We started looking at who the accounts in the astroturf network documented in this thread from Feb 9th follow, and discovered a whole bunch more accounts that we believe to be part of the network. #SaturdayShenaniGANs

cc: @ZellaQuixote
We found 64848 accounts that we believe to be part of the network (although we may still have missed some). With rare exceptions, they have few tweets and follow far more accounts than they have followers. They're mostly older accounts, almost all created 2018 or earlier.
Who do the accounts in this network follow? It's an eclectic mix that includes government officials from multiple countries, tech entrepreneurs, cryptocurrency accounts, and a "coronavirus news" account, among others.
At least 4991 of the accounts in this network use GAN-generated profile pics. (GAN = "generative adversarial network", the AI technique used by thispersondoesnotexist.com to produce fake face pictures.)
Here's an animated visualization of blending all 4991 GAN-generated profile pics. The major facial features (particularly the eyes) are located in the same position on each image, a fingerprint of unmodified GAN-generated face pics.
Although the operators of this network could have easily generated 4991 unique fake faces, many of the GAN-generated face pics are in fact repeated across multiple accounts.
As has been the case with other networks we've seen that contain large numbers of accounts with GAN-generated pics, the operators of this network don't appear to have done much (or any) quality control - many of the GAN-generated pics have extremely bizarre visual artifacts.
The accounts in this network have tweeted via a wide variety of apps in the past, but the Twitter Android app is a clear favorite among their recent traffic, especially with the accounts using GAN-generated profile pics. Most tweets were posted in 2020 or 2021.
These accounts tweet (and retweet) in a variety of languages, with Arabic, English, and Turkish being the most common. Their original tweets (non-retweets) are repetitive, and are mostly religious in nature, with some follower tracking spam thrown in for good measure.
Who does this network amplify? As with the accounts they follow, it's an eclectic (although somewhat different) lineup. Government officials from South Africa (Minister of Transport @MbalulaFikile) and Pakistan (Punjab governor @ChMSarwar) are among the most frequent fliers.
Speaking of South Africa, this network has bestowed thousands of retweets on South Africa-related tweets from @bourneprophecy (no apparent connection to the Jason Bourne books/films), an account with a stock photo as profile pic and only 578 followers.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Conspirador Norteño

Conspirador Norteño Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @conspirator0

25 Feb
Despite having tweeted #FollowMeJP daily for almost a decade (via automation tool twittbot(dot)net), none of these accounts has managed to pick up more than 100 followers. #WednesdayWisdom

cc: @ZellaQuixote
These accounts are part of a botnet consisting of 125 Japanese-language accounts created on December 11th and 12th, 2011. Each account name consists of a lowercase English word with one or two random characters added to both the beginning and the end of the name.
These accounts behave in an extremely predictable fashion, posting exactly one tweet per day, resulting in 125 total tweets per day from the network (with rare exceptions). All tweets are sent via automation service twittbot(dot)net, and all 125 bots have default profile pics.
Read 5 tweets
24 Feb
In an interesting twist, @TwitterSafety's latest takedown announcement was greeted with a barrage of replies and quote tweets containing the hashtag #ArmenianGovernmentTrolls (and frequently no other text).

cc: @ZellaQuixote
We downloaded tweets (excluding retweets) containing #ArmenianGovernmentTrolls, yielding 310 tweets from 204 accounts. The hashtag appears to have been started today by @FasliNabiyev shortly after @TwitterSafety's announcement.
The accounts tweeting #ArmenianGovernmentTrolls are disproportionately new accounts, with more than half of them having been created in July 2020 or later. 184 of 204 are accounts that previously spammed another hashtag we studied, #DontBelieveArmenia.
Read 6 tweets
23 Feb
Meet @RoosterMagaa and @No1biden. Although their political perspectives appear to differ, they're both offering to "grow ur followers everyday 200+ real <MAGA/Biden> followers 10k in 1 month" using the exact same verbiage. #MondayMotivation

cc: @ZellaQuixote
Based on the identical verbiage, it seems quite possible that @RoosterMagaa and @No1Biden are operated by the same entity. To test this, we had @SeanSpammity DM a request for MAGA followers to the ostensibly pro-Biden account (accompanied by @RoosterMagaa's tweet)...
A few hours later, @No1Biden (allegedly a pro-Biden account) indeed replied with an offer to provide 10K "real MAGA Trump followers" for $300 or 25K for $500. (Needless to say, we're not going to pursue this opportunity.)
Read 5 tweets
21 Feb
Trump is out of office and off of Twitter, but the MAGA follow trains continue to chug along. We took a look at #MAGA train activity subsequent to Twitter's January 8th 2021 QAnon crackdown. #SundaySpam

cc: @ZellaQuixote
By starting with a few MAGA follow trains and recursively exploring the accounts that retweeted them in search of additional trains, we found 7523 trains posted between Jan 9 and Feb 20, 2021, listing 10310 accounts. 7757 are still online, mostly accounts created in 2020 or 2021.
A significant minority of these trains (1145 of 7523, 15.2%) contain the hashtag #BolsoTrump2021, often alongside images promoting both Trump and Brazilian President Jair Bolsonaro. 16 of 58 "conductors" (accounts that post trains) we looked at used the #BolsoTrump2021 hashtag.
Read 6 tweets
19 Feb
Meet @DaoThuyHanh1, @TrangKi26074705, @NguyenN16424388, and @TrinhNg82469771, four automated Twitter accounts that were created this morning (Feb 18 2021) and are already spewing exciting questions like "Do People Actually Use Cryptocurrency?" into the universe.

cc @ZellaQuixote
These accounts are part of a botnet consisting of 34 accounts created in Feb 2021. They all follow multiple other members of the botnet (and not much else). Their follow graph is split into two separate clusters, with bots in each cluster only following others in that cluster.
The majority of this network's content thus far is tweets containing linkings to cryptocurrency news articles and blog posts. These tweets are sent via the SocialChief automation service, which we've seen before:
Read 5 tweets
18 Feb
What does "normal" Twitter traffic look like in terms of what percentage of it is automated/from accounts with default pics/new accounts etc? It turns out that the baseline values differ depending on tweet language.

cc: @ZellaQuixote
We downloaded 100K random tweets in each of 9 languages: Arabic, Chinese, English, Japanese, Korean, Portuguese, Russian, Spanish, and Turkish. (We did this by choosing 1000 random cutoff times between Feb 8 and Feb 16, and downloading the preceding 100 tweets in each language.)
The percentage of tweets sent via automation apps (based on the "tweet source" field) varies widely by language. Tweets in Japanese have the highest rate of automation (16.9%) of tweets, with Arabic on the low end at only 0.9%. 5.9% of English-language tweets are automated.
Read 7 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!