trying to find it, but as usual search engines aren’t returning shit.

    • irelephant [he/him]🍭@lemm.eeOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 days ago

      I dismissed that one because it looked too official, but yeah, a bit more digging shows its a new account, so its likely the leak.

      Thanks!

  • Rimu@piefed.social
    link
    fedilink
    English
    arrow-up
    5
    ·
    6 days ago

    I saw a snippet of it.

    The code was using a function to connect to mysql that was deprecated in PHP 5 and removed in PHP 7. So they must have been running PHP 5.x. It also contained an obvious SQL injection vuln (although that wasn’t used for the hack).