi kunye neebhothi ezinendima ephezulu ihleli ngokomzimba ngaphantsi indima yazo ephezulu kuluhlu IiSetingi zeSeva -> Iindima. - Ukuba indima elawulwayo yebhot ethotyiweyo ibekwe kwindawo #2 kuluhlu lweeNdima kunye nee-Admins eziziNtloko zakho ezithembekileyo zihlala kuzo #3, Abaphathi bakho beNtloko abanamandla okukhaba ibhot okanye ukuhlela indima yayo ngelixa wena (uMnikazi weSeva) ulele.

2. Ulandelelwano oluchanekileyo lokunciphisa i-Compromised Bot Nuke¶

Ukuba Ilog yoPhicotho ibonisa i-akhawunti ye-bot (ingaba i-bot yakho yesiko lomncedisi okanye i-bot yomntu wesithathu eye yaphulwa) icima amajelo okanye ivala amalungu, landela lo myalelo wamanyathelo ama-3 kanye:

3. Iimodareyitha zizifumana njani iithokheni zabo zeDiscord zibiwe (Kwaye kutheni i-2FA AYIKUYIMI)¶

Kutheni le nto imodareyitha yakho umthembileyo, ene- SMS kunye ne-Authenticator App 2FA enikwe amandla kwi-akhawunti yabo yeDiscord, ngequbuliso iqalise ukwenza iseva ngo-4:00 AM? - Zisebenza njani iiTokens zoQinisekiso lweDiscord: Umxhasi weDiscord wedesktop (eyakhelwe kwi-Electron/Chromium) kunye nezikhangeli zewebhu zigcina ithokheni yongqinisiso eqhubekayo yomsebenzisi ngaphakathi kogcino olufihliweyo lwasekuhlaleni (%AppData%\discord\Local Storage\leveldb kwiWindows). - IiVektha ezi-3 zoBusela: 1. Umdlalo weBeta womgunyathi / uQinisekiso lweMalware (Lumma, RedLine, Blank Grabber, Emerald Stealer): Iqela eligqogqayo le-DMs imodareyitha yakho ibacela ukuba bavavanye umdlalo we-indie okanye baphonononge isibheno sokuvalwa .zip ifayile. I-malware ikhupha ithokheni yeDiscord ekhutshiweyo yomlawuli kwaye ihlala ilungisa iJavaScript yomxhasi weDiscord wedesktop (core.asar / index.js Isitofu) ukuze naxa imodareyitha itshintsha igama eliyimfihlo, iDiscord app eyitrojan ithumela kwangoko ithokheni entsha kwiwebhook yomhlaseli. 2. I"Bookmarklet" ekhohlakeleyo okanye iConsole yoPhuhliso (F12) UbuNjineli beNtlalo: Abaqhathi baqhatha abasebenzisi ukuba barhuqe ibhukmakhi ethi "Qinisekisa iAkhawunti" kwibar yebrawuza okanye bancamathele intwana encinci Ctrl + Shift + I console, efunda ithokheni ephilayo ngokuthe ngqo kwinkumbulo. 3. Inkohliso "yeBot yoQinisekiso lwe-Captcha" iKhowudi yeQR yokuskena (Wick / DoubleCounter IiClones): Abahlaseli bathumela umyalezo wokuqinisekisa umncedisi wobuxoki becela imodareyitha ukuba "Skena le khowudi ye-QR ngeDiscord Mobile App yakho ukuqinisekisa ukuba ungumntu." Ukuskena ikhowudi ye-QR yeDiscord kwi-app ephathwayo ngoko nangoko kunika i-akhawunti epheleleyo yokungena kwi-akhawunti yokufikelela kwi-browser ye-desktop yomhlaseli, ugqitha igama eliyimfihlo kunye ne-2FA ngokupheleleyo.

Icandelo 3: Uluntu lweReddit (Subreddit) Ugqogqo kunye noBuyiselo lweModareyitha esichengeni¶

Ukuba umodareyitha Reddit uluntu (r/YourSubreddit) kwaye ufumanise ukuba i-akhawunti yomodareyitha esetyenzisiweyo ihlube i-CSS/Wiki, yavalela amakhulu abasebenzisi, ithathe indawo yenkcazo ye-subreddit ngamakhonkco omkhonyovu, okanye isete i-subreddit ku-Bucala/eMida, okanye ukuba amawaka olungelelwaniso lwe-brigade bots akhukula emgceni:

1. Ukuvalwa kwe-Subreddit kwangoko kunye nokususwa kweModareyitha yeRogue¶

1. Jonga i-Moderator Hierarchy (Mod Tools -> Moderators):
2. Kanye njengeDiscord, iReddit inyanzeliseka ngokungqongqo phezulu-phantsi ulawulo lwezikhundla eziphezulu kuluhlu lweeModareyitha ngokusekelwe kumhla wongezwa umlawuli ngamnye.
3. Nayiphi na imodareyitha ene Everything (IiMvume eziPheleleyo) iflegi ingasusa okanye ihlube iimvume kuyo nayiphi na imodareyitha edweliswe ngezantsi kuzo kwiphepha, kodwa ayinakuchukumisa nayiphi na imodareyitha edweliswe ngaphezulu kwayo.
4. Ukuba imodareyitha esetyenzisiweyo idweliswe ngezantsi kwakho: vula ngokukhawuleza Izixhobo zeMod -> Iimodareyitha -> Ezihlelekayo, cofa i icon yepensile ecaleni kwemodareyitha esetyenzisiweyo, sukukhangela Everything, kwaye ucofe u-Susa*.
5. Hlola i Mod Log (https://www.reddit.com/r/YOURSUBREDDIT/about/log):
6. Hluza i Ilog yoModareyitha ngegama lomsebenzisi lomodareyitha osengozini (Moderator ukwehla) kunye ne-Inyathelo (banuser, wikirevise, editsettings, removelink, removemoderator).
7. Vuselela iReddit "Ulawulo Lwesihlwele" kunye "Nezihluzo zoKhuseleko" Ngexesha loHlaselo lwaNgaphandle lweBrigade:
8. Vula **Izixhobo zeMod -> Izihluzi zoKhuseleko -> Ulawulo lwesihlwele **.
9. Misela ** iNqanaba lokuThumela ** kunye neNqanaba leNgcaciso ** ku- ** Ubuninzi / obungqongqo ** (ibambe ngokuzenzekelayo izimvo kunye nezithuba ezivela kubasebenzisi abane-negative subreddit karma, ii-akhawunti ezintsha, kunye nabasebenzisi abangazange bajoyine uluntu ngaphambi kokuba uhlaselo luqale).
10. Yenza isihluzo se- Harassment Filter kunye ne Van ukuVava isihluzo (esisebenzisa isixhobo sangaphakathi seminwe ye-Reddit kunye ne-IP telemetry ukususa ngokuzenzekelayo izithuba ezivela kwii-akhawunti ezisanda kwenziwa zabaphangi abavaliweyo).
11. Yongeza ngoko nangoko AutoModerator Umgaqo wokuTshelwa okuNgxamisekileyo:
12. Vula Izixhobo zeMod -> I-Automod (wiki/config/automoderator) kwaye uncamathisele eli sango likaxakeka ngoko nangoko phezulu ukuze ubambe okanye ususe zonke izithuba/amagqabantshintshi kwiiakhawunti ezingaphantsi kweentsuku ezingama-30 okanye nge-karma ephantsi ye-subreddit:

    ---
    # EMERGENCY RAID LOCKDOWN RULE
    type: any
    author:
        account_age: "< 30 days"
        combined_subreddit_karma: "< 10"
        satisfy_any_threshold: true
    action: filter
    action_reason: "Emergency Raid Lockdown: New account or low subreddit karma [{{match}}]"
    ---
    

2. Yintoni omawuyenze ukuba "iModareyitha ePhezulu" ye-Subreddit yakho iye yachaphazeleka (kwaye yalisusa iQela leMod)¶

Ukuba i-#1 i-akhawunti ePhezulu yeModareyitha* kwi-subreddit yakho iye yaqweqwediswa (okanye ithengwe yi-crypto/onlyfans spam syndicate) kwaye yasusa lonke iqela elisemthethweni lokumodareyitha: 1. Sukuzama ukuqweqwedisa eyakho i-subreddit ethinjiweyo. 2. Yiba nemodareyitha yesibini ephezulu esusiweyo ithumele i Modmail ngqo kuyo r/ModSupport (https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Compromised+Top+Moderator+Emergency+Rollback). 3. Kutheni r/ModSupport I-Modmail Lijelo lokuNyusa elisemthethweni: Ngokungafaniyo nezithuba zoluntu kwi r/redditrequest (ezeziqendu ezishiyiweyo), **r/ModSupport I-Modmail iqeshwe ngokuthe ngqo yiReddit Community Admins ** exhotyiswe nge-internal **Isixhobo se-Mod Action Rollback **. 4. Nikela: - Elona gama le-subreddit (r/...); - Igama lomsebenzisi loMphathi oPhezulu oyekelelweyo (u/...); - Isitampu sexesha esichanekileyo se-UTC xa iqela le-mod elisemthethweni lahlanjululwa kwaye i-wiki / i-sidebar / izikhonkwane zonakaliswa; - Iiskrini zezaziso zakho zokususa i-Modmail. 5. Yintoni eBuyiselwa ngabalawuli beReddit: Abalawuli beReddit batshixa iakhawunti yoMhleli oPhezulu, babuyisele umva konke ukususwa komodareyitha, ukuvalwa komsebenzi, ukuhlelwa kwewiki, kunye nokucinywa kweposi okwenziwe ngexesha lokwaphulwa kwefestile, kwaye ubuyisele eyona modareyitha iphezulu osindileyo #1 Top Moderator isihlalo.

Icandelo 4: UkuBuyiselwa kwakhona emva koGqoko: Ngaba iZitishi zeDiscord ezicinyiweyo kunye nabasebenzisi abaBandekileyo banokubuyiswa?¶

Nje ukuba uhlaselo lumisiwe kwaye i-rogue bot/modareyitha isusiwe, abanini beeseva bajongana neyona nyani inzima yokusebenza kuyilo lweDiscord:

1. Ngaba iNkxaso ye-Discord ibuyisela iitshaneli ezicinyiweyo okanye iMiyalezo emva kweNuke yeSeva?¶

• Inyani yobuGcisa eNzima: Ngokungafaniyo neYouTube (egcina iiblobhu zevidiyo ezicinyiweyo kwindawo ebandayo yogcino kangangeentsuku ezili-14 ukuya kwezingama-30) okanye iReddit (apho izithuba “ezisusiweyo” zifihlwa nje kwaye iiAdmins zinokubuyisela umva iMod Log), xa itshaneli icinyiwe kwiDiscord (DELETE /channels/{id}), idatabase yeDiscord yeCassandra/ScyllaDB icoca ngokusisigxina into yetshaneli kunye nayo yonke imigca yomyalezo ngaphakathi kwayo.
• I-Discord Trust kunye noKhuseleko AWUKWAZI ukubuyisela amajelo acinyiweyo, indima ecinyiweyo, okanye imbali yomyalezo ecinyiweyo emva kolawulo oluphazamisekileyo okanye i-bot nukes kwiseva.
• Yintoni enokuBuyiselwa yiDiscord Trust & noKhuseleko: Ukuba umncedisi wakho wonke uphelisiwe/uvaliwe yiDiscord Trust & noKhuseleko kuba abahlaseli bakhuphele umxholo okhohlakeleyo ukuze wenze isakhelo, okanye ukuba iakhawunti yakho yoMnini woSeva iye yaqweqwediswa kwaye umhlaseli wagqithisela ubunini beSeva (Transfer Ownership) kwiakhawunti yabo, bafakela Iakhawunti eNcitshisiweyo / Itikiti lobunini beSeva apha https://dis.gd/request ivumela abasebenzi beDiscord ukuba batshintshele Isithsaba soMnini weseva kwiakhawunti yakho efunyenweyo.

2. Indlela yoKwakha kwakhona imijelo kunye neendima kunye naMalungu aBan-Banned Mass Quick¶

1. Ukuphinda kwakhiwe amatshaneli kunye neendima (iSakhelo seSeva kunye neeBots zokuGcina):
2. Ukuba uvelise ngaphambili eyemveli Discord Server Template (Server Settings -> Server Template) okanye uthathe i-snapshot yoqwalaselo kunye ne-bot yokugcina ethembekileyo (efana ne--Xenon Bot, exhasa uluhlu lwe-channel, imibala yendima, kunye nemvume yokubhala ngaphezulu, nangona kungeyiyo imilayezo yabasebenzisi bembali), unokubuyisela itshaneli yakho kunye nendima ye-skeleton phantsi kwemizuzu emi-2.
3. Izambuku-Ukubuyisela umva uThintelo lweSininzi nge-Audit Log:
4. Ukuba i-bot ethotyiweyo iye yavala amalungu asemthethweni angama-500 ngexesha le-nuke yemizuzu emi-2, vula ** Iisetingi zeseva -> Ilog yoPhicotho -> Hlunga ngesenzo: Ban Member -> Hluza ngomsebenzisi: [The Compromised Bot/Mod]**.
5. Lonke ungeno ban kwi Log yoPhicotho lubonisa i-ID yoMsebenzisi ngqo kunye nesitampu sexesha lexhoba elivaliweyo ngelo xesha lefestile yemizuzu emi-2. Unokuzikhulula ngesandla usebenzisa IiSetingi zeSeva -> Ukuvalwa, okanye usebenzise umyalelo othembekileyo wokumodareyitha othembekileyo (ofana noCarl-bot, Dyno, okanye ufundo olulula lweskripthi solawulo lwemigca eli-15 guild.audit_logs(action=discord.AuditLogAction.ban) ihluzwe ngokungqongqo ukuya entry.user.id == COMPROMISED_ACTOR_ID) ukufowuna ngokuzenzekelayo guild.unban(entry.target) kwilungu ngalinye elisemthethweni elivalwe ngumdlali okhohlakeleyo.
6. Ukucoca amawakawaka eMiyalezo yoGqophi ngaphandle kokucima iSiteshi:
7. Ukuba isitishi sizaliswe yi-2,000 yemiyalezo ye-spam yogqogqo, musa ukucima kwaye udibanise itshaneli ngaphandle kokuba ufuna ukuphulukana nayo yonke imiyalezo emidala esemthethweni, imiyalezo ephiniweyo, kunye nodibaniso lwe-webhook.
8. Endaweni yoko, sebenzisa iDiscord eyakhelwe-ngaphakathi ** Cofa-Ekunene iRaider -> Ukuvalwa -> Cima iMbali yoMyalezo: Previous 24 Hours (okanye Previous 7 Days)**, ecoca ngokuzenzekelayo wonke umyalezo othunyelwe ngulo hlaseli kwitshaneli nganye kumncedisi ngaxeshanye.
9. Kwi-spam yeeakhawunti ezininzi, sebenzisa i-bot yokumodareyitha eqinisekisiweyo /purge umyalelo (up to 100 to 1,000 messages under 14 days old ngeDiscord's Bulk Delete API endpoint).

iSigaba 5: Iyantlukwano eSisigxina kunye noLuhlu lokuQinisekisa ukuGqondwa koLuntu¶

Nje ukuba umncedisi wakho azinzisiwe, qwalasela ezi **izinto ezintandathu zokhuseleko olwakhelwe ngaphakathi zero-zero-zero-zero-zero-zero ingabikho i-botnet yohlaselo lwangaphandle okanye imodareyitha enye eyosulelekileyo inokuphinda ifake iseva yakho kwakhona:

1. Yenza iDiscord "AutoMod" Izihluzi zeNative (Server Settings -> Safety Setup -> AutoMod)¶

I-Discord's native AutoMod iyabamba kwaye ivalele ukuhlatywa kwentlawulo phambi kokuba umyalezo ukhe unikezelwe kwincoko okanye uxhokonxa isaziso sokutyhala kwiifowuni zamalungu: - Vala i-Spam yokukhankanya: Misela uMda wokukhankanya ku-5 (okanye 3) ukukhankanya okukodwa ngomyalezo ngamnye, kwaye ukhethe Vala uMyalezo + iLungu lokuPhuma kwexesha (1 Hour okanye 24 Hours) + Thumela isivuseleli. Oku kwenza kube nzima ngokwasemzimbeni ukuba i-raider i-ping abasebenzisi abangama-30 kumyalezo omnye. - Vala uMxholo wogaxekile okrokrelekayo & naMazwi aXhothiweyo aXhotyiswayo: Guqula kuzo zombini izintlu ezakhelweyo. - Igama elingundoqo eliSiko kunye neMithetho yeRegex yeeNgcali: Yongeza umthetho we-AutoMod othintela iipateni eziqhelekileyo zobuqhophololo: - Amagama angundoqo: *discord.gift*, *steamcommunity.com/gift*, *free nitro*, *airdrop claim*, *t.me/*, *whatsapp.com*. - Iipateni zeRegex zibamba amakhonkco okumema angabonakaliyo: (?:https?://)?(?:www\.)?(?:discord\.(?:gg|io|me|li)|discordapp\.com/invite)/[a-zA-Z0-9-]+ (ukhulula iindima zakho zabasebenzi).

2. Yenza "Funa i-2FA yezenzo zeModareyitha" (Server Settings -> Safety Setup -> Permissions)¶

• Ukuvula Iimfuno ze-Server-Wide 2FA kunyanzela i-Discord's API ukuba iqinisekise ukuba nawuphi na umsebenzisi ozama ukucima amajelo, ukuvalwa kwamalungu, ukulawula iindima, okanye ukulawula iiwebhooks unoQinisekiso lwezinto ezimbini ezisebenzayo kwiakhawunti yakhe.
• ** Okubaluleke ngakumbi, khulula ifayile Administrator imvume evela ZONKE iindima zoMhleli woLuntu kunye ne-99% yeeBots:**
• UMthetho weGolide woKhuseleko lweDiscord: Phantse akukho modareyitha yabantu kwaye akukho njongo yebhoti ifuna Administrator iswitsha ivuliwe.
• Kutheni? I Administrator guqula igranti ngokudlula ngokupheleleyo phezu kwesitshixo ngasinye, izibonelelo Manage Webhooks, izibonelelo Manage Server, kwaye ivumela i-mod nuke esichengeni umncedisi kwimizuzwana emi-3.
• Endaweni yoko, nika iiModareyitha zakho zabantu kuphela Kick Members, Ban Members, Moderate Members (Timeout), kwaye Manage Messages. Banike **zero ** imvume yokuba Delete Channels, Manage Roles, okanye Manage Webhooks. Ukuba i-PC yemodareyitha yosulelwa yi-token-steal, umhlaseli ** akakwazi ukucima itshaneli enye kwaye akakwazi ukwenza i-webhook enye **.

3. Sebenzisa "iBot Quarantine & Anti-Nuke Rate Limiting"¶

• Uphicotho Server Settings -> Integrations Ngenyanga: Susa yonke ibhot yomculo engasetyenziswanga, i-mini-game bot, okanye i-bot yokuqinisekisa oyongeze kwiminyaka eyadlulayo. Kuhlaselo olukhulu lwembali, i-server ye-bot yeqela lesithathu elahliweyo yaphulwa ngabahlaseli abasebenzisa ukulala kwayo. Administrator indima yokugqogqa iiseva ezingama-10,000 ngaxeshanye.
• Ungaze Grant Administrator Xa Umema iBot: Xa ugunyazisa ibhot nge OAuth2 URL (discord.com/oauth2/authorize?...&permissions=8), qaphela ukuba permissions=8 yi-bitfield epheleleyo Administrator. Susa uqwalaselo Administrator kukwaziswa kwe-OAuth kwaye unike kuphela iimvumelwano ezithile ezifunwa yibhot.
• Ngokuzikhethela i-Anti-Nuke Watchdog: Kwiiseva ezinkulu (10,000+ members)#1 Position ekunene phantsi koMnikazi weSeva)** iqwalaselwe ukuze ukuba nayiphi na imodareyitha okanye i-bot icime ngaphezu kwe-2 amajelo kwimizuzwana engama-60 okanye ivalwe ngaphezu kwe- 5 abasebenzisi kwimizuzwana engama-60, umlindi uzihluba iindima zaloo mlingisi ziye ku-zero kwi-200 milliseconds.

Iinombolo zengingqi zikaxakeka kunye neeprothokholi ze-arhente¶

Xa ugqogqo loluntu luwela ku-ulwaphulo-mthetho oluluqilima, ubuqhetseba, izigrogriso, okanye ukusasazwa kweZixhobo zokuXhobisa ngoMntwana (Child Abuse).CSAM), landela ezi nkqubo zisemthethweni zokunika ingxelo ngoko nangoko:

• IiNgxelo ze-CSAM zeHlabathi (Kunyanzelekileyo): Ungaze ukhuphele, ugcine, okanye ugqithise iifoto zesikrini ezine-CSAM. Sebenzisa iDiscord's in-app Umyalezo weNgxelo -> Ukuzenzakalisa koMntwana okanye isiXhobo sokuSebenziswa gadalala ngokwesondo (esasaza eyona hashi yecala leseva encamatheleyo kunye nomlayishi we-IP ngqo kwi Ziko leSizwe laBantwana abalahlekileyo nabaxhatshaziweyo, NCMEC CyberTipline), okanye ingxelo ku report.cybertip.org (1-800-843-5678) e-US okanye kwi-Internet Watch Foundation (iwf.org.uk) e-UK/EU. 'Yabona ukuqeqeshwa kwabantwana, ukudibana namarhamncwa, kunye nokunika ingxelo ngeNCMEC.
• EUnited States: Xela uhlaselo lobuqhetseba, izoyikiso zokuswayita, okanye uhlaselo lweDDoS kwi-Iziko le-FBI le-Internet Crime Comlaint Centre (ic3.gov). Ukuba imodareyitha igxininiswe kwaye isoyikiswa ngokuthumela okungxamisekileyo okungeyonyani ("Swatting"), fowunela amapolisa asekuhlaleni idesika yokuthumela engezizo ezongxamiseko ngoko nangoko ukuze abeke Ukuswayitha / iNqaku leSilumkiso seNdawo kwidilesi yakho. Ngengozi engokomzimba ekhawulezileyo, fowunela ** 911 **.
• EKhanada: Xela ukuphangwa kwe-cyber kunye nogqogqo lomxholo ongekho mthethweni kwi Iziko laseKhanada loKhuseleko lwaBantwana (cybertip.ca), i Iziko laseKhanada lokuLwa ubuQhophololo (1-888-495-8501), okanye amapolisa asekuhlaleni (911 kwiimeko ezingxamisekileyo).
• I-United Kingdom: Xela ukusetyenziswa kakubi kwekhompyutha kunye nokuphangwa kwe-cyber ku Ubuqhophololo beZenzo (actionfraud.police.uk, 0300 123 2040) kwaye uxele uxhatshazo olungekho mthethweni kwi Internet Watch Foundation (iwf.org.uk) okanye CEOP (ceop.police.uk). Inombolo kaNgxamiseko: 999 okanye 112 (amapolisa angeyongxamiseko: 101).
• I-European Union: Xela intetho yentiyo engekho mthethweni, umxholo wabanqolobi, okanye ugqogqo lweCSAM ngelizwe lakho INHOPE (inhope.org) umnxeba wefowuni kunye neyunithi yamapolisa yolwaphulo-mthetho phantsi koMthetho weeNkonzo zeDijithali we-EU (DSA)**. Inombolo kaxakeka: 112.
• Ostreliya neNew Zealand: EOstreliya, xela ukusetyenziswa kakubi kwe-cyber okanye imathiriyeli engekho mthethweni kuMkomishinala wezoKhuseleko esafety.gov.au) kunye neReportCyber (cyber.gov.au, 1300 292 371). ENew Zealand, nikela ingxelo ku Netsafe (netsafe.org.nz, 0508 638 723). Iinombolo zikaxakeka: 000 (Australia), 111 (eNew Zealand).
• ** I-Indiya kunye ne-Asia-Pacific: ** E-Indiya, faka ingxelo ngokukhawuleza kwi- I-National Cyber Crime Reporting Portal (cybercrime.gov.in, umnxeba woncedo 1930). Bona uluhlu lwethu olupheleleyo ku amanani kaxakeka.

Imibuzo ebuzwa qho¶

Kutheni @everyone spam pings zisabonakala emva kokuba ndivale abahlaseli kwaye nditshixiwe @everyone iimvume?¶

Xa imiyalezo yespam iqhubeka nokugalela kwitshaneli nge **`APP`** okanye **`BOT`** ithegi ecaleni kwegama lomsebenzisi kwaye awukwazi ukucofa-ekunene umsebenzisi ukubavala, umhlaseli usebenzisa **Discord Webhook** kuneakhawunti yomsebenzisi. IiWebhooks aziveli kuluhlu lwakho lweLungu leSeva kwaye ungahoyi `@everyone` indima izithintelo ukuthumela-umyalezo. Vula ** Izicwangciso zeSeva -> Udibaniso -> I-Webhooks **, fumana i-Webhook ekhomba kwitshaneli echaphazelekayo, kwaye nqakraza ** Cima i-Webhook **. Emva koko, khangela ** Useto lweseva -> Ilog yoPhicotho ** ihluzwe nge `Create Webhook` ukubona ukuba yeyiphi imodareyitha okanye ibhot eyenzileyo.

Ukuba ndikhaba okanye ndivala i-bot esengozini ngexesha le-nuke yomncedisi, ingazibandakanya njani ngokwayo?¶

I-bot ayikwazi ukuzimema ngokwayo, **kodwa** ukuba umhlaseli uye wabeka esichengeni ithokheni yeseshoni yeDiscord yomntu (okanye unikiwe). `Manage Server` / `Administrator` kwindima yesibini efihliweyo ngelixa i-bot yayinolawulo), iskripthi somhlaseli sisebenzisa loo mqondiso womntu ukugunyazisa kwakhona i-URL ye-OAuth2 ye-bot yesimemo (`permissions=8`) umzuzwana emva kokuba uyikhabile. Ngokuhlutha iimvume zendima ye-bot ukuya ku-zero kuqala, ukusetha kwakhona i-Bot Token ngaphakathi `discord.com/developers/applications`, kunye nokuphicotha i-**Audit Log** kwiindima ezingagunyaziswanga ezinikwe amalungu oluntu, unqumle zombini ibhot kunye nevector yayo yokuphinda isimemo.

Ngaba iNkxaso yeDiscord ingayibuyisela umva iseva yam kwaye ibuyisele amajelo am acinyiweyo ukuba i-hacker iyihlubile?¶

Hayi. Ngokungafaniyo neReddit okanye iYouTube, iDiscord ayizigcini izifinyezo zamajelo acinyiweyo, indima ecinyiweyo, okanye imiyalezo ecinyiweyo kwiiseva zayo zedatha. Kanye a `DELETE /channels/{id}` Isicelo se-API senziwa ngokubamba iakhawunti `Manage Channels` okanye `Administrator` imvume, ezo tshaneli kunye neembali zabo zomyalezo zicinywe umphelo. Nangona kunjalo, ukuba i-hacker idlulisele **Ubunini beSeva** kude neakhawunti yakho esetyenzisiweyo, okanye ukuba umncedisi wakho uvaliwe ngobuxoki yiTrasti & noKhuseleko ngexesha lohlaselo lokuqulunqa, ngokungenisa itikiti ku. `dis.gd/request` phantsi kwe-**Iakhawunti eHakiweyo / ubunini beSeva ** ivumela iNkxaso yeDiscord ukubuyisela isithsaba soMnini weSeva kuwe.

Iakhawunti yomodareyitha iye yaqweqwediswa yi-infostealer yaze yagqogqa iseva yethu. Ngaba kukhuselekile ukuyiguqula kwakhona emva kokuba itshintshe igama eliyimfihlo?¶

Ungaze ubuyisele iimvume zemodareyitha kubasebenzi abachaphazelekileyo ngenxa yokuba betshintshe igama labo eliyimfihlo kwikhompyuter enye. Izisela zale mihla zeDiscord (`Lumma`, `Blank Grabber`, `RedLine`) tofa umthwalo oqhubekayo weJavaScript ngqo kwiDiscord desktop application's `index.js` / `core.asar` iifayile kwi `%AppData%\discord`. Ngephanyazo imodareyitha ingena kwakhona kwiPC engacinywanga, iskripthi esitofweyo siba ithokheni entsha kraca kwaye siyibuyisela kwi-hacker. Funa imodareyitha ukuba yenze uhlaziyo lwe-USB ecocekileyo yeWindows ngaphambi kokuba ibanike iindima kwakhona.

Ndiyikhusela njani iseva yam kumkhonyovu othi "Fake QR Code Verification" eqweqwedisa iimodareyitha kunye namalungu?¶

Fundisa abasebenzi bakho kunye noluntu ukuba **akukho bot yokuqinisekisa iDiscord esemthethweni (`Wick`, `DoubleCounter`, `Pandez`, `Sledgehammer`) uya kuze akucele ukuba uskene ikhowudi ye-QR usebenzisa ikhamera ye-Discord yefowuni ephathwayo.** Iskena sekhowudi ye-QR esakhelwe kwi-app yeselula ye-Discord sikhona kuphela ukuloga ikhompyutha yedesktop entsha kwiakhawunti yakho yeDiscord. Qeqesha iimodareyitha ukuba zikhubaze ii-DM ezingenayo kubahlobo abangengobahlobo phantsi ** Useto lomsebenzisi -> Umxholo kunye neNtlalo -> IiMvume zeNtlalo ** kwaye ungaze uskene ikhowudi yeQR okanye usebenzise `.exe`/`.zip` ifayile ithunyelwe ngeDM.

Izikhokelo ezinxulumeneyo¶

• Ukuthathwa kweakhawunti yemidiya yoluntu kunye nokugqekeza
• Ukuxela umxholo ongekho mthethweni kunye nonobungozi kwi-intanethi
• Ukulungiswa kwabantwana, ukudibana nexhoba, ukuthunyelwa ngesondo kwabantwana, kunye nokunika ingxelo ngeNCMEC
• Ukuxhatshazwa kwi-Intanethi, i-doxxing, kunye nokuxhatshazwa kwi-cyberbullying
• Ijelo labadali liqweqwediswe yi-crypto scam livestreams
• Amanani kaxakeka

Imithombo kunye nezikhokelo ezisemthethweni¶

• Iziko loKhuseleko noKhuseleko lweDiscord (discord.com/safety): Khusela iseva yakho kuhlaselo (Safety Setup, AutoMod, Raid Protection, kwaye Security Actions: Misa izimemo / Misa i-DMs) kunye noLawulo lweeMvume kunye noQinisekiso lweMiba emibini yeeModareyitha.
• Uxwebhu lweDiscord Developer (discord.com/developers/docs): OAuth2 iBot yoGunyaziso lweMida, iiFlegi zeMvume yeBitwise (Administrator = 0x8), uKhuseleko lweWebhook, kunye nokurhoxiswa kophawu.
• Reddit Uncedo kunye neNkxaso yoModareyitha (support.reddithelp.com / r/ModSupport): ULawulo lweSixuku se-Subreddit, izihluzi zokuVava ukuValwa, uLungiselelo oluNgxamisekileyo lweModereyitha ye-Auto, kunye neeNkqubo zokuRollback kwiModareyitha esiKhlweni.
• I-Arhente ye-Cybersecurity kunye ne-Infrastructure Security Agency (CISA) kunye neZiko loKhuseleko lwe-Cyber ​​yeSizwe (NCSC): I-Info-Stealer Malware eNcitshiswayo, i-Electron Application Injection (asar ukuphazamisa), kunye ne-OAuth/Session Token Ukuqweqwedisa.
• Iziko leSizwe laBantwana abalahlekileyo nabaSebenzisiweyo (NCMEC) kunye neSiseko sokuJonga kwi-Intanethi (IWF): IiProthokholi zokuNika iNgxelo eziSinyanzeliso zoMxholo ongekho Mthethweni kunye neZehlo zokuYileka kwiseva.