I made an announcement saying this but because no one except my grandmother reads those, I'll say it here: do not open any PMs from accounts you do not know. This includes DemiromanticRobot, who has been sending mass PMs to users with the same copy-paste. Do not open any messages from users you do not know, avoid opening the automated "You have been reported" messages since those can be faked and have been used to compromise accounts, and generally speaking, don't be dumb.

Cookies come into play because users can obtain your cookie session via hidden links in PMs. This can result in unlinked accounts of yours being deleted without you knowing. This also can result in you being locked out of your own accounts, someone deleting them whenever they want, and using your accounts to do stuff like post naughty stuff.

Change your password ASAP if you opened any PMs within the last day or so and worry for your account. Turn off image-loading if you want to view any PMs from users that you don't know/trust. If you run into any issues, feel free to contact myself, annajane, solace, or anyone else on the mod team.