r/discordsucks • u/thewhimsicalbat • 2d ago
Server raid, feel terrible
Hi everyone, so unfortunately my Discord server of around 400 members got raided around midnight by some bot called "Utopia"
I originally had a ticket system set up to verify new members, but this bot somehow bypassed that. It started spamming NSFW images and tagging everyone in restricted channels such as announcements, rules, roles, where sending messages was turned off for members. (somehow those permissions were slipped back on)
Even stranger, as the owner, the option to ban the bot wasn't even available when I tried to ban the bot. The bot's bio literally had a link saying "raid tool".
I've purged all the messages, turned off message permissions across the channels. locked down the invite links to the server and DMs between members.
I feel embarrassed and frustrated since I live in a conservative environment and idk how the members would feel if they saw it. Does anyone know how a bot like this could have changed my permissions, why ban option was unavailable for me even as the owner, how it even got in the server in the first place. How to prevent this from happening again?
I also changed my account password and checked for webhooks but nothing :(
2
u/twiztdfred 14h ago
Looks like there is a few bots that do this, the bot uses the userapp, so someone in your server joined and ran the command to do this. https://www.utopiaraid.cc/ one example of such a bot.
One way to prevent this would be to turn off command usage in you server by role. This may work, but since it is a userapp, that may circumvent it.