Frédéric Jacobs on Nostr: As Mastodon adoption grows, attackers are also looking at leveraging it for hostile ...
Published at
2026-06-04 08:22:16 UTCEvent JSON
{
"id": "ebc411b8bef102920c8bcc2edff2cae0be04f5334c55341be4fe9951358bdfe8",
"pubkey": "5123c20a62f3990d9093ea2134c4319890761b483902065f5071ce23010eb99a",
"created_at": 1780561336,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/@fj/116690867762791063",
"web"
],
[
"proxy",
"https://mastodon.social/users/fj/statuses/116690867762791063",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/fj/statuses/116690867762791063",
"pink.momostr"
],
[
"-"
]
],
"content": "As Mastodon adoption grows, attackers are also looking at leveraging it for hostile activities.\n\nSekoia explains how Russian malware used Mastodon encrypted post updates as a dead drop resolver to tell the malware where to exfiltrate data:\n\n\"[Mastodon] posts were consistently updated four times per day at uniform intervals with a variance of only a few minutes”\n\nhttps://blog.sekoia.io/fsbs-matryoshka-3-3-gamaredons-gifts-that-keeps-unpacking-gammasteel/",
"sig": "800115ff8b606e122408fd015f68e0c40c690bcfc4ab735554724641190966f5f35c90ec7b01903222b166269d5a3a4123ef47e076fb8bf2f9e448be05e1b2a9"
}