Discord Account Compromised
🕑 Added 2022-02-18 22:25:45 +0000 UTCEveryone,
The Westane Discord account has been compromised and is no longer under my control. Please do not respond to any messages from this account until I can confirm here that the issue has been resolved. I am working with Discord now to have this issue resolved.
The account was compromised in spite have 2FA in place and a complex password. No other accounts linked to The Company have been compromised, and I will continue to post updates concerning this issue here on Patreon.
I apologize for this inconvenience!
Comments
I never got a message but got kicked after I helped Haeso and Thundervamp by unblocking them. I got tagged in the micropoll then gone the whole server went for me
Yeah same here, I'm hoping most people will remember the message from yesterday and know not to click any links.
well... hope all those people reacting to his posts on command aren't also clicking links in DMs
I messaged Haseo and he said it was the hacker doing it
the whole server seems to have gotten cleared with a new at everyone message. is that you or the hacker? there's alot of activity from the westane account on there right now.
Cleverly Blonde
The very program the hacker is using the account to spread is a trojan that basically provides remote admin capability to whatever computer is infected in order to facilitate other attacks. One of those seem to be to try to remove MFA from the account.
Cleverly Blonde
Maybe update the blog too? As the fake westane is trying to send people links to malicious software.
Icarus Media
How does it happen though? How do they gain access? Clicking something malicious or server vulnerability?
Good luck there. I lost my old discord account because of it
Westane
No update yet, at the mercy of Discord's support team.
Thomas R Roberts
Any update on recovering it?
Cleverly Blonde
The "game" that the hacker attempts to spread is called Oneeva, it is a trojan that basically acts like a remote control tool for future actions by the hacker. I submitted the ZIP file to Microsofts malware service for analysis and it flagged: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan%3aScript%2fOneeva.A!ml which I then googled the name of.
Thomas R Roberts
Yeah, I'm still out also. Thanks anyway.
L
i recommend you nuke it and start over
L
oh rip
I have been kicked off now so can't help anyone else
Done
Thomas R Roberts
OK then. ThunderVamp9#8607