🚨⚠️ IMPORTANT: This attack has already affected several servers in the #Cardano ecosystem ⚠️🚨 What happened: In recent days, we've observed a wave of attacks on Discord servers within the Cardano community. Our Slap! server was also targeted. Thanks to a quick response, we managed to contain the situation, but we want to warn the entire community this attack can affect anyone. How this attack works: Step 1: The bait You receive a DM or see a post a collaboration proposal, job offer, invitation to a new project, participation in an airdrop. Something that sounds interesting and legitimate. Step 2: Fake server You click the link and join a Discord server. It looks professional. To access the channels, you need to "verify." Step 3: Verification page You click the verification button and get redirected to an external website. The site looks legit similar to other verification pages you've used before. Nothing seems suspicious. Step 4: Session theft If you're logged into Discord in your browser, the site silently steals your session token the keys to your account. The attacker doesn't need your password or 2FA codes. They already have access. Step 5: Taking control From your account, the attacker takes over servers where you have permissions. They create admin roles, delete channels and logs, ban team members, and then send the same links to others from your account, which appears trustworthy. Why this is dangerous for Cardano: - Attackers target people with permissions on project servers - Compromised admin account = compromised server = threat to the entire community - Links sent from trusted accounts have higher success rates - The attack spreads rapidly between connected servers 🚨 Accounts linked to the attack: • soumaya (@diva8fu) — ID: 854993363753238528 • liwane (@liwane) — ID: 830771374179745792 • Dyno (@dyno_3681) — ID: 594892848613294091 • Bobit (@.bobit_) — ID: 635642832157147137 • Mazi (@mazi1505) — ID: 850533171497009152 If you see activity from these accounts on other servers report and ban them. How to protect yourself recommendations for Cardano community: For users: - Never click "verification" links leading to external websites - Real verification happens inside Discord (reaction, command, bot) - Don't scan QR codes "for verification" - Be suspicious of unexpected collaboration offers or proposals For admins and moderators: - Check role permissions on your servers only trusted roles should have Administrator - Review webhooks and integrations - Enable 2FA requirement for moderation (Server Settings → Safety) - Educate your community members about this threat If you clicked a suspicious link: - Immediately change your Discord password - Log out all sessions (Settings → Devices) - Remove unknown apps (Settings → Authorized Apps) - Scan your computer with antivirus software ✅ Slap! server status The attack was detected and neutralized. All suspicious accounts have been banned, permissions restored, and security strengthened. Slap! server is safe. Our community is operating normally. We're publishing this information to warn others and strengthen the entire Cardano community. Only together can we defend against such attacks. Stay vigilant. Look out for each other. #Cardano is strong because of its community. 💙