⚠️ #SW_ISAC_ADVISORY Services continue to report a wave of automated account creation using the naming pattern "bp" followed by a series of random alphanumerics, eg "bpc7463204e397374e" or "bpde9af0166700f555".To date almost all accounts are created using an email address at the domains:docomo.ne.jpezweb.ne.jpand to a lesser degree:yahoo.co.jpau.comRequiring approval for accounts using these email domains during this attack will severely minimise your spam account review activity.

RE: about.iftas.org/2026/09/08/updUpdates to IFTAS Denylists and Access OptionsTo make managing moderation feeds easier, more flexible, and more accessible across various platforms, we have rolled out several updates to our Do Not Interact (DNI), Abandoned and Unmanaged Domain (AUD), and CARIAD denylists.

The following official accounts cannot be added to Collections. This may be intentional, but if there's a desire to be more broadly visible, and if your platform allows it, please consider enabling the ability to be featured in Mastodon Collections.@sharkey @admin@gotosocial @hackerspub @Bonfire @peertube @mobilizon @gancio @blackskyweb.xyz @bsky.app @nodebb @piefedadmin@manyfold @Castopod

⚠️ #SW_ISAC_ADVISORY Services continue to report a wave of automated account creation using the naming pattern "traffic" followed by a series of random alphanumerics, eg "trafficj4jq30o" or "traffic7rjc14h".To date almost all accounts are created using an email address at the domain:nawitop[.]ru Requiring approval or disallowing accounts using this email domain will severely curtail your spam account review activity.Of note, IPQS scores all IPs used by this wave as 100/100 for fraud.

⚠️ #SW_ISAC_ADVISORY The domainzirk.ushas been RETRACTED from the AUD denylist. If you subscribe to this list, it will be removed or suggested for removal on next update.If you previously imported the AUD denylist using a manual process, please consider re-federating with this domain.Notes:Anti-spam measures are now in place, and new moderation help has been onboarded.

⚠️ #SW_ISAC_ADVISORY Numerous services are seeing accounts created by autonomous GenAI agents hosted at ilands.ai with no discernible human control.These accounts declare themselves to be non-human and unattended.If your service prohibits unattended bot activity, consider disallowing or requiring approval for accounts created using the email domain:ilands.app#SyntheticMedia #Spam

⚠️ #SW_ISAC_ADVISORY There is a spate of #AccountTakeover underway. Service providers may receive reports for accounts that have a display name beginning with "Hacked -" or linking to "t[.]me/HomeFucker5" These accounts may be longstanding valid accounts that have been hijacked.While investigating, consider1. deleting any offensive posts, 2. freezing the account until the rightful owner can reclaim it,3. use of two-factor authentication for accounts shown to be at risk

RE: about.iftas.org/2026/07/30/depReminder: Please be aware of our upcoming transition for the CARIAD domain observatory, and the new CARIAD files available.mastodon.iftas.org/@about.ifta

theguardian.com/technology/202

It has been an absolute privilege to listen to, learn from, and meet with the amazing people building the social web in East Asia! Taiwan has been incredibly welcoming, and I'm grateful for all the new connections from Taiwan, South Korea, Japan, and further afield. Thankyou to everyone who helped organize the Fediverse track at #COSCUP2026 - these events are always so informative and undoubtedly important.

@foolfitz closing the #COSCUP Fediverse track with a presentation around ActivityPub, news media, and how to use #Drupal to clear the way for federated media.#COSCUP2026

@jdlh talking globally inclusive fediverse handles#COSCUP2026 #COSCUP