Meet @bmjisoo, a self-described Events & Program Manager, Adventurous Foodie, Global Trotter, and National Park Explorer. Based on its flurry of recent pro-Trump and anti-Biden retweets, it would at first glance appear to be a #MAGA account.

cc: @ZellaQuixote
The full story is a bit more complicated. @bmjisoo began its Twitter life as a Korean-language account back in 2014, took a five-year hiatus, and then woke back up in 2020, first retweeting a bunch of Indonesian follower farming spam before assuming its current #MAGA persona.
The account presently known as @bmjisoo also changed names at least once: when it was tweeting in Korean back in 2014, it was named @blbml08t6e. (Its permanent ID is 2287181347, just in case it swaps names again.)
Although @bmjisoo is currently presenting itself as male, it had a different biography in August 2020 where it apparently claimed to be female. Despite its current pro-Trump persona, it somehow got listed on a #VeteransForBidenHarris2020 follow list in September 2020.
Adding to the intrigue, @bmjisoo's first couple hundred followers are almost all Korean accounts created on January 11th or January 12th 2020 with extremely similar random-looking names that have never liked a tweet.
These batch-created followers of @bmjisoo are part of an old bulk follow botnet. To find the rest of the network, we explored the other followers of the accounts followed by the bots that followed @bmjisoo.
We found 463 accounts that we believe to be part of this bulk follow botnet, all created on January 11th or 12th, 2014. All these accounts are presently dormant, and tweeted exclusively via "Twitter Web Client" back when they were active.
The bots in this network repeat tweets across accounts, although no tweet is shared by more than four accounts. Translations are provided with the caveat that machine translation should always be taken with a grain of salt.
Interestingly, one of the repeated tweets was also tweeted by @bmjisoo, which was created during the same timeframe as the bots in the network. Additionally, its original name (@blbml08t6e) matches the botnet's naming scheme, indicating it may once have been part of the botnet.
Update: @bmjisoo found this thread, but can't seem to decide what to think of it.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Conspirador Norteño

Conspirador Norteño Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @conspirator0

9 Oct
Twitter accounts being sold on dodgy websites frequently have fake followers, and @nokilllogwtmp (permanent ID 529412597) is no exception, with several thousand batch-created accounts following it. We decided to further explore this bulk follow network.

cc: @ZellaQuixote
To find more accounts that are part of this bulk follow network, we downloaded the followers of accounts followed by the bogus-looking followers of @nokilllogwtmp, and repeated the process until we hit diminishing returns.
We found 23794 accounts we believe to be part of this bulk follow network. Most were created in batches between 2012 and 2014. Some were not, but we suspect they're part of the network anyway due to the order in which they followed the accounts they follow (among other things).
Read 7 tweets
6 Oct
#DontBelieveArmenia trended this morning (October 6th, 2020). We took a gander at the tweets and accounts involved.

cc: @ZellaQuixote
The first recent #DontBelieveArmenia tweet (sporadic earlier occurrences exist) was sent yesterday (Oct 5 2020) by @CoronaMan19, an account created in March 2020 with 21 tweets and 1 follower. It spiked early this morning (Oct 6 2020), frequently exceeding 200 tweets per minute.
Although the accounts involved in the #DontBelieveArmenia trend aren't provably automated (based on apps/24 hour activity), the content is incredibly repetitive. The repeated tweets include spam directed at @iamcardib, as noted earlier by @josh_emerson.
Read 6 tweets
5 Oct
This pornbot network has grown substantially since we last looked at it. 111 of the accounts we previously found have been removed by Twitter, but 1421 new ones have joined the chorus, for a total of 1813 accounts.

cc: @ZellaQuixote Image
The output of this pornbot network continues to grow as more accounts are added to it, peaking at over 300 tweets per hour. Almost all tweets are (hypothetically, at least) posted via "Twitter Web Client", the old and no longer available version of the Twitter website. Image
The accounts in this pornbot network all have 8-character names composed of random numbers and lowercase letters. All have liked zero tweets and follow zero accounts. Tweets are in Japanese and encourage users to DM the bots. ImageImage
Read 6 tweets
4 Oct
In the wake of Donald Trump's positive COVID-19 test and subsequent hospitalization, #MAGA Twitter has been abuzz with conspiracy theories attributing his diagnosis to an assassination attempt by various entities such as China, Biden, Pelosi, and Alexei Navalny.

cc @ZellaQuixote
We downloaded tweets containing the word "assassination" subsequent to Trump's announcement of his positive test, and filtered out some obvious false positives (tweets about the Jamal Khashoggi assassination, for example). Very little of the traffic appears to be automated.
Tweets theorizing that Trump's COVID-19 diagnosis was actually part of an assassination attempt began appearing a scant 3 minutes after his positive test was announced (Oct 1 2020), starting with a reply from 4-month old account @Freddie111112 to CNN reporter @mkraju.
Read 9 tweets
4 Oct
If you're looking for an automated military patriot mom who is sick of politics as usual and spams links to Gateway Pundit articles via IFTTT, @PatriotMomNDJ just might be the Twitter account for you. #SaturdaySpam

cc: @ZellaQuixote
All of @PatriotMomNDJ's recent tweets are sent via IFTTT, but this account has utilized other Twitter automation tools in the past, mainly SocialOomph. Almost all of its original tweets are automated (140161 of 140110, 99.96%), so this account is definitively a bot.
Similarly, @PatriotMomNDJ currently only links Gateway Pundit, but in the past it varied its spam lineup. Right-wing news site The Blaze was a frequent flier until late 2018, and commercial spam (Amazon, staged(dot)com, and others) was a major portion of its early content.
Read 4 tweets
2 Oct
We've done a decent amount of digging into various bulk follow botnets over the last couple of years, and decided to aggregate all of our threads on the topic. Some botnets are still online, while others have been shut down by Twitter.

cc: @ZellaQuixote
First botnet: 105081 accounts, 2012-2013 creation dates, mostly English tweets. Some of them follow COVID conspiracist Senate candidate @va_shiva.
6448 accounts, Russian tweets, 2013-2014 creation dates. Some follow RT editor-in-chief @M_Simonyan.
Read 17 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!