Furaffinity DNS hijacking [FA is back up]

2 years ago by l_b_i to c/chat

So it seems someone got control of the registrar. So guess for a failure of networksolutions? social engineering of the same? or phishing?

update: August 22 FA is back up. See announcement on twitter, discord, or screenshots of the same floating around.

savvywolf 7 points 2 years ago

For anyone wondering the current status of this: Fur Affinity have lost control of their Twitter but have manage to get control of their dns back. They're just doing some tests and getting the site back online. The hacking group NullBulge claim to have found out who did it, but I'm not sure I understand their evidence.

And before anyone asks: Both Mastodon and Bluesky use dns to "verify" people, so they wouldn't necessarily have been safer.

Secure your dns, people!

path: 0 11911641, hotness: undefined, score: 7, children: 0
Kit 6 points 2 years ago

I haven't seen any indication of networksolutions compromise from my enterprise clients, fwiw

path: 0 11888111, hotness: undefined, score: 6, children: 0
user224 4 points 2 years ago

I'd rather guess someone got access to FA's Cloudflare account. furaffinity.net just resolves to a CF IP as it used to.

path: 0 11899128, hotness: undefined, score: 4, children: 1
l_b_i 5 points 2 years ago

There are screenshots from the FA discord floating around that state it was the account with the registrar that was compromised.

path: 0 11899128 11900222, hotness: undefined, score: 5, children: 0
chat
chat

@yiffit.net

login for more options
689
179
1

Yiffit chat! Talk about anything you want here.

Mention @chat@yiffit.net from your favorite Fediverse / Mastodon client to post here directly, or post directly via any Lemmy instance.

Community Icon (CC-BY-NC-SA) Tom Fischbach

go to feed...