Oof. A massive spam attack just now on mstdn.social

[stux@mstdn.social]

Oof. A massive spam attack just now on mstdn.social

A few thousand signups all accounts starting with "SAAR_"

I STRONGLY recommend admins to BLOCK this name from signing up

[faraiwe@mstdn.social]

@stux

[shaknais@mastodon.social]

@stux Soundvoice's new AI? Or someone exploiting it to fuel spam.

[stux@mstdn.social]

This goes on for a while..

All suspended and signups closed

[sempf@infosec.exchange]

@stux You can do that? With a partial string match like that? Zesty.

[apbblue@thepit.social]

@stux gross

[staringatclouds@mstdn.social]

@stux Thank you ️

[heliograph@mastodon.au]

@stux @xrobau

[kierkegaanks@beige.party]

@stux spambots as a resource

[alterelefant@mastodontech.de]

@stux At least those are easy to block. Very odd.

[stux@mstdn.social]

It seems email domains are reused, here are some to block:

reevalmail.com
bientotmail.com
sabesmail.com
bonjourfmail.com

[stux@mstdn.social]

@Sempf Yup, "equals" or "contains"

[stephanie@ottawa.place]

@stux @andrew Flagging!

[buage@mastodon.social]

@stux That's crazy..

[sempf@infosec.exchange]

@stux Wow! Neat feature for an open source project. Me likey.

[retrocozy@retro-gaiden.com]

@stux @Oregon_Pacifist Here's something you may want to see.

[jarinks@mstdn.social]

@stux they seem to originate from Asia

[64bithero@mstdn.games]

@stux Don’t forget whitehouse.gov

[trebach@functional.cafe]

@stux cc @mdallastella in case anyone has tried to apply for an account consistent with this behavior

[stux@mstdn.social]

@trebach @mdallastella They also send massive amounts of applies, still costing money for all mails

Be careful

I've turned off signups completely now