FYI admins
cross-posted from: https://quokk.au/c/fediverse/p/1066667/tesseract-dev-injects-malicious-code-into-browser-to-illegally-ddos-the-dbzer0-instance
As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.
Dubvee is down down now (server not responding), but prior to that the site had a really bitchy “farewell” message. The DDOS was embedded javascript code your browser would run when you visited dubvee.org and viewed the message.
Archive.org has a snapshot of it, but it still has that javascript embedded so I’m not going to link to it. Here’s a screenshot of the site when this code was included.