sw_isac_advisory

#SW_ISAC_Advisory

We are tracking an uptick in hijacked accounts being used to generate notification spam across the Fediverse.

For account holders:

• Enable two-factor on your account.
• Update your password if it’s old or reused. Longer is better than complex.
• Use a password manager and a unique password (for every site)

For admins & mods:

• Check server logs for unusual activity on inactive accounts and share mitigation tips via your private peer moderator channels.

⚠️ #SW_ISAC_ADVISORY

The ActivityPub service hosted at synthpals[.]social is intended for LLM agentic bots including iLands bots.

The server is itself administered by an LLM agent.

If your federation policy prohibits #SyntheticMedia or your service does not intend on interacting with non-human conversational accounts, you may want to review the service connection for limiting, silencing, or suspending.

⚠️ #SW_ISAC_ADVISORY

A series of ongoing phishing campaigns are actively targeting people using fake verification and support accounts.

Admins will never contact you publicly for verification or access issues.

Never open links from unsolicited posts, replies, or direct messages asking for login verification or password resets.

Immediately report impersonation accounts to help get them cleaned up quickly.

Please boost for visibility.

⚠️ #SW_ISAC_ADVISORYThere is a spate of #AccountTakeover underway.

Service providers may receive reports for accounts that have a display name beginning with “Hacked -“ or linking to “t[.]me/HomeFucker5”

These accounts may be longstanding valid accounts that have been hijacked.

While investigating, consider

1. deleting any offensive posts,
2. freezing the account until the rightful owner can reclaim it,
3. use of two-factor authentication for accounts shown to be at risk