TFW you find a nearly six year old botnet proudly promoting a 23 year old website with no actual content. #SaturdaySpam
cc: @ZellaQuixote
cc: @ZellaQuixote
We found 24 accounts with vip174(dot)ru (and various subdomains) linked on their profiles. All are (presently) automated via dlvr(dot)it and were created on July 27th, 2014. (@Pabooli0A is an anomaly - although it has supposedly tweeted 85364 times, we only found 6744 tweets.)
This botnet briefly used a few other automation tools early in its life before switching to dlvr(dot)it at the beginning of 2016. The majority of the tweet content consists of images with captions in Russian.
This botnet repeats tweets, although no tweet has been tweeted by more than 8 of the accounts. Based on Yandex translate, tweets appear to be (mostly) entertainment-focused news with occasional ads for towing services, but we don't speak Russian and hence can't be certain.
Footnote: we found evidence of other networks with some of the same traits as this one, but aren't convinced they're part of the same operation. We may or may not document more of them in the future.
