<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse.]]></title><description><![CDATA[<p>Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse.</p><p>35% of them would be silenced or suspended by the IFTAS AUD list.</p><p>More info: <a href="https://about.iftas.org/library/suspected-portal-kombat-accounts/" rel="nofollow noopener"><span>https://</span><span>about.iftas.org/library/suspec</span><span>ted-portal-kombat-accounts/</span></a></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://mastodon-iftas-org.s3.bhs.io.cloud.ovh.net/media_attachments/files/116/530/016/470/357/104/original/f56ab867af97d389.png" alt="Link Preview Image" /><img class="img-thumbnail" src="https://mastodon-iftas-org.s3.bhs.io.cloud.ovh.net/media_attachments/files/116/530/023/539/029/651/original/d9e2c55989cba6e0.png" alt="Link Preview Image" /><img class="img-thumbnail" src="https://mastodon-iftas-org.s3.bhs.io.cloud.ovh.net/media_attachments/files/116/530/037/507/807/109/original/f587b591207899a3.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/topic/2df8b242-deff-4f7f-b4bf-fd65e754b6d8/over-2-000-accounts-now-being-tracked-on-the-russian-botnet-infecting-the-fediverse.</link><generator>RSS for Node</generator><lastBuildDate>Fri, 05 Jun 2026 15:56:15 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/2df8b242-deff-4f7f-b4bf-fd65e754b6d8.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 06 May 2026 22:44:10 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 14:55:26 GMT]]></title><description><![CDATA[<p>A lot of these accounts have what appear to be randomly generated or LLM-assisted bios, and my current favourite is</p><p>"Farmer with a taste for cronut culture in Milwaukee"</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533869068611521</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533869068611521</guid><dc:creator><![CDATA[iftas@mastodon.iftas.org]]></dc:creator><pubDate>Thu, 07 May 2026 14:55:26 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:53:24 GMT]]></title><description><![CDATA[<p><span><a href="/user/iftas%40mastodon.iftas.org">@<span>iftas</span></a></span> <span><a href="/user/informapirata%40poliverso.org">@<span>informapirata@poliverso.org</span></a></span> <span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata</span></a></span> <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span> huge work. Thank you very much <img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f64f.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--pray" style="height:23px;width:auto;vertical-align:middle" title="🙏" alt="🙏" /></p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.uno/users/brozu/statuses/116533153292983351</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.uno/users/brozu/statuses/116533153292983351</guid><dc:creator><![CDATA[brozu@mastodon.uno]]></dc:creator><pubDate>Thu, 07 May 2026 11:53:24 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:45:02 GMT]]></title><description><![CDATA[<p><span><a href="/user/iftas%40mastodon.iftas.org">@<span>iftas</span></a></span> I've always thought that identifying suspicious accounts was achieved through a mass search, not by ticking off individual instances. This makes your work even more impressive.</p><p>Thanks for the clarification, and thank you for your continued success!</p><p><span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata</span></a></span> <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span></p>]]></description><link>https://board.circlewithadot.net/post/https://poliverso.org/objects/0477a01e-7669-fc7b-3ed3-f1e238200387</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://poliverso.org/objects/0477a01e-7669-fc7b-3ed3-f1e238200387</guid><dc:creator><![CDATA[informapirata@poliverso.org]]></dc:creator><pubDate>Thu, 07 May 2026 11:45:02 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:42:00 GMT]]></title><description><![CDATA[<p><span><a href="/user/iftas%40mastodon.iftas.org">@<span>iftas</span></a></span> Thank you very much for your kind words, and thank you as well for all the important work you are doing.<br />We truly appreciate the recognition of the effort our volunteer staff puts into moderation and community care.</p><p>We have always maintained a zero-tolerance policy toward Russian bots and Kremlin propaganda accounts, and we will continue to take proactive measures to keep the Fediverse safe, healthy, and welcoming for everyone. <span><a href="/user/informapirata%40poliverso.org">@<span>informapirata@poliverso.org</span></a></span> <span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata</span></a></span></p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.uno/users/filippodb/statuses/116533108435153733</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.uno/users/filippodb/statuses/116533108435153733</guid><dc:creator><![CDATA[filippodb@mastodon.uno]]></dc:creator><pubDate>Thu, 07 May 2026 11:42:00 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:36:24 GMT]]></title><description><![CDATA[<p><span><a href="/user/informapirata%40poliverso.org">@<span>informapirata@poliverso.org</span></a></span> <span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata@mastodon.uno</span></a></span> <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span> </p><p>I think it's important to state this very clearly:</p><p>Everything published under the IFTAS name is human-reviewed. Every list, every label.</p><p>If it says CSAM, I reviewed it. If it says terroristic content I reviewed it. If it says spam I reviewed it. </p><p>IFTAS is on it's last legs and it's pretty much just me at this point, other than two small groups that share information with each other.</p><p>So please, do not ascribe scraping to IFTAS. It doesn't happen.</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533086411071056</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533086411071056</guid><dc:creator><![CDATA[iftas@mastodon.iftas.org]]></dc:creator><pubDate>Thu, 07 May 2026 11:36:24 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:29:43 GMT]]></title><description><![CDATA[<p><span><a href="/user/informapirata%40poliverso.org">@<span>informapirata@poliverso.org</span></a></span> <span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata@mastodon.uno</span></a></span> <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span> for completeness' sake, I will add that there are two automations:</p><p>1. I have a script on cron that queries each active account every six hours to see if it still active, and update the spreadsheet accordingly</p><p>2. when it comes to actually filing reports, I have now automated the report creation</p><p>These two actions have saved me a couple of hours of labour every day, I was manually filing reports and reviewing active accounts (since October)</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533060136096584</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533060136096584</guid><dc:creator><![CDATA[iftas@mastodon.iftas.org]]></dc:creator><pubDate>Thu, 07 May 2026 11:29:43 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:27:27 GMT]]></title><description><![CDATA[<p><span><a href="/user/informapirata%40poliverso.org">@<span>informapirata@poliverso.org</span></a></span> <span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata@mastodon.uno</span></a></span> <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span> </p><p>Please understand that being listed does not equate to a failure in moderation; rather, it reflects the reality of being a target for these campaigns. Your transparency regarding the "freeze" strategy is in fact helpful context for those of us tracking these movements and activities.</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533051211357551</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533051211357551</guid><dc:creator><![CDATA[iftas@mastodon.iftas.org]]></dc:creator><pubDate>Thu, 07 May 2026 11:27:27 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:26:25 GMT]]></title><description><![CDATA[<p><span><a href="/user/informapirata%40poliverso.org">@<span>informapirata@poliverso.org</span></a></span> <span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata@mastodon.uno</span></a></span> <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span> </p><p>I do not see any active account on your service in our data, but if there is something you want me to specifically review, please DM me.</p><p>I want to emphasise that mastodon.uno is a stellar example of a well-moderated instance. The dedication of your volunteer staff is evident, and you have my complete respect for the proactive measures you take to keep the Fediverse safe.</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533047168890426</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533047168890426</guid><dc:creator><![CDATA[iftas@mastodon.iftas.org]]></dc:creator><pubDate>Thu, 07 May 2026 11:26:25 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:25:58 GMT]]></title><description><![CDATA[<p><span><a href="/user/informapirata%40poliverso.org">@<span>informapirata@poliverso.org</span></a></span> <span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata@mastodon.uno</span></a></span> <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span> </p><p>&gt;Your identification of the account was carried out through automated processing (scraping)</p><p>To be clear, I spend roughly two hours per day, every day, manually reviewing accounts, looking at over 150 instances. There is no scraping of any kind. Just me and my mouse.</p><p>I have two lists, the new one starting in April. Any accounts not suspended on the old list were brought forward to the new list, generating new reports for older accounts.</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533045412432191</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116533045412432191</guid><dc:creator><![CDATA[iftas@mastodon.iftas.org]]></dc:creator><pubDate>Thu, 07 May 2026 11:25:58 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:13:37 GMT]]></title><description><![CDATA[<p><span><a href="/user/ethergear%40infosec.exchange">@<span>ethergear</span></a></span> <span><a href="https://mastodon.social/@anewsocial">@<span>anewsocial</span></a></span> it's just a general snapshot of the bot activity, copying and pasting whatever they come across in this instance.</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116532996850616222</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116532996850616222</guid><dc:creator><![CDATA[iftas@mastodon.iftas.org]]></dc:creator><pubDate>Thu, 07 May 2026 11:13:37 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 11:10:49 GMT]]></title><description><![CDATA[<p><span><a href="/user/retech%40corteximplant.com">@<span>retech</span></a></span> </p><p>see <a href="https://about.iftas.org/iftas-abandoned-unmanaged-denylist-output/" rel="nofollow noopener"><span>https://</span><span>about.iftas.org/iftas-abandone</span><span>d-unmanaged-denylist-output/</span></a></p><p>or </p><p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">

<div class="card-body">
<h5 class="card-title">
<a href="https://fires.1sland.social/datasets/iftas-abandoned-and-unmanaged-denylist">
FIRES - Dataset: IFTAS Abandoned and Unmanaged Denylist
</a>
</h5>
<p class="card-text line-clamp-3">FIRES: Fediverse Intelligence Replication Endpoint Server</p>
</div>
<a href="https://fires.1sland.social/datasets/iftas-abandoned-and-unmanaged-denylist" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://fires.1sland.social/favicon.ico" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" />



<p class="d-inline-block text-truncate mb-0"> <span class="text-secondary">(fires.1sland.social)</span></p>
</a>
</div></p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116532985812188223</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.iftas.org/users/iftas/statuses/116532985812188223</guid><dc:creator><![CDATA[iftas@mastodon.iftas.org]]></dc:creator><pubDate>Thu, 07 May 2026 11:10:49 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 04:30:35 GMT]]></title><description><![CDATA[<p><span><a href="/user/iftas%40mastodon.iftas.org">@<span>iftas</span></a></span> Do you have that list in a csv file so individuals could add them to their personal blocklist?</p>]]></description><link>https://board.circlewithadot.net/post/https://corteximplant.com/users/retech/statuses/116531412013575536</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://corteximplant.com/users/retech/statuses/116531412013575536</guid><dc:creator><![CDATA[retech@corteximplant.com]]></dc:creator><pubDate>Thu, 07 May 2026 04:30:35 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Thu, 07 May 2026 00:05:27 GMT]]></title><description><![CDATA[<p><span><a href="https://poliverso.org/profile/informapirata">@<span>informapirata@poliverso.org</span></a></span> <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span> <span><a href="/user/iftas%40mastodon.iftas.org">@<span>iftas</span></a></span> Finally, I'd like to add one of the many posts we've published in recent months (this one from mid-March), in which we inform our users about the specifics of Russian disinformation and the attacks we receive from their botnets. Just to show how sensitive we are to the problem.</p><p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">

<div class="card-body">
<h5 class="card-title">
<a href="https://mastodon.uno/@informapirata/116229941017091552">
informapirata ⁂ :privacypride: (@informapirata@mastodon.uno)
</a>
</h5>
<p class="card-text line-clamp-3">Sulla propaganda filorussa nel Fediverso 

Purtroppo esistono diversi siti e canali telegram direttamente sovvenzionati da Mosca per diffondere opinioni favorevoli alla Federazione Russa e, ancora più spesso, disinformazione.

Noi moderatori di questa istanza stiamo cercando di sensibilizzare il pubblico sulla pericolosità e la scorrettezza di questo modo di fare informazione.

(Segue) 

@fediverso@feddit.it</p>
</div>
<a href="https://mastodon.uno/@informapirata/116229941017091552" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://mastodon.uno/packs/assets/favicon-16x16-74JBPGmr.png" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" />





























<p class="d-inline-block text-truncate mb-0">Mastodon Uno Social - Italia <span class="text-secondary">(mastodon.uno)</span></p>
</a>
</div></p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.uno/users/informapirata/statuses/116530369518194781</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.uno/users/informapirata/statuses/116530369518194781</guid><dc:creator><![CDATA[informapirata@mastodon.uno]]></dc:creator><pubDate>Thu, 07 May 2026 00:05:27 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Wed, 06 May 2026 23:52:27 GMT]]></title><description><![CDATA[<p><span><a href="/user/iftas%40mastodon.iftas.org">@<span>iftas</span></a></span> I'm a moderator of the Italian instance mastodon.uno through <span><a href="/user/informapirata%40mastodon.uno">@<span>informapirata</span></a></span>, and I noticed that one of the Russian bot accounts listed is attributed to the mastodon.uno instance.</p><p>The account in question was registered on January 12th and began to be active after more than a week. I personally reported it on January 21st and, as administrator <span><a href="/user/filippodb%40mastodon.uno">@<span>filippodb</span></a></span> can confirm, I deactivated it using mastodon's freeze function.<br />At the same time, all posts published by that account were deleted, but obviously the messages (three in total) reshared by other accounts, messages that contained no problematic content, were not deleted.</p><p>The decision to deactivate it rather than suspend it was based on the fact that we were studying the Russian bot phenomenon to understand how often they attacked the deactivated profile, whether they connected automatically or manually, and whether the freeze function helped reduce subscriptions. And indeed, it did.</p><p>I would like to add that I personally continue to use this method to combat Russian bot registrations, even on the poliversity.it instance, which I personally manage. Following your report, I have added a silencing action to the freezing process, so that those accounts are not detected by your scraping system.</p><p>On mastodon.uno, however, for purely organizational reasons, we began directly suspending all accounts that still manage to bypass the blocks we've placed on the email addresses used to register.</p><p>Returning to the main point, I would like to point out that your report only reached us on April 30th, a full 90 days later, and that account had been rendered practically unusable. Your identification of the account was carried out through automated processing (scraping) and resulted in a now useless report because it was not linked to any content and to an account that was no longer usable. A report that was therefore completely rightfully not given priority.</p><p>The account was then permanently suspended on May 3rd, three days after your report.</p><p>Mastodon.uno is the largest Italian instance, with thousands of active users and dozens of registrations per day. Thanks to a staff of around twenty volunteer moderators, we can keep registrations open with virtually immediate processing times and extremely rapid decision-making.</p><p>We therefore ask you to remove the name of the bot that was no longer present in our instance from the list of Russian bots, which had been removed from our instance well before your report.</p><p>We believe it is not only unfair but also extremely damaging to our reputation that our instance, one of the most active in combating Russian botnets, should be lumped together with other instances that do not practice moderation at all, or that practice poor or incomplete moderation.</p><p>We look forward to hearing from you and thank you for your attention.</p>]]></description><link>https://board.circlewithadot.net/post/https://poliverso.org/objects/0477a01e-1069-fbd4-3bc9-0eb547592514</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://poliverso.org/objects/0477a01e-1069-fbd4-3bc9-0eb547592514</guid><dc:creator><![CDATA[informapirata@poliverso.org]]></dc:creator><pubDate>Wed, 06 May 2026 23:52:27 GMT</pubDate></item><item><title><![CDATA[Reply to Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse. on Wed, 06 May 2026 23:01:28 GMT]]></title><description><![CDATA[<p><span><a href="/user/iftas%40mastodon.iftas.org">@<span>iftas</span></a></span> <span><a href="https://mastodon.social/@anewsocial">@<span>anewsocial</span></a></span> doesn't seem to belong on this list</p><p>*edit* and they're not on it actually. Is there a reason they're in the screenshot?</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/ethergear/statuses/116530117900253608</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/ethergear/statuses/116530117900253608</guid><dc:creator><![CDATA[ethergear@infosec.exchange]]></dc:creator><pubDate>Wed, 06 May 2026 23:01:28 GMT</pubDate></item></channel></rss>