~ Twitter account situation is resolved.

~ Furaffinity.net situation is resolved, ongoing investigation, site back online.

https://imgur.com/a/ahGk6ZCAt present do not try accessing the Website URL has potentially been hijacked.Wait for for further information to be posted on the site discord.Discord link: discord.gg/furaffinity

kora_viridian said:
I've been getting some weird errors when trying to access FA, over the last hour or so (it is now 23:25 2024-08-19 US-Los Angeles time, or 06:25, 2024-08-20 UTC). The first errors came from Cloudflare, saying Cloudflare is currently unable to resolve your requested domain (www.furaffinity.net). More recently, Firefox itself is giving me an error page, saying An error occurred during a connection to www.furaffinity.net. Cannot communicate securely with peer: no common encryption algorithm(s). Error code: SSL_ERROR_NO_CYPHER_OVERLAP.

Since not all of us are on the FA Discord, please post updates here if you have them. Thanks!

I will try, added the invite link to furaffinity's discord.

ryu_deacon said:

luffy
—
Today at 11:24 PM
ELI5 version:
Someone is trying to trick people by making our website take them to a site that isn't Fur Affinity (e.g. they can make furaffinity.net show their own content rather than our website). This fake website could look like anything but might be designed to look like ours to steal your information.

For this reason, we urge you to not "log into" or visit the site until we follow up.
Please refrain from spreading misinformation or speculation and acting as experts on the situation as it furthers confusion and causes added stress. If someone asks about the situation, redirect them to this channel.

luffy
—
Today at 11:38 PM
@here The website may appear to be back to normal for now, but it’s still under threat. The hijackers have temporarily reverted it to our website, but they can switch it to whatever they want at any moment. Please do not interact with the website.

Reminder: Your personal information is secure and has not been affected.

luffy
—
Today at 12:21 AM
From tech:

"we have two events: original nameserver change and then the change being reverted. these happened around half an hour apart. as in, when I got online to handle things the changes have already been reverted back by the attacker, but things didn't work because cloudflare locked it's service. all this time the website was loading with an SSL error (not having certificate for https) was the time it was pointing to original cloudflare and our domain settings. they just have been locked, and as soon as I unlocked them things start working again.

at no point in time, as far as I can tell, did FA domain resolve to an actual valid webpage which could have grabbed session data."

In other news, I have to go to bed for my human job. Sorry all. Will update first thing in morning.

luffy
—
Today at 8:34 AM
@FA Pings

* The situation is ongoing.
* We are in works to regain ownership of the account.
* Cloudflare was not accessed, our registrar was.
* Your personal information and passwords are safe.
* We advise you to not use the site until further notice. (ELI5 version pinned in

⁠💬┆general-convo ).

luffy
—
Today at 11:28 AM
@FA Pings They are attempting to make the change again. Please do not try to access Fur Affinity, and we will update when we can.
Aaand they changed it back to us again - we do request you continue to not access FA regardless.

updated (8:34am , 11:28am)

https://x.com/furaffinity/status/1826013482971468025?t=LAy_ZAdNg9jBKpnVvd9OPg&s=19

Is there any info on how it got hijacked?

Well that's shocking, is there any official updates on this? Every time I try to access the site it just bring me to some strange merch shop.

anti-furries being super cancerous again.

ryu_deacon said:
https://x.com/furaffinity/status/1826013482971468025?t=LAy_ZAdNg9jBKpnVvd9OPg&s=19

That tweet got deleted. Right now the only tweet related to the FA hijack/outage on the official FA Twitter is this one: https://x.com/furaffinity/status/1825764450806198482

Eep, I tried logging in before I found out about what was going on. Hopefully I'll be okay? Fingers crossed.

Hope they get it sorted soon, what a horrid time for all this shit to happen

I would probably also make this a news pin for E621 so people know not to press FA Links

MAJOR UPDATE

According to a new announcement from the site admins on the FurAffinity Discord, the FurAffinity Twitter Account HAS BEEN COMPROMISED.

As of right now, the only reputable place to get updates is the FurAffinity Discord server (discord.gg/furaffinity). DO NOT TRUST THE TWITTER ACCOUNT UNTIL FURTHER NOTICE FROM FURAFFINITY STAFF.

atomicblaze21 said:

MAJOR UPDATE

According to a new announcement from the site admins on the FurAffinity Discord, the FurAffinity Twitter Account HAS BEEN COMPROMISED.

As of right now, the only reputable place to get updates is the FurAffinity Discord server (discord.gg/furaffinity). DO NOT TRUST THE TWITTER ACCOUNT UNTIL FURTHER NOTICE FROM FURAFFINITY STAFF.

inb4 the Discord server also gets hacked

thegreatwolfgang said:
inb4 the Discord server also gets hacked

Probably. First the site, then the twitter, I have a feeling...

Hold up!

Don't we have ridiculously talented cat-furry-hackers to help us with this?

Is my information at risk?
Are there any measures I should take?

Also, what's this about them redirecting FA's links to The Washington Post and their articles talking about furry pedos?

Like The Washington Post —the same organization that defended tons of serious child molesters from being pulled out from their holes and into the public's attention— is one to talk.

Glaring double-standard, for both the Washington Post and FA's hijacker. To top that off, this hijacker's perpetuating the false idea that 80% of furries are pedos, when anyone could say that about any large-scale community.

Poor execution of attack.
Not even a good troll by troll-standards.
1/10 They're lucky I even give one star, because this is probably either a teenager, or an exceptionally sad and immature adult.

I think it's important to say to unfollow the Fur Affinity twitter account and not interact with any posts while the account is compromised. By commenting, you're giving these bastards exactly what they want: Attention.

Also: Admins, is it possible to put a banner or notice on E621 about the Fur Affinity situation?

atomicblaze21 said:

MAJOR UPDATE

According to a new announcement from the site admins on the FurAffinity Discord, the FurAffinity Twitter Account HAS BEEN COMPROMISED.

As of right now, the only reputable place to get updates is the FurAffinity Discord server (discord.gg/furaffinity). DO NOT TRUST THE TWITTER ACCOUNT UNTIL FURTHER NOTICE FROM FURAFFINITY STAFF.

As a aside all active login sessions have finally been kicked and login functionally has been disabled, according to the discord announcements.

edu2703 said:
I think it's important to say to unfollow the Fur Affinity twitter account and not interact with any posts while the account is compromised. By commenting, you're giving these bastards exactly what they want: Attention.

Also: Admins, is it possible to put a banner or notice on E621 about the Fur Affinity situation?

I agree, a banner would help warn people.
Im sure many e621 users use FA and vice versa

The fuckers took Dragoneers Twitter too and are writing some insane dogshite from it

I can't wait for these guys to find out the thing about lots of furries being hackers isn't a joke

nathmurr said:
Also, what's this about them redirecting FA's links to The Washington Post and their articles talking about furry pedos?

Like The Washington Post —the same organization that defended tons of serious child molesters from being pulled out from their holes and into the public's attention— is one to talk.

Glaring double-standard, for both the Washington Post and FA's hijacker. To top that off, this hijacker's perpetuating the false idea that 80% of furries are pedos, when anyone could say that about any large-scale community.

Poor execution of attack.
Not even a good troll by troll-standards.
1/10 They're lucky I even give one star, because this is probably either a teenager, or an exceptionally sad and immature adult.

Is it even the legitimate WP site/article?

Also, this person is indeed fucking sad. Unfortunately, I have serious doubts about FA being able to regain control of their Twitter account, given how Twitter's been being run (and who by).

You know, for a hacker that hates furries: he sure does have alot of furry shlong saved on his computer to spam the twitter with.

eldfjall said:
Is it even the legitimate WP site/article?

Also, this person is indeed fucking sad. Unfortunately, I have serious doubts about FA being able to regain control of their Twitter account, given how Twitter's been being run (and who by).

look at the bright-ish side, this means that FA may start using bluesky or mastodon

Welp, the FA twitter is gone, for now at least.

Great now they just started posting Racist and Antisemitic remarks :/

the_shinx said:
Welp, the FA twitter is gone, for now at least.

They changed the @ to "ilovekiwi4lunch"

Edit: Looks like someone else managed to change their account to @furaffinity lol

no-one-you-know said:
They changed the @ to "ilovekiwi4lunch"

and then got instantly UN sniped, what a fucking idiot. someone else is sitting on the @furaffinity handle now.

Last I checked FA now sends you to a WSJ article about alleged 'furry pedos' so you know this whole thing is just some pathetic loser with no life who's just trolling the community. Goddamn anti-furs really piss me off. What kind of absolute worthless degenerate seriously goes around doing this? Do they have nothing else going on in their stupid life? What a complete was of oxygen, I'm looking forward to the site being back to normal soon.

disposableyeens said:
Is my information at risk?
Are there any measures I should take?

They did not have access to FA servers. However, if you had entered your login details at any point since the first announcement, it is best that you reset your password after it is safe to access FA again.
If you had used the same email and password for other websites (a very bad practice to begin with), then you will need to reset those as well.

thegreatwolfgang said:
They did not have access to FA servers. However, if you had entered your login details at any point since the first announcement, it is best that you reset your password after it is safe to access FA again.
If you had used the same email and password for other websites (a very bad practice to begin with), then you will need to reset those as well.

If your password is the same password you use for other sites, change it.

Not just for furaffinity, like in general. Don't do that.

url, as of now, currently redirects to kiwi farms

oceanman666 said:
url, as of now, currently redirects to kiwi farms

They're either mad that their crypto scam failed before it began or someone else got access to the accounts

no-one-you-know said:
They're either mad that their crypto scam failed before it began or someone else got access to the accounts

Maybe they just really like kiwis

Anyways though, I'll definitely be changing my PW on FA, I used to use the same one for everything, but have been slowly making every one unique, but haven't gotten to changing it on FA 💀

ryu_deacon said:
https://imgur.com/a/ahGk6ZC

At present do not try accessing the Website URL has potentially been hijacked.

Wait for for further information to be posted on the site discord.

Discord link: discord.gg/furaffinity

---------UPDATE 1
---------UPDATE 2
---------UPDATE 3

This is just crazy... o.o

I hate to admit it, but I fell for it...

What should I do?

no-one-you-know said:
They're either mad that their crypto scam failed before it began or someone else got access to the accounts

After a quick search, Kiwifarms is a harassment forum, one with a long history

oceanman666 said:
url, as of now, currently redirects to kiwi farms

Apparently kiwi farms just put a notice up that they're not involved, not sure how trustworthy it is considering the source though

no-one-you-know said:
Apparently kiwi farms just put a notice up that they're not involved, not sure how trustworthy it is considering the source though

It's a harassment group, they're absolutely involved

markiefox said:
It's a harassment group, they're absolutely involved

That doesn't automatically mean they're involved in this. They don't seem to want anything to do with this situation, to the point where they apparently closed all registration temporarily.

vorelover132 said:
That doesn't automatically mean they're involved in this. They don't seem to want anything to do with this situation, to the point where they apparently closed all registration temporarily.

Looking at kiwifarms right now seems to point towards them not being involved from the looks of it.

just the fact alone that the hacker(s) tried so hard to connect the hack with kiwi farms tells me without a reasonable doubt that it ain't kiwi farms

not to give them any credit for subtlety but those dudes are the exact type of edgelords who would think it's so cool to make it a stealth-ops, and all the kiwi imagery and direct links just smack of some loser trying to give themselves "credibility" that they just don't have

jaythedarklatex said:
Looking at kiwifarms right now seems to point towards them not being involved from the looks of it.

Yeah they seem to be freaking out about this too, ironically they probably want to keep a mostly low profile

Now the hacker has furry hackers and kiwi farms angry at them

no-one-you-know said:
Yeah they seem to be freaking out about this too, ironically they probably want to keep a mostly low profile

Now the hacker has furry hackers and kiwi farms angry at them

This will not end well for them.

jaythedarklatex said:
This will not end well for them.

It's like kicking a hornet nest then immediately punching a killer bee nest

no-one-you-know said:
It's like kicking a hornet nest then immediately punching a killer bee nest

Exactly.

And now kiwifarms is making fun of this person's apparent moral line. Honestly getting me interested in the situation by the second.

It's so fvcking over...

jaythedarklatex said:
Exactly.

And now kiwifarms is making fun of this person's apparent moral line. Honestly getting me interested in the situation by the second.

Oh kiwifarms whining about other peoples' morals is hilarious given its founder was kicked from the 8chan moderation team for being TOO pro-CSAM.

frostii_7 said:
It's so fvcking over...

For whom

frostii_7 said:
It's so fvcking over...

I'm sure they'll be able to get the accounts back

The "hacker" paid 300k for furaffinity.

warlordofpeace said:
The "hacker" paid 300k for furaffinity.

Doubtful

no-one-you-know said:
Doubtful

I mean, they twitted how they payed for it, and there's a screenshot of them losing 300k

warlordofpeace said:
I mean, they twitted how they payed for it, and there's a screenshot of them losing 300k

Rule #1 of compromised accounts: Basically everything they say is a lie.

warlordofpeace said:
I mean, they twitted how they payed for it, and there's a screenshot of them losing 300k

If they have 300k and they spent it on a furry art website, then they're an idiot. Look, I like FA, but it ain't worth 300k.

tarrgon said:
Rule #1 of compromised accounts: Basically everything they say is a lie.

Internet users: I think I'll believe everything I read, there's no such thing as lies

they didn't even get the actual site, just the domain name registrar account, as far as can be determined right now

So anyways, I don't use twitter, nor will I ever dare join the FA discord... What's the current state of FurAffinity? Is it still pwned, am I still free from its clutches??????!!?!!

warlordofpeace said:
I mean, they twitted how they payed for it, and there's a screenshot of them losing 300k

Funny and stupid if true. The fact that it just makes them look like a total dipshit almost makes me believe it because why the fuck would you share that if you knew what you were doing.

nathmurr said:
Hold up!

Don't we have ridiculously talented cat-furry-hackers to help us with this?

I wish m8 Seigedsec disbanded after their last hack on the heritage foundation

geez... just one after another. i rest my case about this year getting crappier cause it just keeps going. what a mess...

Let’s hope that things will be back to normal tomorrow.

👆🏽 Ditto. Fingers crossed.

If the worst case scenario happens, would other sites like Inkbunny, SoFurry, and maybe even e621 fit in FA's shoes to become the main hub for furries?
I know there's also DeviantArt, but I know some like me who don't want to interact with it that often because of unpopular changes, but it's also a hub for artists.

I cant wait to see the jokes of the people about this, It is the least that FA CEO deserve for years of mismanagement and now giving away user information cause their negligence, They sleep on their laurels of more and more restrictive and stupid rules, for our "security" and now this happens?! I sincerely hope that the top tier artists of FA have not suffered a reduction in their PayPal assets, or not There will be God who will have mercy on the owners of the page, but no one will forget this blow and I hope it hurts them to remember it.....

nadie_importante1066 said:
I cant wait to see the jokes of the people about this, It is the least that FA CEO deserve for years of mismanagement and now giving away user information cause their negligence, They sleep on their laurels of more and more restrictive and stupid rules, for our "security" and now this happens?! I sincerely hope that the top tier artists of FA have not suffered a reduction in their PayPal assets, or not There will be God who will have mercy on the owners of the page, but no one will forget this blow and I hope it hurts them to remember it.....

FA's CEO fucking died, my dude.

dba_afish said:
FA's CEO fucking died, my dude.

I know but , he wasnt the only one

nadie_importante1066 said:
I cant wait to see the jokes of the people about this, It is the least that FA CEO deserve for years of mismanagement and now giving away user information cause their negligence, They sleep on their laurels of more and more restrictive and stupid rules, for our "security" and now this happens?! I sincerely hope that the top tier artists of FA have not suffered a reduction in their PayPal assets, or not There will be God who will have mercy on the owners of the page, but no one will forget this blow and I hope it hurts them to remember it.....

The FA owner died about a week or so ago, and his friends/family/loved ones have been busy trying to deal with the finances and logistics of handling all that entails, including his funeral and trying to keep up with FA's bills. Whoever's responsible for this really hit a low blow for timing this attack as they did.

watsit said:
The FA owner died about a week or so ago, and his friends/family/loved ones have been busy trying to deal with the finances and logistics of handling all that entails, including his funeral and trying to keep up with FA's bills. Whoever's responsible for this really hit a low blow for timing this attack as they did.

so....for real?, everything was concentrated on one person?...great, just great...

nadie_importante1066 said:
so....for real?, everything was concentrated on one person?...great, just great...

That's your takeaway, huh...

gobey said:
That's your takeaway, huh...

Yeah, I feel really stupid now....

To think, someone could know this jackass personally, beyond their twitter handle (which does appear to be known to a few due to the monetary amount mentioned), and what they've done...

jaythedarklatex said:
Exactly.

And now kiwifarms is making fun of this person's apparent moral line. Honestly getting me interested in the situation by the second.

An organization of borderline cyberterrorists is mocking how low someone else is willing to stoop? Oh, that is rich.

If KF is telling the truth and they genuinely WEREN'T behind this... that hacker has no idea what's behind the gates they just opened. I almost feel sorry for them... almost.