[Thread] 1/6 Interesting accounts tweeting on the chopped hashtag بس_ار - which is the middle portion of the anti-MBS hashtag ارحل_مبس (Leave MBS) .

Summary: sockpuppets in this network appear to be mostly using Twitter for Iphone

I estimate around 300 sockpuppets #Saudi Image
2/6 It starts with accounts tweeting the suspicious hashtag in isolation (why would you tweet a deliberately nonsensical hashtag spontaneously unless it was co-ordinated?) Graph shows tweets (i.e. not RTs, mention etc) in green starting off the activity Image
3/6 Almost all the tweets that begin the hashtag are sent from iphone (see turqouise colour). Again, multiple accounts, tweeting a strange hashtag in isolation, using the same devices) Image
4/6 The content they are tweeting is mostly random content, ads, football stuff, aphorisms and quotes. Basically, nothing cohesive - after all, the hashtag is jargon and not a real thing. ImageImageImage
5/6 The velocity (number of tweets and how fast they are sent) is high in the beginning, with around 252 being sent in the space of 20 minutes. Velocity is important in getting something to trend. Image
6/6 Most of the account histories are spammy, suggesting it's some sort bot/sockpuppet operation though. Some are real, but most suspicious. Needless to say, this violates many of Twitters rules on spam and platform manipulation

#Saudi #disinformation Image

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Marc Owen Jones

Marc Owen Jones Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @marcowenjones

30 Mar
[Thread on Sockpuppets] 1/8

Summary, there is a network of around 629 sockpuppet accounts using 'chopped hashtags' to drown out a hashtag advertising a broadcast from Saudi dissident @oamaz7

#disinformation #deception
2/8 As this screenshot shows, the original hashtag promoting broadcasting of @oamaz7 is بث عمر عبد العزيز while the chopped hashtag takes four consecutive consonants from the middle of the hashtag: مر عب
3/8 As with similar networks, the accounts do not generally interact with each other. The fact they are tweeting the same nonsensical chopped hashtag 'independently' of each other with few RTs indicates it is co-ordinated sockpuppet activity.
Read 8 tweets
24 Mar
[Thread] 1/4 Around 1956 sockpuppets tried to disappear a hashtag critical of MBS, translated as "The loser MBS". In Arabic this reads as #المهزوم_مبس .

The same chopped hashtag technique was used, with #وم_مب trending. Again, see the two screenshots #Disinformation
2/4 As with before, most of the accounts are not interacting with each other and are using Twitter Web Client

Graph below show lots of isolated accounts tweeting on the hashtag but not interacting with each other.

This successfully trended

#Disinformation
3/4 Some pretty funny sock puppets too, like Country Shirl (aka Drayton ) here

.... and my personal favourite, "Mels boobs are nice" (melsboobsrnice) #Disinformation
Read 4 tweets
23 Mar
[Big thread on #Saudi-related sock-puppets] 1/

Summary of Findings: I have identified between 1600 - 3900 sock puppet accounts trying to displace a trend critical of Saudi's 2030 Vision

Read on for more details and analysis #disinformation #platformmanipulation
2/ Around 15 March the hashtag "what do we benefit from the Vision ((2030))" was active. In Arabic this reads as #ماذا_استفدنا_من_الرؤية . This trend was critical of the money being spent in pursuit of Saudi's 2030 vision, and critical of MBS. See examples >
3/ Special attention needs to be paid to the first part of this construction "ماذا_" (matha_) which is the Arabic pre-verb question particle 'what'.

There has been increasing trend of using partial hashtags to displace critical ones by using chopped hashtags. See below...
Read 20 tweets
12 Mar
[Thread] 1/6 This one is on a large level cyber-bullying/harassment. A few days ago a trend targeting the Alhathloul family was trending in Saudi.

Tweets like that below, which targeted @LoujainHathloul's siblings things like 'traitors' were very much part of the campaign
2/6 The hashtag (Family of the humiliated) was a pun on the Alhathloul family name.

Humiliated in Arabic is mathloul. This is similar to Hathloul. It's not sophisticated, but harassment rarely is

Imagine thousands of people attacking your family on Twitter. Looks like this>
3/6 Anyway this trend produced thousands of tweets. I looked at a sample of around 13000 interactions.

Some of the most retweeted accounts include the verified @70sul , another account @saudix7m & @abdullah113438

A dominant theme was describing them as 'agents' or 'traitors
Read 6 tweets
10 Mar
[Thread on sockpuppet] 1/10 Spot the difference between the man the left and right...

Tricky right, apart from the smile... #Osint #disinformation
2/10 It's definitely the same photo, same hair same shirt, same everything - although the one on the right has been photoshopped with a smile and juicier beard...
3/10 However, the guy on the left is Dave Sharma, a very nice (I imagine) music teacher at Prelude Music Foundation, a setup designed to transform the lives of under-served children around Houston.

Hero.
Read 12 tweets
10 Mar
A few important notes on this great article. 1) I would caution there is a prevailing narrative about Saudi accounts, risks creating a straw man. 2) it is useful to make a distinction between bots and trolls as trolling is behavioural not computational; Trolls
could be hypernationalist real or paid real people attacking those who disagree 3) Saying someone is a real human risks conflating that with a troll whose *unknown* function might be to artificially generate support 5) As bots and trolls evolve it becomes more difficult to do
anomaly detection at scale and be sure of how many accounts have been missed in analysis 6) Twitter's own suspensions aren't a reliable or comprehensive barometer of what is and isn't definitely a bot - or troll 7) co-ordinated inauthentic behaviour includes trolls (real humans)
Read 9 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!