Skip to main content

RE: union.place/@tim/1164266914533…

SW-ISAC Alert

The Russian botnet is now using account invites to evade various mitigations in place.

Please review your invite codes, and who's allowed to use them.

#MastoAdmin #FediAdmin #SW_ISAC_ADVISORY

ref: about.iftas.org/library/suspec…

Tim W RESISTS

2026-04-18 16:38:46


Fellow #MastoAdmin people: if you need to track down all users invited by a particular user, here's an SQL query (disclosure: generated by Gemini, vetted and validated by me): see next post.

#fediadmin #mastoadmin #sw_isac_advisory
This entry was edited (3 weeks ago)

Thibaultmol 🌈 reshared this.

in reply to IFTAS

D. Olifant
D. Olifant
• •

Also grouping them here.

pelago.1sland.social/report/ev…

Being auto-added to the dataset here:

fires.1sland.social/fires/view…

And the live Community Reports feed:

pelago.1sland.social/report/fe…

Pelago - Suspected Portal Kombat Accounts

Pelago: Island Network Management
pelago.1sland.social
This entry was edited (3 weeks ago)

reshared this

in reply to D. Olifant

IFTAS
IFTAS
• •
@oli just so you know, these are suspected, not confirmed, we have a false positive tracker and of the latest 682 accounts reported we found 4 to be false positives, this is not a perfect science.
@D. Olifant
in reply to IFTAS

D. Olifant
D. Olifant
• •
I'm just keeping these as advisories for now, anyway, since they are suspected, no recommendations yet.
⇧