Here's a weird little trio of accounts: @Foaooad, @baononng, and @duythongtran12. We don't really have a theory as to the purpose of this network, but it has some interesting properties. At first glance it appears to be fairly low volume, with 208 total tweets.
cc: @ZellaQuixote
cc: @ZellaQuixote
Appearances in this particular case are deceiving, however. Each account actually tweets once per minute, but each time they tweet they also delete a previous tweet, hiding the true spamminess of the network.
We captured roughly 14 hours' worth of this network's tweets. Although all tweets are theoretically sent via the Twitter website, we suspect automation due to the fast pace, highly rhythmic posting and deletion of tweets. Also, there's the matter of the tweet content. . .
The tweets posted by this trio of accounts are assembled from a set of real words and names that it uses over and over (COVID-19, various trending topics, etc) and 3-4 letter "words" made up of randomly chosen letters.
Finally, each account has a tweet linking to atoogo(dot)com. Although we're still not clear on the purpose of the botnet, we did notice "I want to get btc" paired with what appears to be a #bitcoin address.
