2FA has been restored for all LW users that had it enabled before and didn’t reactivate it on their own since.

There will be an announcement posted later on explaining what happened.

edit: announcement is out: https://lemmy.world/post/18503967

this is a separate issue unrelated to the 0.19 update.

this was not a Lemmy bug.

Hi,

this was unfortunately an error on our end.

Please bear with us while we work on resolving this situation.

Most of these are unfortunately limited to local instance moderation, which means all instances that don’t run these bots don’t benefit from them.

The posts have already been modified in ways that they aren’t as easy to reliably filter anymore, though still possible with fairly low false positive rate.

To add to this, depending on how content is removed, removal may or may not federate properly. on Lemmy.World, we’ve been removing content in a way that reliably federates, so while a lot of this spam does arrive in !asklemmy@lemmy.world and !selfhosted@lemmy.world, the removals on Lemmy.World should federate to all other instances (0.18.5+).

The other portion of the spam is mostly on Lemmy.ml, in !asklemmy@lemmy.ml and !opensource@lemmy.ml, and not all of their removals have been done in a way that federates.

they appear to be advertising their “criminal organization”, listing some of the illegal activities they do and where to find them.