I think this is UBN.
yeah, we know
Well, I should probably not close this, I guess. But what's expected? Nothing really new. :)
Undo all destructive operations.
That's happening anyway and does not require a Phab task.
Happening by whom and when? Should we avoid cleaning up tasks manually?
Kinda interesting that they base64 encoded a page and used that as their comment on tasks.
Is this a security bug or is it part of the attack? T184368 (linked by T184337#3881237)
I would think it’s an attack as they are spamming on gerrit too https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/440510/