Login
You're viewing the nerdjoy.social public feed.
  • Scary "Grampus" Jerry 👻jerry@infosec.exchange
    Oct 18, 2026, 11:22 AM

    Ohh, we just had an old account with 2FA (so password not reset) apparently hijacked and used to send spam (a different kind I hadn’t seen before). That is a good indication some service that uses auth tokens got hit. Now to figure out which

    💬 1🔄 15⭐ 17

Replies

  • Scary "Grampus" Jerry 👻jerry@infosec.exchange
    Oct 18, 2026, 11:49 AM

    I advised the person to change the password and remove all the authorized apps for their account and sign in again on any that they still use. Probably good advice for everyone right now until we know what is going on.

    💬 0🔄 8⭐ 15