Over the weekend, hackers targeted federated social networks like Mastodon to carry out ongoing spam attacks that were organized on Discord, and conducted using Discord applications.

Cybercriminals are recycling expired Discord links to launch silent, devastating multi-stage malware attacksA fake Discord bot tricks users into running PowerShell commands disguised as CAPTCHA ...

In other words, nearly any expired Discord invite link that was once legitimate has the potential to become a hazard if a malicious user uses the same URL to point to their own Discord scam server.

In the face of a recent surge in spam attacks targeting federated social networks, Discord has refrained from initiating any measures against the server believed to be orchestrating the onslaught.

Small Mastodon servers were hit with spam attacks this week, and while the incident reportedly stemmed from a minor dispute on Discord, it shines a light on some of the security holes associated ...