Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.iftas.org/users/jaz/statuses/113284211083767431">Jaz (IFTAS) (jaz@mastodon.iftas.org)'s status on Friday, 11-Oct-2024 09:27:33 JST</a><a href="https://mastodon.iftas.org/@jaz" title="jaz@mastodon.iftas.org"><img src="https://gnusocial.jp/avatar/121481-48-20231220032045.webp" width="48" height="48" alt="Jaz (IFTAS)" style="position: absolute; left: 0; top: 0;">Jaz (IFTAS)</a><div><ul><li><li><a href="https://gnusocial.jp/user/228294" title="austin@mstdn.party">Austin Huang ❤️</a></li></ul></div></section><article><p>Of the 87 servers we saw compromised in the recent <a href="https://mastodon.iftas.org/tags/SpamWave" rel="tag">#SpamWave</a> - 68 have modified registration settings and deleted the accounts, 15 remain open, 4 are now offline. </p><p>Special thanks to <a href="https://toot.funami.tech/@noahimesaka1873">@noahimesaka1873</a> <a href="https://mstdn.party/@austin">@austin</a> <a href="https://ailbhean.co-shaoghal.net/@gunchleoc">@gunchleoc</a> and all the IFTAS Connect community members that helped gather info, communicate with the impacted servers, and keep our data up to the minute.</p><p>Today? New botnet creating accounts on your servers. See <a href="https://mastodon.iftas.org/@sw_isac/113283701270369397" rel="nofollow noreferrer">https://mastodon.iftas.org/@sw_isac/113283701270369397</a> - Connect members can track <a href="https://connect.iftas.org/forums/discussion/new-botnet-creating-accounts-on-multiple-servers/" rel="nofollow noreferrer">https://connect.iftas.org/forums/discussion/new-botnet-creating-accounts-on-multiple-servers/</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/3808195#notice-7449942">In conversation</a><time datetime="2024-10-11T09:27:33+09:00" title="Friday, 11-Oct-2024 09:27:33 JST">about 4 months ago</time> <span>from <span><a href="https://mastodon.iftas.org/@jaz/113284211083767431" rel="external" title="Sent from mastodon.iftas.org via ActivityPub">mastodon.iftas.org</a></span></span><a href="https://mastodon.iftas.org/@jaz/113284211083767431">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://mastodon.iftas.org/@sw_isac/113283701270369397">Social Web ISAC (@sw_isac@mastodon.iftas.org)</a></h5><div> from <span>Social Web ISAC</span></div></header><div>Be advised of bulk inauthentic account creation on multiple ActivityPub service providers using a range of email domains and a single IP address. Account registration(s) reported from: 
134.195.153.189SW-ISAC recommends blocking access for the listed IP address for at least two weeks. As an additional measure to ward against future activity, consider limiting or blocking new account creation from the listed email domains for a similar period.Full advisory: https://groups.google.com/a/iftas.org/g/sw-isac-announce/c/So-wMVYAhjw</div><footer></footer></article></li><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://connect.iftas.org/wp-login.php?redirect_to=https%3A%2F%2Fconnect.iftas.org%2Fforums%2Fdiscussion%2Fnew-botnet-creating-accounts-on-multiple-servers%2F&amp;bp-auth=1&amp;action=bpnoaccess">Log In ‹ IFTAS Connect — WordPress</a></h5><div></div></header><div></div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Jaz (IFTAS) (jaz@mastodon.iftas.org)'s status on Friday, 11-Oct-2024 09:27:33 JSTJaz (IFTAS)
- Noa Himesaka
- Austin Huang ❤️
Of the 87 servers we saw compromised in the recent #SpamWave - 68 have modified registration settings and deleted the accounts, 15 remain open, 4 are now offline.
Special thanks to @noahimesaka1873 @austin @gunchleoc and all the IFTAS Connect community members that helped gather info, communicate with the impacted servers, and keep our data up to the minute.
Today? New botnet creating accounts on your servers. See https://mastodon.iftas.org/@sw_isac/113283701270369397 - Connect members can track https://connect.iftas.org/forums/discussion/new-botnet-creating-accounts-on-multiple-servers/
In conversationabout 4 months ago from mastodon.iftas.orgpermalink
Attachments
1. No result found on File_thumbnail lookup.
  Social Web ISAC (@sw_isac@mastodon.iftas.org)
  from Social Web ISAC
  Be advised of bulk inauthentic account creation on multiple ActivityPub service providers using a range of email domains and a single IP address. Account registration(s) reported from: 134.195.153.189 SW-ISAC recommends blocking access for the listed IP address for at least two weeks. As an additional measure to ward against future activity, consider limiting or blocking new account creation from the listed email domains for a similar period. Full advisory: https://groups.google.com/a/iftas.org/g/sw-isac-announce/c/So-wMVYAhjw
2. No result found on File_thumbnail lookup.
  Log In ‹ IFTAS Connect — WordPress

Public

Embed Notice

HTML Code

Corresponding Notice