⚠️ #SW_ISAC_ADVISORY Services continue to report a wave of automated account creation using the naming pattern "bp" followed by a series of random alphanumerics, eg "bpc7463204e397374e" or "bpde9af0166700f555".To date almost all accounts are created using an email address at the domains:docomo.ne.jpezweb.ne.jpand to a lesser degree:yahoo.co.jpau.comRequiring approval for accounts using these email domains during this attack will severely minimise your spam account review activity.

a range of spam accounts visible in the admin interface of Mastodon
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 1 month ago

@iftas@mastodon.iftas.org in NodeBB, after clicking "reject" a million times (or in Mastodon's case, a checkbox, I guess), we added a "Reject All" button.

Does Mastodon not have that?

Now for spam review, we go through the queue and manually accept the ham, and one-click blackhole the rest.

  • source