• @Candelestine
    link
    English
    2010 months ago

    Huh… so this probably is more sophisticated than a single acct breach then. Lovely.

    • bootyberrypancakes
      link
      fedilink
      English
      1710 months ago

      Yeah, I’d recommend any server admin that doesn’t have 2FA turn it on ASAP until we know what their exploiting

      • @[email protected]
        link
        fedilink
        English
        1110 months ago

        Looks like the accounts were compromised by stealing their cookie - something 2FA can’t stop.

        Still should have it on, though.