On February 15th, newly-created Fediverse accounts started posting spam messages from various instances, sending invites to a Discord server for a Japanese troll organization. This spam was widespread across the Fediverse. The posts frame ap12 from “KuronekoServer” as the culprit behind the operation.
Looking at their spam content (in Japanese)
hypothetically, what stops a spam group from creating their own instance to register accounts on, or several such? It’d get defederated quickly once the attack got going, sure, but it would take time for this to get done, and in the meantime the spam gets in
Why use your own resources when you can use someone else’s?
I don’t think really anything, it just takes more effort and they’d need to change the domain every time they get blocked. I have seen a few services hosted solely for spam and bad faith practices, though they were Mastodon, Plemora, and Kbin servers, not Lemmy.
It’s probably more expensive and inconvenient.
Also it might only take one report for an active mod team to ban a server. How long can that take? An hour? Less? If they’re on servers that real people use, bots have to be banned one by one, so the spam can last a lot longer and reach more people.