Mastodon

Summary

Mastodon experienced a distributed denial‑of‑service attack that targeted its flagship server and caused a major outage, with the assault beginning in the early afternoon and mitigations deployed by late afternoon to restore access; the following day the attack ceased and operations returned to normal. The incident occurred shortly after a similar disruption affected Bluesky, a rival decentralized platform, for which a pro‑Iran hacktivist group claimed responsibility though the claim remains unverified, while no group has publicly taken credit for the attack on the platform. Both services have grown in popularity as users seek alternatives to mainstream social networks following changes at X.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On April 20, 2026, at approximately 1 PM, the Mastodon status page recorded the start of a distributed denial‑of‑service attack aimed at Mastodon.social, the platform’s flagship server. The attack quickly escalated, prompting the organization to classify the disruption as a major outage. By 4 PM the same day, mitigations had been deployed and the site became accessible again. An update issued on April 21 at 11 AM indicated that the attack had ceased and normal operations had been restored. Throughout the incident, Mastodon communicated the timeline and status via its official status page.

The DDoS assault on Mastodon occurred just days after a similar sophisticated attack disrupted Bluesky, another decentralized social media service. A group identifying itself as 313 Team, which claims to be a pro‑Iran hacktivist collective, asserted responsibility for the Bluesky incident, although those claims remain unverified. No individual or group has publicly claimed responsibility for the Mastodon attack. Both Mastodon and Bluesky experienced increased adoption following Elon Musk’s acquisition of X, formerly Twitter, as users sought decentralized alternatives perceived to avoid top‑down control, unpredictable algorithms, and erratic moderation. The platforms positioned themselves as refuges from the centralized model that had come to dominate mainstream social media.

Sources

Sources available to members: 1 source.