Oh look, it's yet another dodgy website selling fake followers and likes for a variety of social media platforms. #ThingsThatAreNotWorthPayingFor

cc: @ZellaQuixote
This follower sales website, cryptolikez(dot)com, has an associated Twitter account by the name of @cryptolikez (permanent 1494042375529938946). Almost all of @cryptolikez's 41K followers are accounts created between March and June 2022 that followed @cryptolikez en masse.
The batch-created accounts following @cryptolikez are part of an astroturf botnet consisting of (at least) 243586 accounts created between January and July 2022. All of the tweets posted by this botnet were (allegedly) tweeted via the Twitter Web App.
Who do the accounts in this botnet follow? A mix of English and Chinese-language cryptocurrency/NFT accounts, many of which gained tens of thousands of followers from the botnet and appear to have few or no real followers.
The followers from the botnet show up as horizontal streaks (highlighted in red) on follow order by creation date plots of the accounts they follow.

More on follow order by creation date plots here:
The accounts in this botnet tweet, retweet, and quote tweet. Their tweets/quote tweets are highly repetitive, with the same text duplicated verbatim by hundreds or thousands of accounts. As with the accounts they follow, the accounts they retweet are mostly crypto/NFT accounts.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Conspirador Norteño

Conspirador Norteño Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @conspirator0

Jul 24
It's a great day for a quick look at a variety of suspicious Twitter accounts with GAN-generated faces. #SundayShenaniGANs

(GAN = "generative adversarial network", the technology used by thispersondoesnotexist.com and similar sites to produce fake faces)

cc: @ZellaQuixote
First up, we have @DrAdamAneevit, an antivax account with 38K followers and a GAN-generated face. Although this account's bio states that it is a "pArOdY", plenty of people are eating up its misleading tweets about COVID and vaccines. ImageImage
As it turns out, @DrAdamAneevit (permanent ID 949263131800424449) wasn't always called @DrAdamAneevit. Wayback machine archives reveal that this account was previously a "news" account named @/ForFactsSake101.

(archive: ) ImageImage
Read 10 tweets
Jul 19
Meet @Q72722580, @Q80196627, @Q35097420, @Q42834960, @Q10736330, @Q50394012, @Q08199619, and @Q07569617, a group of similarly-named Twitter accounts with duplicated profile pics and a variety of alleged jobs.

cc: @ZellaQuixote Image
These accounts are part of a network consisting of (at least) 408 accounts created between February and July 2022 (mostly in July). These accounts all have single-letter display names (usually "Q"), and (allegedly) send all their tweets via Twitter for Android. ImageImageImage
The accounts in this network use the same profile pics over and over, with only 7 distinct images (including the default) pic across 408 accounts. We were unable to find the sources of any of the images using TinEye or Google reverse image search. Image
Read 6 tweets
Jul 14
What do Michigan GOP congressional candidate @Seely4Congress and New Hampshire GOP state senate candidate @LougNH have in common? Both were recently followed by swarms of recently-created accounts with random-looking names. #KeepOnAstroturfin

cc: @ZellaQuixote
The recently-created accounts that followed the two GOP candidates en masse are part of an astroturf botnet consisting of (at least) 25762 accounts created in June and July 2022 with display names consisting of random lowercase letters.
Here are follow order by creation date plots for @Seely4Congress and @LougNH. The followers from the botnet show up as horizontal streaks (highlighted in red).
Read 8 tweets
Jul 8
Meet @JonasMattheww (permanent ID 2494218428) an account with a GAN-generated face spamming #ImpeachBiden tweets (one of which got over 500 RTs).

(GAN = "generative adversarial network", the AI technique used by thispersondoesnotexist.com to generate fake faces)

cc: @ZellaQuixote collage of 11 tweets containing #ImpeachBiden posted by @Jon
How do we know that @JonasMattheww's profile image is GAN-generated? There are several signs, such as nonsensical clothing that melts into the neck and background. screenshot of @JonasMattheww's profilecloseup of @JonasMattheww's profile image, a GAN-generated &
GAN-generated faces (at least the commonly-available ones) have the telltale trait that the primary facial features (especially eyes) are in the same location on each image. This becomes obvious when multiple GAN-generated faces are blended together.
Read 8 tweets
Jul 7
What do these nine cryptocurrency/NFT accounts have in common? Several things: all were created in 2010, all have been renamed at least once, and all appear to have gained their followers from the same illegitimate sources.

cc: @ZellaQuixote
These nine accounts were all created between April and August 2010. A few of the accounts tweeted via a variety of apps back in 2010, but all of them fell silent for over a decade until they woke up in 2022 tweeting about NFT/crypto stuff via the Twitter Web App.
All nine of these recently-awakened crypto accounts were renamed sometime between May 2020 and the present day. (The source for the previous names is a dataset of older account profiles we downloaded in spring 2020, discussed here: .)
Read 7 tweets
Jul 5
Meet @ItsJustMeRED and @JordanFun2, a pair of MAGA accounts with plagiarized profile photos who celebrated the 4th of July by tweeting additional plagiarized photos.

cc: @ZellaQuixote collage of image tweets from @ItsJustMeRED and @JordanFun2 a
These accounts are part of a network of eight MAGA accounts that retweet, reply to, quote tweet, and follow each other. Most have stolen profile photos (although @imp1ss3d0ff appears to be a cropped GAN-generated face). As we'll see, they also frequently tweet plagiarized photos. table listing the 8 accounts in the network: @imp1ss3d0ff, @collage of the 8 accounts' profile imagesnetwork diagram showing that each account in the network ret
All of the accounts in this network with the exception of @goldisez profusely post plagiarized photographs of random women, often falsely implying that the image depicts the operator of one of the accounts. Many of these photos are duplicated by multiple accounts in the network. collage of tweets containing a photo posted by multiple accocollage of tweets containing a photo posted by multiple accocollage of tweets containing a photo posted by multiple accocollage of tweets containing a photo posted by multiple acco
Read 8 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(