0rbit released the illegally copied data over the course of a month. Why did nobody notice it?
The followers of the account were all from one cluster and most of them weren't active in months.
#hackerangriff #datenklau #BTleaks /1
The followers of the account were all from one cluster and most of them weren't active in months.
#hackerangriff #datenklau #BTleaks /1
_0rbit had around 18,5k followers when Twitter suspended the account (). Thanks to socialblade we know that it had 16 580 followers on the day before the @unge hack. Based on that I was able to reconstruct the followers. /2
We don't know when the followers followed the account, but we know when their accounts were created. Until 2017 it could be organic (popularity of Twitter in Germany). But in April 2017 there is an unnatural increase.
The follower numbers show same pattern. /3
The follower numbers show same pattern. /3
-> Accounts were created and immediately followed the account. Spammy behavior.
Many of the accounts in the unnconnected belt are from that time frame.
Most of the accounts in the center cluster were created before 2017. /4
Many of the accounts in the unnconnected belt are from that time frame.
Most of the accounts in the center cluster were created before 2017. /4
I removed another 56 accounts from the analysis, because they followed the account after 03.01.19 at 13:14:13 which makes it likely that some of them followed after the hack. /5
Only 2 381 of the 16 524 followers published more than 100 Tweets. 494 more than 1000 Tweets. Most active accounts, highly automated. Many fed by YouTube activity (published vide, liked, subscribed). /6
