Meet @Mollyycolllinss, @SteveeRogerr, @ThomassRichards, a trio of accounts created in December 2020/January 2021 with unnecessary extra letters in their names that appear to be exploiting @buzz_chronicle to harvest the content of thousands of Twitter threads.
First, what is @buzz_chronicles? @buzz_chronicles is an account created in 2011 that saves copies of Twitter threads on an external website (buzzchronicles(dot)com). One triggers it by tagging it in a reply to the thread one wants to archive. (Similar to @threadreaderapp.)
The three new accounts we found (@Mollyycolllinss, @SteveeRogerr, and @ThomassRichards) have thus far done almost nothing but reply to threads and tag @buzz_chronicles with requests to archive said threads. 3716 of their 3752 tweets (99%) are replies of this nature.
This trio of accounts has thus far asked @buzz_chronicles to archive 3632 distinct threads from 2666 different accounts. This table shows the accounts whose threads the botnet has most frequently replied to, several of which are recently-suspended MAGA accounts.
Although these accounts allegedly tweet via the Twitter website, we suspect automation. The regularity of their schedules suggests this, as does the fact that the median time between replies from each account is only 11 seconds (a bit brief for a human to read an entire thread.)
One last detail - the profile pics used by these accounts appear to be GAN-generated (a la thispersondoesnotexist.com). The major facial features on all three are in the same locations on the images.
These accounts' profile images show a couple other signs of GAN-generation: nonsensical background and hair that "melts" into the background in an unnatural way, for example. More info on the use of GAN-generated pics on Twitter in this thread:
The Yandex reverse image search lead us to a page featuring 4 GAN-generated face pics, supposedly specialists with a pest control company in Ulyanovsk, Russia. #ThisRoachRemovalSpecialistDoesNotExist
The pest control company in question (Marafet) has locations in a number of other cities, and many of these locations also have an alleged staff of exactly four people with GAN-generated face images.
Answer: a botnet, consisting of 103 accounts with names indicating that they offer jobs in a certain city (i.e, @HendersonJobs1) or a certain line of work (@EngineerJobs3). They all link to the same website, e-physician(dot)info.
All of the recent "job listings" tweets from these bots link to e-physician(dot)info, which appears to be scraping real job listings from ZipRecruiter and slapping its own ads on them. Despite the website name, most of the "jobs" being offered are not in the healthcare field.
Despite the fact that musician Tommy Page passed away in 2017, his verified Twitter account (@TommyPage) is merrily tweeting away in 2021. Although one can never entirely rule out supernatural involvement, we think there's a more mundane explanation. . .
Tommy Page's verified account (@Tommypage, permanent ID 185366038) has had its display name changed from "Tommy Page" to "xən". Most of its followers and all of its old tweets have been purged, likely by a new owner following an account takeover.
We scrolled through @TommyPage's timeline and followers/followees, and noticed a few other blue-check verified accounts that appear to have been repurposed, including water polo player Judith Forca (@JudithForca, ID 504430504) and the band Vanquish (@Vanquishgirls, ID 194666247).
The charges against the Twitter propagandist known as "Ricky Vaughn" for election interference include four co-conspirators identified by Twitter account IDs. Three are now-suspended major alt-right accounts. We took a look at the fourth (@1080p, ID 6091342).
The @1080p account (permanent ID 6091342) appears to have self-deleted, but we found archives of its content from 2013 and 2016. It tweeted only a few times in 2016, but got large numbers of retweets on its political tweets for having only 402 followers.
We found a set of 13 websites with a total of 70 "authors" with GAN-generated face pics, each with a corresponding Twitter account using the same GAN-generated image. The accounts were all created in August or September 2020, and all (allegedly) tweet via the Twitter Web App.
As is the case with all unmodified StyleGAN face pics, the major facial features (particularly the eyes) are in the same location on each image, regardless of the angle of the head. This trait becomes particularly apparent when all 70 images are blended together.
While looking at something unrelated, we ran across a bulk follow botnet created in May 2018. A few of the accounts in this network have recently reactivated. #ThursdayThoughts
This bulk follow botnet consists of (at least) 46414 accounts, all created in May 2018. (It's likely we missed a few.) None has ever liked a tweet, and most have no tweets or followers of their own but follow between 50 and 200 accounts.
Who do the accounts in this network follow? It's kinda all over the place, although social media marketing and cryptocurrency turn up as repeated themes. The account followed by the largest share of the network is Indian politician @indutiwarijbp.