Profile picture
, 5 tweets, 3 min read
My Authors
Read all threads
TFW you find a nearly six year old botnet proudly promoting a 23 year old website with no actual content. #SaturdaySpam

cc: @ZellaQuixote
We found 24 accounts with vip174(dot)ru (and various subdomains) linked on their profiles. All are (presently) automated via dlvr(dot)it and were created on July 27th, 2014. (@Pabooli0A is an anomaly - although it has supposedly tweeted 85364 times, we only found 6744 tweets.)
This botnet briefly used a few other automation tools early in its life before switching to dlvr(dot)it at the beginning of 2016. The majority of the tweet content consists of images with captions in Russian.
This botnet repeats tweets, although no tweet has been tweeted by more than 8 of the accounts. Based on Yandex translate, tweets appear to be (mostly) entertainment-focused news with occasional ads for towing services, but we don't speak Russian and hence can't be certain.
Footnote: we found evidence of other networks with some of the same traits as this one, but aren't convinced they're part of the same operation. We may or may not document more of them in the future.
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Conspirador Norteño

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#SaturdaySpam

More from @conspirator0 see all

Profile picture
Conspirador Norteño
@conspirator0
Michigan's @GovWhitmer didn't actually reverse a non-existent policy banning hydroxychloroquine for COVID19 patients but Fox News (and others) didn't waste the chance to dissemble a Democratic administration's actual statement and intent for political purposes.

cc: @ZellaQuixote
(Here's the memo from the MI Department of Licensing and Regulatory Affairs that's being misconstrued as a now-reversed gubernatorial decree banning hydroxycholoroquine - it's actually guidance intended to prevent a shortage that has now happened.)michigan.gov/documents/lara…
We downloaded tweets containing at least one term from each list, yielding 73726 tweets from 40972 accounts:

- malaria, malarial, chloroquine, hydroxychloroquine, hydrochoroquine (sic)
- michigan, Whitmer, "MI governor"
- coronavirus/COVID-19/rona/SARS-COV-2
Read 8 tweets
Profile picture
Conspirador Norteño
@conspirator0
Here's a weird little trio of accounts: @Foaooad, @baononng, and @duythongtran12. We don't really have a theory as to the purpose of this network, but it has some interesting properties. At first glance it appears to be fairly low volume, with 208 total tweets.

cc: @ZellaQuixote
Appearances in this particular case are deceiving, however. Each account actually tweets once per minute, but each time they tweet they also delete a previous tweet, hiding the true spamminess of the network.
We captured roughly 14 hours' worth of this network's tweets. Although all tweets are theoretically sent via the Twitter website, we suspect automation due to the fast pace, highly rhythmic posting and deletion of tweets. Also, there's the matter of the tweet content. . .
Read 5 tweets
Profile picture
Conspirador Norteño
@conspirator0
We took a look at #coronavirus conspiracy theorist and GOP congressional candidate @DeAnna4Congress's early followers, and found 259 oddly similar accounts, all created on November 23rd, 2010. The accounts in question do not follow her opponent, @SpeakerPelosi.

cc: @ZellaQuixote
The accounts in question also have 0 likes and repetitive biographies. We can use this to find more accounts that are part of the network by scanning accounts created in roughly the same time range for other zero-like accounts using the same biographies.
We found 778 accounts, all created over the course of six hours on November 23, 2010. All of these accounts are presently dormant but (hypothetically) tweeted exclusively via the Twitter website when active, and all but one have female profile pics.
Read 5 tweets

Related threads

Profile picture
Devin Nunes' Mom's Son Devin
@visionsurreal
cc: @thespybrief @VickerySec
"A voter contact and canvassing company [Campaign Sidekick], used exclusively by Republican political campaigns, mistakenly left an unprotected copy of its app’s code on its website for anyone to find." /1
"The company, Campaign Sidekick, helps Republican campaigns canvass their districts using its iOS and Android apps, which pull in names and addresses from voter registration rolls." /2

cc: @thespybrief
@VickerySec "found several instances of credentials & other app-related secrets, he said in a blog post on Mon, which he shared exclusively w/ TechCrunch. These secrets, such as keys & tokens, can typically be used to gain access to systems or data w/o a username or password." /3
Read 13 tweets
Profile picture
Dalton
@DaltonReport
127th Illegal immigrant child sex abuser of 2019 thread.

NC: Alejandro Duarte Aldama, 32, charged with sexually assaulting a six-year-old child.

Official told @BreitbartNews, @JxhnBinder he entered the U.S. without inspection ... in country illegally.
breitbart.com/politics/2019/…
128th Illegal immigrant child sex abuser of 2019 thread.

AL: Undocumented Guatemalan immigrant, Felipe Juan Miguel, 25, charged with sexual abuse of a child.

Came illegally from Guatemala about three months ago.

Child less than 12 years old.
waaytv.com/content/news/U…
129th Illegal immigrant child sex abuser of 2019 thread.

IA: Saul Santos Vasquez-Martinez, 43, arrested for
sexually attacking teen, 16.

Grabbed her by the wrist & pulled her into a home.

Began to fondle her.

From El Salvador illegally.
wcfcourier.com/news/local/cri…
Read 85 tweets
Profile picture
(((≠)))
@ThomasHCrown
To avoid doing the work I'm not inclined to do, I'm going to indulge a bunch of proclivities at once, which is what Twitter is for. Behold: My #HumanaeVitae story.
My mom and dad had four kids, of which I'm the eldest. My wife is the eldest of four, as well. Growing up in the 80s and 90s, this was a large, but not super-large, family. Our Catholic families undoubtedly used contraception, but I haven't asked because ew.
My mom and dad didn't really talk about numbers of kids much. My mom once said my dad was the second of [more even than I have] because "[My grandmother] came from a generation that didn't know how to say no." My dad made clear he thought nothing wrong with the practice.
Read 38 tweets
Profile picture
Dr. Phil Metzger
@DrPhiltill
#TFW it is dark and your kids call because they are stranded on a tiny island in the middle of the whirlpools that keep sucking the kayak away from shore and they couldn't paddle hard enough against the tide to get home and as last resort they want dad to come with the boat.🙉 /1
2/ (These are the older kids. Not the two young ones who went out for the first time this morning.)
3/ As a kid, I would have chosen death before making that phone call. But then, we didn't have phones, so we couldn't get a rescue anyway. 🙉
Read 22 tweets
Profile picture
Josh Russell
@josh_emerson
Had a look at this #botnet
Found 450 accounts.
About half of them have their language set to 'ru'.
I have a twitter list of them here: twitter.com/josh_emerson/l…
newer bots on the left older ones on the right.
fair warning there my be a couple "false positives" due to people not being very smart and tweeting links to #http://votyus.me and #http://realusa.site
I have tried to eliminate them but haven't had a whole lot of time the last few days.
Read 14 tweets
Profile picture
Josh Russell
@josh_emerson
After looking at what I though was a harmless marketing #botnet i have found yet another large set of #Russian bots or troll accounts.
This is part 2 of 3 of a larger set of bots, these have done what they needed to do and are now dormant(mostly)
pastebin.com/ikSP8QH0
to get the 740 accounts, I started with this small set of suspicious accounts. And pulled a list of their followers.
When you sort that list by account creation date you can see the patterns.
For example all these made on 5-29-2014
Read 17 tweets

Trending hashtags

#Brexit #GifMignogna #Whistleblower #CryAboutIt #Threadnought #stayathome #content #AccidentsWillHappen #VIP #cc #HappyLaborDay #grazieCina #DEMONBUTLERFINALBOSS2020 #PeakTV #STRATEGY #EMDocs #covid19 #PoorPeoplesCampaign #TheBeatles #ElvisCostello #interface #ded #FearPorn #TFW #forzaCinaeItalia

Embed code for your website

×
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!