SW-ISAC Announce

TLP:CLEAR SW-ISAC is aware of bulk inauthentic account creation on multiple ActivityPub service

The following domain(s) have been reviewed and are now available via FediCheck CARIAD and/or the

The ActivityPub services listed below continue to be unresponsive to outreach, delivering direct

TLP:GREEN SW-ISAC is aware of bulk inauthentic account creation on multiple ActivityPub service

The vast majority of servers observed to be compromised by yesterday's spam attack have modified

Please be advised: We are observing a mass wave of account registration on open registration servers,

Cyber actors working on behalf of the Iranian Government's Islamic Revolutionary Guard Corps (

### The following domains have been investigated and reviewed and are now available via FediCheck

### The following domains have been investigated and reviewed and are now available via FediCheck

Be advised of automated accounts with username 'wasimkadiri' on multiple servers, posting of

SW-ISAC is aware of inauthentic account creation on multiple service providers using a domain

Pixelfed service px_mathias777_com appears to be overwhelmed with unmonitored malicious accounts.

An inauthentic actor with possible connections to PRC, Tencent, and/or QQ - is monitoring ActivityPub