Transcription
Hello guys and gals, me Mudahar. You probably heard today that Discord got hacked and I'm here to set the misinformation straight. No, Discord has not been hacked. Kind of actually.
See, Discord is a huge huge platform and they work with a lot of people that are uh you know there to help Discord out with things like support and so on and so forth. So, actually it was one of Discord's partners that ended up getting hacked. And because they got hacked, a few of you guys out there that probably sent in your ID with a support ticket actually got it leaked.
So, how did this actually happen, ladies and gentlemen? Well, about two weeks ago, Discord got hacked and they sent out this email to uh, you know, anybody that could have been affected yesterday. So, this email says, "Hello, we're reaching out to you because of a recent security incident on September 20th involving your personal data." Oo, when you read one of when you read that, you know things are not looking good. Specifically, an unauthorized party, hackers, gained limited access to a third-party customer service system used by Discord. We have confirmed that some of your personal data associated with your contact with our customer support or trust and safety teams were exposed in this incident.
So who are those what are what is that information? Well, your name for instance, your Discord username, your email, other contact details if you provided them, limited payment information, and limited basically means your payment type, last four digits of your credit card, and the purchase history if associated with your account. So, if you're somebody like me that, you know, probably paid Discord Nitro, um, you know, and you filled out a support ticket with their trust and safety teams, wait until you figure out why these support tickets have to get written. Apparently, yeah, the last four digits are out there, which isn't the end of the world, but you also don't want that out. Your IP addresses, which really don't matter much in the grand scheme of things, okay? Don't don't don't don't just relax. Messages and attachments sent to our customer support or trust and safety agents. So, provider you didn't send anything super personal. Yeah, they've got access to that [ __ ]. What it didn't include, thank God, was full credit card numbers or CCV codes, which are the three little magic numbers on the back that let your credit card be used. Thank God that didn't get leaked. God bless your physical address. Okay, we can breathe easy. Your messages or activity on Discord beyond what you discussed with customer support. to know, you know, the group chat didn't get leaked because somebody had to talk to Discord's teams or thankfully your Discord password or authentication data. None of these things would have made any sense for it to be hacked. If they were hacked through a third party, then uh honestly, I think Discord should probably be [ __ ] panned. We should all just switch over to TeamSpeak or or anything else if any of those four bullet points got leaked because of this hack.
So, obviously, look, this is a pretty serious situation. And uh the reason why it's so serious is because a lot of this had to do with age verification. So for anybody that doesn't know, a lot of the internet now needs you to I guess age verify yourself. Everyone needs to know if you're over the age of 18 so you can access certain things on Discord, certain social media services, because yes, we live in a world now where the government needs to baby every [ __ ] thing we do on the internet because parents are just so [ __ ] brain dead that they can't do this job themselves. Okay, that's just the world we're in. Okay, if I sound pissed saying that, well, you haven't heard the half of it.
But anyways, the thing about it is is obviously what was hacked is apparently their Zenesk. Now, from what I understand, Zenesk is sort of the customer support tool that they use in order to detail out tickets, take care of tickets. In fact, it's used pretty much by a big bunch of organizations. Places like Shopify, places like Uber, places like Seammens, places like Tesco for instance. There's a lot of places in here. And of course, it makes it super easy for you to have conversations. Makes it super easy for being efficient thankfully with all these AI tools that I'm pretty sure Zenesk has to make use of because they paid up the ass for them. And then of course, you've also got the ability to close those tickets as quick as you can.
In this case, they actually say it on their website. The unauthorized party also gained access to a small number of government ID images. Example, your driver's licenses or your passports, not small documents, by the way. Okay? Because yes, driver's licenses do contain addresses in some case, as do [ __ ] passports. [ __ ] me. Actually, I don't know if the Canadian passport doesn't, but I know my driver's license does. From users who had to appeal an age determination. If your ID may have been accessed, that will be specified in the email you receive.
So, let's say you filled Let's say that Discord decided to, you know, their [ __ ] AI was acting up and they're like, "Hold on, wait a minute. We think you're a little kid. We think we think you're a minor. You're going to have to give us an ID." Right? And again, obviously, Discord is like legally required to do this. I'm pretty sure no organization wants to go through the liability, which we'll get to. But yeah, they're they're they're supposed to ask you for your ID, right? So, you give them your ID because, you know, otherwise you can't access your Discord account and talk with your friends or join your [ __ ] you know, groups or whatever. So, you're like, "Okay, let me go to the trust and safety team. Let me give them my ID." Right? It's similar to how any of these social media platforms ask you. And to my knowledge, my understanding, aides from Google uh and YouTube, because I at the end of the day, I have a financial relationship with the site, I don't provide my ID pretty much to anybody. Like Facebook, specifically Instagram, has banned my original account for impersonation of, I guess, a public figure. Uh, and decided to [ __ ] ban me, okay? An account that I had, I think, before I even started YouTube videos. So anyways, it they they banned my account, okay? And they were like, "Hey, give us an ID and then we'll reopen it." And I'm like, "No, Mark, I'm not giving you my [ __ ] ID."
So ultimately, Discord did the same thing and users were like, "Okay, sure. Here's my identification. Let me get access." Now, if you filled out a support ticket, that ID that you gave that ticket could potentially be leaked. So, meaning that in the age of ID verification, basically the worst nightmare has happened. And this is why I'm making a video about it because I I said this way before these laws were even passed or even thought of, right? And and ultimately when it comes to liability, bro, who is responsible, okay? Like if the government and these big tech companies want us to give [ __ ] IDs, at least take some [ __ ] ownership, take some L's, give us some money back. if I if ultimately you end up taking some of our most personal information, giving it to a third party, and letting it get stolen. And you know, it's funny to me that when you go to a lot of these like authentication things, it's always like, "Don't worry, we'll delete your information. We'll delete your selfie." And then it almost turns out that that never happens. Okay? Usually the information is sitting on some [ __ ] server or an unsecured bucket in the worst case for somebody in the world to just grab. Okay? And in this case, a bunch of hackers decided we're going to target Discord's like support tool and then they won from there. They got people's information.
Now, I've seen people downplay this by saying, "It's not a big deal, Muda. It's only a small amount of people." Bro, in my opinion, even one person having their personally identifiable information leaked like this is enough. Okay? But there's way more people than just one getting hacked through this. Okay? Obviously, it's not the entire website. If it was, holy [ __ ], we would be we would have a we would have a much different video here. But this is still really bad. Now, obviously, not every single person in the Discord Discord age verification was absolutely compromised. It was, from my understanding, people that were involved with the actual like support system, right? So, if they went through a specific channel. Now, obviously, uh, if you're somebody who's been affected like this, Discord should have sent you an email with that specific mention. And if they did, you probably I I don't honestly at this point, like, aides from going to your credit monitoring service and like making sure that things are kind of locked down or monitored, there's really not much more you can do.
Look, ultimately, the end of this, the the goal for some of these people is identity theft. And I remember when I was growing up as a kid, uh, you know, I heard the words identity theft. It was one of the biggest crimes ever, right? Somebody could have their identity stolen and God knows what people could do with it and they would only find out about the [ __ ] down the road when things were pretty much done and dusted. So if you are somebody that has your [ __ ] leaked, go to a credit monitoring service, make sure things are locked down, keep an eye on that for a little bit because if somebody really wants to use your identity for nefarious reasons, uh really I would say do the [ __ ] best you can to combat that [ __ ]. That's pretty much it.
So look, ultimately, yes, Discord did get hacked. And you might be wondering, okay, well, how the [ __ ] does Discord's support partner even get hacked? Muda, what could happen in this situation? Now, ultimately, look, at the end of the day, there's been a lot of hoopla about Discord and possibly getting hacked. Like, there was one group called like spy.pet, which was a data harvesting site that scraped apparently like a billion something messages from hundreds of users. And it really came out to the fact that apparently it was just public facing servers. So really the news that kind of surrounds a lot of hacks sometimes gets lost in misinformation sauce. Okay, this is a lot different than public servers having like text messages scraped. But when the public messages get scraped, I think it's really up to Discord to realize like, bro, you're one of the largest communication platforms in the [ __ ] world. Probably the largest we've ever seen by a country mile. And you know when when these guys end up taking our [ __ ] so when when they don't put any serious thought into protecting people, what recourse do we have? You know, in a few days, Discord CEO is about to go in front of [ __ ] the the US government for talking about extremism on their platform. But honestly, I really do think that at some point we have to have a conversation. Bro, if the world wants us to use ID verification, then these companies and and also the government needs to be [ __ ] held liable financially and legally whenever this kind of [ __ ] happens because honestly 2025, dude, for the last few years even. The amount of insane cyber attacks that have been happening is is just insane. And the amount of people that have been getting compromised is is just, you know, it makes you wonder like is there ever any effort put in to just protecting you guys even slightly on these sites?
You know, again, one of the only assumptions that somebody could kind of have about this is like how does Zenesk get hacked? And honestly, it could be multiple ways. Like, you know, it could be a fishing email, something similar to this. Like this is a joke email obviously. I mean, it's a fishing attempt, but you can see that obviously all caps, somebody's Jeff Bezos, CEO of Amazon. It's on this note that I'm informing the world of my intention to give out my fortune of 124 billion of my wealth. You know, if you're somebody that believes this, there's a whole lot of Nigerian princes you can [ __ ] meet out in the internet. Okay? Goddamn.
But look, at the end, it's getting to a point where hacking a lot of these organizations is is starting to become easier. For instance, one of the things that I was reading on a few days ago was apparently this AI powered spam GPT that apparently creates some of the most insane fishing attacks against organizations or the individual person, right? And it's this cyber crime toolkit that surfaces on the dock web offering fishing as a service. The platform allows attackers to run professional-grade campaigns with minimal technical expertise for a reported price of $5,000. Now, obviously, I'm somebody that has browsed the dark web. So, I decided to go to the dark web, and I didn't in fact find the exact places, the exact sites, the exact threads selling these services, right? This AI sender email, this fishing spam GPT. But the thing is ultimately at the end it's just a bunch of individuals using commonly available AI toolkits in order to launch attacks, right? I mean it's crazy to think that you can download models. And I'm not going to show you exactly what they are, but I've talked about this before. You know, if you go to chat GPT or you go to like, you know, any, you know, publicly available, easily accessible AI, they have a lot of guardrails, but you can always download uncensored local artificial intelligences. And provided you know what to do with system prompts and whatnot, you can really take the guard rails off and start using these toolkits to write again malware. You don't you don't even have to pay a company like $5,000 to do the system prompt [ __ ] for you. This is stuff that, you know, unfortunately anybody that has no understanding of any computer malware can ask AI now to write themselves decently competent, not perfect ransomware and then learn how to package that ransomware into an easily accessible format like a PDF file and then send that through an email and provided somebody accesses that on these support networks because remember it's not like everyone is using military grade encryption and VMs and all these crazy systems to secure themselves. Everyone is capable of getting hacked. Okay, there's a good chance that even the smartest people can sometimes be susceptible to what appears to be a pretty easy hack. And ultimately, it's because of these kind of hacks, and again, this is just very much speculation on how I think this happened. Again, email spam is probably some of the most common way to deliver [ __ ], but generally speaking, these guys got hacked. And what shocks me is that they were storing your personal information like your driver's licenses for easy accessibility. And I think at the end of the day, that's [ __ ] lawsuit worthy. Okay? Especially against Discord. Okay? Discord should have been making sure that whoever their third party was was getting rid of your personal [ __ ] information after they verified because if this is the world we're going to head into, at least let's secure our people before, you know, the worst tends to happen.
So, if you are affected by this, check your credit monitoring. And ultimately, if anybody asks you for ID on the internet, tell them to go [ __ ] themselves. All right? It doesn't matter who how big or small they are, okay? Keep yourself safe. If you like what you saw, please like, comment, and subscribe. Dislike it if you dislike it. I am out.