8 ms·

At first glance, the "hack" looked to be a pretty basic phishing setup, but it seems like some kind of Discord functionality may have been compromised? That wou

• shiohime 5y ago
  This is the thing that stands out most to me here - how did the phisher possibly post in the announcements channel?? This exploit seems like it could have further reaching impacts assuming the announcements channel and server roles / permissions was configured properly. Otherwise this is no different from like almost any other phishing attack since the beginning of time... .
  • belltaco 5y ago
    The webhook URL to post to that channel got leaked outside of Discord, doesn't seem like a Discord exploit.
    • shmatt 5y ago
      so simply that URL was worth about $1,000,000 I hope whoever sold it didn't undervalue their asset
• jmuguy 5y ago
  I think a lot of bad actors in the crypto community are going after Discord setups. For instance a recent NPM watering hole attack downloaded a scanner that was looking for Discord related credentials and settings. This article mentions a webhook being compromised.
• mgraczyk 5y ago
  I'd be willing to bet it's an opsec mistake by one of the mods. Somebody misplaced a device or got phished, or similar.