IFTAS will refer to this activity as #sgSpam
This page will track helpful posts and mitigations for administrators and end users. See below.
**DO NOT CLICK/TAP ANY LINKS ASSOCIATED WITH THESE MESSAGES** – there are reports of these links serving malware.###
For Administratorshttps://infosec.exchange/@jerry/117457041484080186
https://social.lol/@neatnik/117456567939745803###
For End Users<li>Add two factor authentication to your account if your service supports it.</li><li>If you believe your password may have been compromised (or if you re-use passwords) change your password. Longer is better than complex.
<ul><li>You can check to see if password associated with the email address you used to create your account has been compromised: <a href="https://haveibeenpwned.com/">https://haveibeenpwned.com/</a>; </li></ul></li><li>Where possible, use a password manager to ensure you use a unique password for every Internet service you use. <a href="https://ssd.eff.org/module/choosing-the-password-manager-that-s-right-for-you">EFF has good guidance</a> on this decision.</li><li>If your service supports filtering/hiding messages, filter “share.google” or “/share.google?” – but be aware this will filter/hide messages that contain non-malicious links from other people who use Google products to share links online.</li>###
Something To Add?If you have specific guidance for Administrators or End Users you’d like IFTAS to review, please send it to IFTAS (npub1y2r…kvzk) or contact@iftas.org for review, please include the hashtag #sgSpam
