⚠️ SW-ISAC Advisory
The daily data for the Russian Telegram channel spam network will no longer be updated.
The actor in question has now created over 750 accounts on 180 servers, and shows no sign of slowing down. All activity appears to be manual, but automation of new accounts could quickly overwhelm the network.
Focus will now be on investigating and labelling abandoned and unmanaged domains, and announcing those domains on the newly-released AUD denylist: https://about.iftas.org/library/iftas-abandoned-and-unmanaged-domain-list/
IFTAS
npub1y2…2kvzk
2025-11-04 13:23:55 UTC
Author Public Key
npub1y2r2mwt42zufw0dr9kmfz4sjdcan0f3azekpkpp2qlvf8x39cqsqx2kvzkSeen on
wss://relay.momostr.pinkPublished at
2025-11-04 13:23:55 UTCEvent JSON
{
"id": "77ceaf164c3454b35317e42dc3bb04c1728f0794c6e298880638deafab8eb35b",
"pubkey": "2286adb97550b8973da32db69156126e3b37a63d166c1b042a07d8939a25c020",
"created_at": 1762262635,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.iftas.org/@iftas/115491644066466815",
"web"
],
[
"proxy",
"https://mastodon.iftas.org/users/iftas/statuses/115491644066466815",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.iftas.org/users/iftas/statuses/115491644066466815",
"pink.momostr"
],
[
"-"
]
],
"content": "⚠️ SW-ISAC Advisory\n\nThe daily data for the Russian Telegram channel spam network will no longer be updated.\n\nThe actor in question has now created over 750 accounts on 180 servers, and shows no sign of slowing down. All activity appears to be manual, but automation of new accounts could quickly overwhelm the network.\n\nFocus will now be on investigating and labelling abandoned and unmanaged domains, and announcing those domains on the newly-released AUD denylist: https://about.iftas.org/library/iftas-abandoned-and-unmanaged-domain-list/",
"sig": "cf88bfe3446992ce4182f344efa795c8e319d070f4158f870d8021c5f364e6dba255f70b4e733d10ec5889e0d150230243157d9346dd23ef7379d651f40201ec"
}