It's a Thursday, which is an excellent time to look at a recently created fake follower/retweet botnet that uses GAN-generated profile pics (similar to those produced by thispersondoesnotexist.com). #ThursdayShenaniGANs

cc: @ZellaQuixote
This botnet consists of 164 accounts created between October 9th and October 13th, 2020. All of them either have never tweeted or post all of their tweets (nearly all of which are retweets) via "Twitter Web App".
Here are the profile pics of all 164 accounts in this botnet, as well as the result of blending them together. Like all unmodified pics produced by StyleGAN (the neural network used by thispersondoesnotexist.com), the eyes, nose, and mouth are in the same location on every image.
(more on GAN-generated face pics, the detection thereof, and their use by Twitter troll accounts, socks, and botnets)
Only 77 of the 164 accounts in this network have tweeted, and their tweets are nearly all retweets. The sole exception is a quote tweet from @lisa_calas (which could be a misfired retweet resulting from the new Twitter feature that pops up the quote tweet dialog when retweeting).
Upon whom does this network bestow its attention? Political/media accounts (particularly members of Congress), the majority of which are Republican/right-wing, although there are a few exceptions (15 of the accounts have retweeted Biden, for example).
Many thanks to @EJGibney who originally spotted the botnet described in this thread.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Conspirador Norteño

Conspirador Norteño Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @conspirator0

7 Nov
If you've been wanting to meet an automated Reagan conservative who worries about our future by spamming Twitter with links to poorly-source articles about "voter fraud" on a website you've never heard of, @keichri is the account for you. #FridayFeeling

cc: @ZellaQuixote Image
Almost all (98.5%) of @keichri's recent tweets are automated via dlvr(dot)it. This account has apparently dabbled in automation before, although at least two of the apps it was using have subsequently been shut down (erased7812941 and erased13330229). ImageImage
The primary mission of @keichri appears to be to promote various right-wing websites, usually obscure ones. Almost all of its tweets since March 2020 link to speakingaboutnews(dot)com, with a previous three and a half year binge of spamming links to conservativeread(dot)com. Image
Read 6 tweets
3 Nov
It's election day in the USA, and like any other day, porn/adult services botnets are spewing their low-effort salacious spam. Here's a Korean-language network we recently stumbled upon. #TuesdayThoughts #GOTV2020

cc: @ZellaQuixote Image
This pornbot network consists of 162 accounts created between October 14th and November 3rd, 2020. All have default profile pics, randomly generated 15 character usernames, and send almost all of their tweets via automation app cubi(dot)so. ImageImageImageImage
The bots in this network tweet pretty much 24/7, with occasional gaps at what appear to be random times. The entire botnet was inactive for most of October 30th and 31st, and many of the accounts have few or no tweets prior to those dates. Image
Read 4 tweets
3 Nov
We quite frankly have no idea why these accounts are all tweeting the word "momotarousuper1" (or what momotarousuper1 even means), but let's take a look at them anyway. #TuesdayThoughts

cc: @ZellaQuixote Image
We found 118 accounts tweeting "momotarousuper1" over and over, all created in December 2012, March 2013, or April 2013. Their names are quite repetitive, with most account names beginning with "momotalou" and ending with X's and numbers. ImageImageImageImage
All 118 accounts in this botnet send all of their tweets via automation service twittbot(dot)net, and they tweet on very similar schedules. What do they tweet? ImageImage
Read 4 tweets
1 Nov
How did @SVNewsAlerts, a popular purveyor of melodramatic "breaking news" tweets that frequently get retweeted far and wide, rack up 74.1K followers in 6 months? #SundayThoughts

cc: @ZellaQuixote
The first accounts to follow @SVNewsAlerts look like #MAGA followback accounts (similar numbers of followers/following). @SVNewsAlerts only follows one account, though (its own alt, @SVNews_Reporter), so surely it didn't build its massive audience via followbacks. . . or did it?
As it turns out, @SVNewsAlerts (permanent ID 1263205289618214913) wasn't always named @SVNewsAlerts. For the first couple months of its Twitter existence, it was named @republican_owl, and at least one tweet indicating that it used to follow back is still live.
Read 6 tweets
1 Nov
We've done a decent amount of research on the use of GAN-generated images over the last two years, mostly fake face "photos" such as those produced by thispersondoesnotexist(dot)com. Here are all of our related threads in one place.

cc: @ZellaQuixote
GAN is an abbreviation for "generative adversarial network", the AI technique used to produce these images (and other things). Here's a "brief" description of how StyleGAN, the GAN behind thispersondoesnotexist(dot)com, works.
machinelearningmastery.com/introduction-t…
Here's the first network we found in the wild using GAN-generated face pics (29 of 52 accounts, created in two batches). The profiles featured repetitive biographies mentioning family, friends, country, and weapons.

Read 14 tweets
31 Oct
OMG! So Important For BITCOIN! Check out all these bots with GAN-generated profile pics tweeting links to some random cryptocurrency website! #SaturdayShenaniGANs #ThisPersonDoesNotExistInFactNoneOfThesePeopleExistDotCom

cc: @ZellaQuixote
We found a total of 28 accounts with GAN-generated profile pics linking to ethereumcryptocurrency(dot)com. All were created in September or October 2020, and all tweet exclusively via automation service dlvr(dot)it.
As is the case with all face pics generated by StyleGAN (the neural network used by thispersondoesnotexist(dot)com and similar tools), the major facial features (particularly eyes) are in the same position on the profile pic of each account in this botnet.
Read 6 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!