Post

Tom
@moll.dev

holy shit, they popped an account with 22k followers and look at the spam network in the quotes. 5k quotes in 2 hours too.

This post is unavailable.
Tom
@moll.dev

if you look on PDSls they will wipe all the posts first, then spam. However, they don't wipe the likes so the account will have hundreds of likes before 4/11 or 4/12 before the account was taken over bsky.app/profile/momo...

This post is unavailable.
Tom
@moll.dev

popping accounts (one that reposted the one I linked) that are pretty prominent too. I wonder if a bunch of app passwords got leaked.

(((Eddie)))
@abracadocious.bsky.social

I highly doubt that passwords are stored or transported in cleartext. Some folks might have weaker passwords that can be guessed. I know that there's been a bunch of work done on BSky session tokens. It's possible albeit unlikely that attackers figured out a way to acquire a user's token.