3
[PSA] Server owners beware! Downloading untrusty plugins can be a BAD idea!
Noah
TheDiamondPlayables
Please be on alert for people joining your Discord / Minecraft server asking you to install a plugin they made! They will typically say they're going to be selling it for cash on Spigot soon and need help testing it, however they are not doing that and will get access to your server!
Here is a direct transcript of a user going by "Hoaxen#7064" on Discord rummaging through PMC to find vulnerable servers.
https://tickettool.xyz/direct?url=https://cdn.discordapp.com/attachments/836843404989300747/884828044768993351/transcript-closed-0205.html
Long story short, don't install plugins that aren't reputable! They can code anything in these plugins to type a silent command to give themselves OP, items, or anything they desire pretty much. I know for most server owners they are aware of this, but it definitely happens to smaller servers!
Here is a direct transcript of a user going by "Hoaxen#7064" on Discord rummaging through PMC to find vulnerable servers.
https://tickettool.xyz/direct?url=https://cdn.discordapp.com/attachments/836843404989300747/884828044768993351/transcript-closed-0205.html
Long story short, don't install plugins that aren't reputable! They can code anything in these plugins to type a silent command to give themselves OP, items, or anything they desire pretty much. I know for most server owners they are aware of this, but it definitely happens to smaller servers!
Create an account or sign in to comment.
2
3
Look before you leap.
3
A good rule for the internet in general.
Don't download anything someone is pushing on you unless you do some research to it's legitimacy. Even then, always download from reputable sites/sources.
Don't download anything someone is pushing on you unless you do some research to it's legitimacy. Even then, always download from reputable sites/sources.
