Lemmy.world is compromised

They been redirecting to lemon party and some weird video. Do not go to the website. This is the admin that been hacked:

EDIT: lemmy.blahaj.zone also compromised!

11 points · 17 comments · view on lemmy.world

17 Comments

TruckBC@lemmy.ca MOD · 5 pts · 3y (5 replies)

Out of precaution we will defederate from lemmy.world until this is resolved.

Edit: Lemmy.world has resolved the issue

remotedev@lemmy.ca · 1 pts · 3y

Have they resolved it? I can't comment there, or is that from this instance defederating from them? I don't have my lemmy.world account on this app

durablenapkin@lemmy.ca · 1 pts · 3y

I appreciate the proactivity/precaution!

dampfnudel@lemmy.zip · 1 pts · 3y (1 reply)
[ removed ]
TruckBC@lemmy.ca · 2 pts · 3y

Although requiring 2FA, for all admins on your instance seems appropriate.

To my knowledge we all have 2FA enabled. Will confirm.

Roggie@lemmy.zip · 0 pts · 3y

It is once again comprised

Tugboater203@kbin.social · 4 pts · 3y (1 reply)

It's still compromised, right now it's showing text that says site seized by reddit for copyright infringement. Lol. Jerboa is just showing Lemmy World heads

Vampiric_Luma@lemmy.ca · 0 pts · 3y

*infringment

Anon819450514@lemmy.ca · 3 pts · 3y

The page redirects is named Israel and it redirects to blank page with "This site was seized by Reddit for copyright infringement". So no, they don't have control yet.

bioemerl@kbin.social · 1 pts · 3y

And this is why you use a password manager whenever you make new accounts on the internet.

If you had an account on the Lemmy.world website you need to change your password.

sykccc@lemmy.ca · 1 pts · 3y

Looks like it’s gonna be a bit really put a lid on this, but I guess another sign why this is a good system?

AnonymousLlama@kbin.social · 1 pts · 3y

Lemonparty! Now that's a name I haven't heard in ages πŸ‹πŸ‹πŸ‹πŸ‘΄

PenguinTD@lemmy.ca · 0 pts · 3y (1 reply)

Is there a way to not do email verification but still using 2FA? That way, even if a user's account is somehow phished/compromised, it won't compromise their other accounts.

TruckBC@lemmy.ca · 2 pts · 3y

I just successfully set up 2FA for an account on another instance that doesn't have a verified email without any issues, so there's no need to have done email verification to use 2FA.

thundercunt@lemm.ee · 0 pts · 3y (1 reply)

First vlemmy now this? what the fuck is going on?

thundercunt@lemm.ee · -1 pts · 3y

this feels too intentional with two big servers in this short time frame icl

hawkwind@lemmy.management · -1 pts · 3y

Guys, the new Israel lemmy instance has a lot of content I like, but some images I don't agree with. should we defederate?