This fake follower botnet consists of 23965 accounts created between August 3rd and August 7th, 2022. None of these accounts has ever tweeted or liked a tweet. All use the same naming scheme and most have repetitive biographies.
In addition to the aforementioned repetitive biographies, this fake follower botnet also uses the same profile pics on multiple accounts.
The accounts in this botnet follow a variety of English and Arabic-language accounts. Most are promotional accounts, with cryptocurrency/NFTs/Web 3 being a recurring theme. Every account in the botnet also follows both @elonmusk and @Twitter.
Since all of the accounts in the botnet were created in a relatively short span of them, they are easy to detect on follow-order-by-creation-date plots for the accounts they followed en masse, where they show up as horizontal streaks (highlighted in red).
In a wacky coincidence, this botnet follows many of the same accounts as a group of spammy cryptocurrency accounts that recently expressed irritation with a thread about other spammy cryptocurrency accounts that were being sold on a dodgy website:
It's unclear why anyone would want to spend money a bunch of used cryptocurrency/NFT Twitter accounts, but a user with the descriptive name of "VIP STORE" is selling 21 of them on shady account sales site accs-market(dot)com. #ExtremelyUnwisePurchases
The 21 accounts being sold by "VIP STORE" are all older accounts, created between 2008 and 2014. At least 13 (and possibly all) have been renamed, with the new names all containing "nft", "btc", or "crypto". (The old names were found in data we downloaded for previous projects.)
Although these 21 for-sale accounts have existed for years, they appear to have gained most or all of their followers in 2022. (We know this because each account has early followers created in 2022, which means all subsequent followers followed them in 2022.)
One telltale trait of unmodified GAN-generated faces (at least, those in common use) is that the primary facial features (especially eyes) are in the same position on every image, regardless of the angle of the head. This becomes obvious when multiple images are blended together.
There are several additional signs that @youpress19801's profile image is GAN-generated, including the surreal background and the random fragments of clothing and hair hanging in midair to the right of the face.
First, we have @GypsyCeltic (ID 1307840989617434624), an account with a GAN-generated face and a propensity for posting false statements about COVID vaccines. This allegedly Florida-based account is followed by Ron DeSantis campaign operative @ChristinaPushaw. #FloridaGAN
Next up is @dogoym (ID 1346315171229143044), an antisemitic troll account with a GAN-generated pic and a name that references the antisemitic dog whistle "The Goyim Know". According to one of this fake account's replies to Elon Musk, ~30% of Twitter accounts are fake.
It's a Friday in August, and a bunch of spammy accounts are tweeting links to what appears to be the same article about recreational marijuana and auto insurance rates in Missouri on a variety of obscure websites.
Although the article has the same title on each website, the text varies slightly from site to site (possibly a result of article spinning: en.wikipedia.org/wiki/Article_s…). The original version appears to be from St. Louis news outlet @KMOV.
The articles are being shared on Twitter by a network consisting of 13 automated Twitter accounts, each of which tweets links to a different website. Most of the accounts (10 of 13) were created within the last month, and all but one have the biography "all news for you".
The accounts that tweeted the identical "the fundamental purpose..." tweets are part of a spam network consisting of 58 similarly-named accounts created between December 28th, 2021, and January 8th, 2022. They tweet in a mix of English and Turkish, mostly via the Twitter Web App.
This network's tweets are generally repeated verbatim by multiple accounts. Pretty much all of the content is about Xinjiang, consisting of a mix of positive content about the region and denial of genocide and other human rights abuses against Uyghurs there.
In theory, @SubstackInc prohibits threats, harassment, and promotion of illegal activity (substack.com/content). In practice, enforcement is rather lacking. This thread contains some examples of apparent violations that Substack has taken no action on.
When reporting TOS violations, I've been using either Substack's reporting form (support.substack.com/hc/en-us/reque…) or email (tos@substackinc.com). The examples in this thread were also sent via Twitter DM to Substack's @cjgbest and @lulumeservey for the sake of thoroughness.
A rule prohibiting threats presumably applies to this comment proposing violence against 5 US Supreme Court justices. I reported this comment via email to tos@substackinc.com on June 30th and via Twitter DM to @cjgbest and @lulumeservey on July 2nd. It has not been removed.