Potential Virus Risk On AO3 Comments

Potential Virus Risk on AO3 Comments

Hey everyone. So, I wanted to make a post about something I've seen in AO3 comments recently and I wanted to let y'all know so you can be careful.

Today, on two separate fics of mine, I got comments from guests with different names that had what looks like a key smash followed by a weird link. They looked like this:

[image ID: two emails from the website AO3. Both show comments from anonymous users with feminine names that show what looks like a key smash followed by a link. The second link says it’s from tinyurl while the first does not appear to be from anywhere specifically.]

Now, it is possible that these are legit comments and these links lead to nothing bad. But, in my experience, this looks like a classic phishing scam or a link to a virus. Honestly, I never open links I see online unless I know for sure I can trust the source. And even then I'm a bit hesitant, since I know that accounts can be hacked. I actually deleted the first email and comment immediately and didn't really think about it again. However, after getting another comment that was almost identical but from a guest with a different name, it makes me think that this might be something bad.

So, if you see these kinds of comments, unless you know exactly who sent it, I'd recommend just deleting them and not clicking on the links. Honestly, even if you know who sent it, I'd still be careful just in case they got hacked. If someone wanted to send you a legit link, they would probably do it with some kind of comment beforehand saying what the link actually leads to. This seems to me like they're trying to prey off curiosity and it can lead to some nasty stuff. Since I know some AO3 writers and readers follow me, I thought I'd post about it here. Similarly, if you see a comment like this on someone's fic, maybe don't click on it either. Again, I can't guarantee this is anything bad, since I definitely did not click on the links, but it's better to be safe than sorry. If y'all could reblog this to spread the word, I'd appreciate it.

Anyway, be careful out there guys! I got burned a few too many times as a kid, so I'm extra careful with links and things now, ha.

EDIT: Apparently, these links are indeed malicious. I checked them in an online link checker, and it detected one malicious source from the link in the second message, but 12 malicious sources in the link from the first message. So, it's pretty clearly a virus or phishing scam. Please be aware!