[Thread] 1/ Ok this is a network-analysis thread on the disinformation campaign in Qatar using the hashtags (arabic) "Al Wakra" and "Coup in Qatar" [Inqilaab fi Qatar]. First up. The hashtags got noticed. They are still the number one trends in Saudi and Qatar. 
2/I downloaded around 20700 tweets, retweets, replies etc from around 12,000 unique accounts. As you can see, there's a lot of interaction on both hashtags, and a dense network of accounts discussing, spreading (and debunking) the disinformation.
3/ Now there is a lot of info here. But there are certain giveaways something odd is happening. Take this slightly offset light blue/turquoise constellation of accounts. It's not quite part of the main hub, indicating it's not really interacting significantly with the main groups
4/ If we take a closer look we can see the accounts interact with one another, as if they were on community, and all have almost identical node sizes. The identical node size suggests they have tweeted the same amount of times on each hashtag. What's more, the names seem unusual
5/ None seem like Arabic names that you'd expect to find perhaps discussing this mostly Arabic language news story at this point. If you look at the accounts, they are clearly sockpuppets - accounts appropriated for malicious purposes. Each has RT the false stories 22 times
6/ Now this community of around 50 accounts, all tweeting approximately 22 times, means around 1,100 fake retweets. That's just one small community in this massive network. If you scale that up, you can see how this is such a problem. Of course there are many more e.g.
7/ Now most of these tweet storms are retweets. If we remove all the retweet and include just tweets we can see some of the accounts initiating tweets, and replying to specific accounts or mentioning them. These accounts can arguably seen as more 'active' in trying to spread
8/ the disinformation. The below graphs show the network before and after I have removed 'Retweets'. As you can see, there is a stark difference. Interestingly, you can see accounts are targeting Qatari accounts, such as Al Jazeera Breaking - presumably in the hope it spreads?
9/ As we can see, most of the most influential 'facilitators' of the rumours are verified Saudi accounts such as @Musaid_AlSohimi - @a_albander @Ahmadbinnaqi Interestingly, Musad AlSohimi has #NUFC in his bio, presumably routing for the #NUFCtakeover
10/ The trend seems to have began around 1 am UTC. This account, @faisalva_ , who has a profile pic of King Salman, posted a video reporting gunshots and explosions. Another account, self described as a Saudi radiologist, said a coup was happening
11/ That's all for now, might report back later!
