With the defacement so similar across the subs, it makes me wonder if it's less someone getting moderator permission, and more if someone managed to edit a CSS or JS file that is used in common by several subs.

Could be wrong; when I looked at r/NFL, there were two new full moderators with accounts only a few minutes old.

EDIT: Nope, I am wrong, compromised accounts: https://www.reddit.com/r/SubredditDrama/comments/i5ero0/a_coordinated_attack_on_reddit_via_compromised/

With the defacement so similar across the subs, it makes me wonder if it's less someone getting moderator permission, and more if someone managed to edit a CSS or JS file that is used in common by several subs.

Could be wrong; when I looked at r/NFL, there were two new full moderators with accounts only a few minutes old.