2026-09-06 12:53 UTC
I’m seeing more than normal number of account takeovers. Please don’t click on telegram links and for the love of $deity, please use 2fa.
Replies (6)
-
@ChickenPwny@infosec.exchange 2026-09-06 12:55
@jerry@infosec.exchange meow
-
@gangrif@social.undrground.org 2026-09-06 13:24
@jerry@infosec.exchange But jerry, she needed my help. and she was cute. (this is complete conjecture, hope youre not going too crazy over there!)
-
@Jerry@hear-me.social 2026-09-06 16:13
@jerry@infosec.exchange I just suspended an account takeover here, just 5 minutes ago, that posted racist stuff and referenced Telegram links.
-
@derickr@phpc.social 2026-09-06 19:48
@jerry@infosec.exchange We had a bunch on our instance too. We suspect password reuse.
-
@SpaceLifeForm@infosec.exchange 2026-09-06 22:27
@jerry@infosec.exchange A thought: Always show a 2FA form box whether or not the user has 2FA enabled or not. A tricky twist: Randomize the order of the username, psssword, and 2FA fields.
-
@mr2fa@infosec.exchange 2026-09-07 22:42
@jerry@infosec.exchange I could not agree more.