I've had some tech friends walk me through what's going on. I still don't understand it. Important shit first, explanation behind the break:
FURAFFINITY.NET IS COMPROMISED, DO NOT LOG INTO OR NAVIGATE TO FURAFFINITY OR THE "FURAFFINITY STORE".
ALSO, FURAFFINITY'S TWITTER IS COMPROMISED AND DISABLED REPLIES, DELETED POSTS DOCUMENTING THE HACK.
Okay, details below.
Speculation is wild and on the Furaffinity Discord, chatter is being clamped down as the present administration of Furaffinity doesn't understand the concept of Press Releases (using trusted media partners to disseminate information as an official channel of communication between the Administration and the Public). This has lead the Furaffinity Discord to have many chilling attempts to slow or stop conversation about this topic be rationalized under the "stopping misinformation" excuse. If they had real fucking updates on developments, it'd be a lot easier to help a community stop the spread of misinformation.
Reminder: The Furaffinity.net Website is currently hijacked and may redirect you to unwanted locations that could scoop information. The Furaffinity Twitter account and the late Dragoneer's Bluesky account were both compromised, and were used to shitpost at the community's collective expense. At time of writing, there is no other news.
Suffice to say, the following is speculation:
In their 6 hour long tantrum after realizing that everyone knew Furaffinity was pwned including the admins of Furaffinity who did what damage control they could (such as resetting everyone's log-in tokens to be invalid), the hacker elected to mostly shitpost around and rope in Kiwifarms inexplicably, shunting the blame onto that infamous den of scum and villainy. This naturally drew ire from Kiwifarms and by extension the crypto-shilling the hacker did on the late dragoneer's bluesky account resulted in folks associated with the Project 2025 leaks from earlier this Summer to also chime in publicly.
There's a third party entering the fray of people who are getting roped in; a hacking group that had a plan to go after Furaffinity, soyjack.party, which seems to have been name dropped somewhere near the tail end of this dude's tantrum. I've not rolled my sleeves up and dove into the Kiwifarms cesspits for the sake of my own sanity, but multiple trusted pals are independently reporting these details to me, so I'm guessing it might be real. There allegedly is probably already a Dox'ing afoot, allegedly there might even be a face reveal, the perp might even be 15 for real, and singular. It explains some of the behavior.
There are troubling signs that a bigger exploit was used than some simple Spear-Phishing and credentials lifting, with the open suggestion from a cyber security pal I happen to know indicating that Furaffinity's choice of vendor for their @furaffinity.net email domain could be compromised enough that the hacker (15 or no, pwned is pwned) could leak the back end of. I only have the acronym OVH to work from, its allegedly a server hosting company. Cloudflare continues to cycle on and off on Furaffinity access attempts themselves, so it seems like the battle, whatever there may be, is far from over.
Part of ID'ing the perp includes a case profile that suggests they are a fan of Roblox Youtube, particularly a youtuber called "Ruben Sim" who is edgy and hates furries as their brand identity. There might even be deep pockets attached to the kid, as some very indistinct screenshots indicating a "300,000" [currency] loss of some kind was accrued in a single day, which if that was the case it'd make Furaffinity rather valuable maybe. Of course, it could be in Rubles. Did we forget the hacker could be you know, Russian? Like the last one? Ah well.
Sometimes it's hard keeping track of all of the stupid shit happening at once, I woke up this morning seemingly at the same time the hacker did, because it wasn't till my coffee was ready 2 hours later that today's lunacy resumed after that 12am notice. Remembering things and finding their sources is going to get harder as FA's Mods and Admin work dutifully to stymie all discussion in their little fiefdom about these topics, and the conversation moves into increasingly fringe spaces. I'll try to keep myself abreast of the news, but there's a lot of it and not all of it is especially easy to validate even transpired in the first place.
Seriously how the fuck do these people not understand a press release, and why is the present public communication figurehead going to a fucking concert in the middle of this? Like c'mon are you 12?
