A major exploit allowed users to bypass Xbox’s Looking for Group spam protections and flood millions of posts across games like Minecraft, Rainbow 6 Siege, and Roblox, with fake ARAS figures playing a central role in spreading and using the method. The article reported that Discord and Xbox had since taken action by deleting the fake ARAS servers and related projects, while accounts tied to the abuse were reportedly terminated or pushed close to permanent bans.
For the past 2 weeks, since Xbox Servers came back online from the downtime, there's been an exploit involving a specific session directory endpoint allowing for users to completely bypass the Looking for Group posts spam filter and make as many posts as they wanted.
Adgods, a prominent hacker, stole code from another group (.gg/hat) and uploaded it to his GitHub account for others to use. He also used it himself and set up at least 4 instances of it spamming group posts non-stop for days on end.
Three days ago, the spam filter began to work again and was taking down the posts as soon as they went up. However, it didn't begin to touch the massive amount that had been posted before. Rainbow 6 Siege got 26 million posts. Minecraft got 22 million posts. Roblox got 15 Million posts. And it just keeps going.
Yesterday, Discord and Xbox took action against the users responsible. The fake ARAS Server ("All Realms Aren't Safe") that has been around for years now, along with Realms- (harmful Realms+ parody, an exploit bot), has been deleted. The backup fake ARAS Server is gone as well. The accounts of Adgods and Shwp (another hacker) have either reached one more strike before a permanent ban, or been terminated. This was the largest hacking Server in the Community for a long time.
Nebby, the owner of Build-A-Realm, has interviewed Adgods. Adgods said he is planning to sell bots and cheats. He said he, a 15-year-old, spammed and exploited Xbox out of boredom and that he would do it again for "fun".
Read more in https://discord.com/channels/1077081500836700210/1077081501570695240/1265387413325221938.
シリアル-V