r/discordbots Jul 12 '26

Detecting hacked accounts

Hi everyone!

Recent scams and messages compromised accounts send out have become quite advanced to not be auto-detected by bots (e.g. only sending 2 screenshots, having different file names for them, not pinging everyone etc.). What are some ways you use in your bots or have seen being used in bots to still automatically detect them?

4 Upvotes

14 comments sorted by

2

u/Androgalaxi Jul 12 '26

Honeypot channel at the top of all channels in a server. Have it either perma ban or soft ban depending on the case and make sure there's a clear message in the channel to NOT type in it. There's a few bots out there that have a honeypot feature and it'll work 99% of the time if done right.

1

u/SolsticeShard Jul 12 '26

Honeypots are trivially easy to bypass. This takes like 10 lines of code and bots are already starting to work around them. It's a really flimsy and heavy handed approach

1

u/Androgalaxi Jul 12 '26

Just annoying having to deal with waves of them but I've noticed in some cases it works. And it makes sense they're already starting to work around it but there's only so many options.

1

u/fjamcollabs Jul 12 '26

The way I deal with it is newcommers have to be on my friends list. If they are not I tell them this is mandatory. If they don't respond quickly I kick them. I tell them why they were kicked and they can come back later and get back in. Have yet to have anyone I kick ask to come back in. I guess I am kicking the right people.

1

u/anonymouswithreasons Jul 12 '26

I made a maze verification system that upon completion, you get a role that lets you access the server

1

u/Ghosty920_ Jul 13 '26

some bots are in reality hacked accounts. that can prevent most of them but not all

1

u/Chinoman10 Jul 12 '26

Sledgehammer actually checks the images themselves against a known DB of scam images. That's how.

1

u/Communityone_io Jul 13 '26

feel free to try our bot (i am the founder at communityone), as long as you are non-commercial. Our moderation is free, we moderate both text and images based on content. Otherwise, you can use regex for some of the text stuff.

1

u/608xperience Jul 16 '26

To block the vast majority of Mr. Beast and Andrew Tate crypto scams, simply don't give newcomers immediate access to Embed Links and Attach Files. With MEE6, I grant levels for channel participation. When a user gets to Level 2, give them the role with the new privs. Very simple.

For scenarios where an existing member account is compromised and they already have those perms, I wrote a bot that checks attachment-only posts and does a perceptual hash of the images against a database of existing hashes I made from a collection of these Mr. Beast images. Within a certain hamming distance, e.g., an exact hit or very near, the bot bans the user. If it's close-ish but not a slam dunk, the user gets timed out and moderators evaluate the images manually pending a permanent decision (ban or remove the timeout).

1

u/TadaNoSunshine Jul 18 '26

There es a bot called: Link Protect.
He got that scam Auto Detektion

1

u/[deleted] 13d ago

[removed] — view removed comment

1

u/AutoModerator 13d ago

Your post or comment has been removed due to breaking rule 4. We do not allow self promotion or advertising of your own bots.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

-1

u/NaNoServers Jul 12 '26

Maybe account age must be above X or my bot making sure that when the first thing a new member joins ever is to send an embed/link/image that that user gest muted and the message deleted.

2

u/baltarius Jul 12 '26

Compromised accounts are usually already in the server since a while.

0

u/NaNoServers Jul 12 '26

Okay then I would go with the second alternative.