DDoS Attack Causes Major Outage at Mastodon.social; Service Restored
Summary
A DDoS attack against Mastodon.social caused a major outage on April 20. Mitigations restored access within hours, and Mastodon reported normal operations the next day; no one publicly claimed responsibility.
Key points
- Mastodon.social experienced a major outage during a DDoS attack that began around 1 PM on April 20.
- Mitigations were deployed by about 4 PM, making the site accessible.
- Mastodon reported on April 21 that the attack had stopped and operations were back to normal.
- No one publicly claimed responsibility for the Mastodon attack.
- A group calling itself 313 Team claimed responsibility for a separate attack on Bluesky, but that claim was unverified.
Article Details
- Victim Organization
- Mastodon
- Victim Domain
- Mastodon.social
- Incident Type
- Distributed denial-of-service (DDoS) attack
- Operational Impact
- Mastodon classified the outage as major. Mitigations were rolled out on April 20, and the site became accessible; an April 21 update said the attack had stopped and operations had returned to normal. The year was not provided.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed
MITRE ATT&CK
Threat Actors
Products
BlueskyFollowing a similar assault on Bluesky just days prior, the decentralized social media platform Mastodon has also been targeted in a major distributed denial-of-service (DDoS) attack.MastodonFollowing a similar assault on Bluesky just days prior, the decentralized social media platform Mastodon has also been targeted in a major distributed denial-of-service (DDoS) attack.