Oof. A massive spam attack just now on mstdn.social

[sempf@infosec.exchange]

@stux Wow! Neat feature for an open source project. Me likey.

[retrocozy@retro-gaiden.com]

@stux @Oregon_Pacifist Here's something you may want to see.

[jarinks@mstdn.social]

@stux they seem to originate from Asia

[64bithero@mstdn.games]

@stux Don’t forget whitehouse.gov

[trebach@functional.cafe]

@stux cc @mdallastella in case anyone has tried to apply for an account consistent with this behavior

[stux@mstdn.social]

@trebach @mdallastella They also send massive amounts of applies, still costing money for all mails

Be careful

I've turned off signups completely now

[andrew@ottawa.place]

@stephanie @stux Thanks! Added

[deirdrebeth@mas.to]

@stux

Yikes.

Hey @trumpet, in case you're seeing any of this.

[cnk@sharkey.world]

@deirdrebeth@mas.to @stux@mstdn.social @trumpet@mas.to I thought mas.to was invite only?

[deirdrebeth@mas.to]

@cnk @stux @trumpet

Ah right! That does tend to solve these types of issues

[stux@mstdn.social]

@deirdrebeth @cnk @trumpet ish

If they manage to get an unlimited invite you're still oof if that's not blocked

Keep an eye out

[cnk@sharkey.world]

@stux@mstdn.social @deirdrebeth@mas.to @trumpet@mas.to good point

[stux@mstdn.social]

@cnk @deirdrebeth @trumpet For now these 4 email domains seems to be it, plus the "SAAR_" in the username

It was a bad bot but super duper mega fast..

[fallsmom@mastodon.coffee]

@stux

I'm glad to be under the stux umbrella!

[stux@mstdn.social]

@FallsMom

[fallsmom@mastodon.coffee]

@stux

I made an annual donation back in Feb via Patreon, hope you received it!

[stux@mstdn.social]

@FallsMom Thank you ️ it means a lot Amazing to see we can build something wonderful together!

[fallsmom@mastodon.coffee]

@stux

[gustavo@ursal.zone]

@alterelefant @stux Exactly. I wonder if there is something we are missing. Maybe there is something else going on.

[csolisr@hub.azkware.net]

@stux From what I gather, they were spamming invites to a Discord room with the code "krebble" - they were trying to DDOS #KrebsOnSecurity, and I think they also doxxed one of their members.