This spam network consists of 50 accounts with female names created on April 26th and April 27th, 2022. Thus far, these accounts have posted all of their tweets via "Twitter for Android", and all appear to have been dormant between October 2nd and December 2nd.
The tweets tweeted by this network are often repeated verbatim by multiple accounts. Their content is a mix of feel-good content about Xinjiang, denial of human rights abuses by China, and tweets about U.S. political issues (abortion, student loans, military aid to Ukraine, etc).
This network retweets a variety of English and Chinese-language accounts (most of which tweet about Xinjiang). Some appear to be official government accounts, but many are random obscure accounts, and at least one (@Horatio53363883) presently sports a plagiarized profile pic.
Speaking of plagiarized photos, you'll be completely unsurprised to learn that the accounts in the spam network have pilfered their profile pics from a variety of corners of the Internet. (TinEye proved superior to Google for finding these images.)
This is far from the first time we've ran across a spam network tweeting about Xinjiang. Here's a Substack article covering the phenomenon: conspirator0.substack.com/p/genocide-den…
Also, here's a pastebin of the permanent IDs of the 50 accounts in the network, for those interested in such things. pastebin.com/sn2SWHdB
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Over the last 3 years, we've analyzed and posted threads about a variety of similar spam networks associated with an entity known as "Thousand Followers" or "Thousand Bytes". Here's a Substack article covering the entire astroturfy saga.
This series of fake follower/account sales operations first came on our radar back in August 2020, when we ran across follower sales website thousandfollowers(dot)com. We found the site's operator(s) on BlackHatWorld, and kept an eye on their posts.
Answer: the tweets in question were amplified by a spam network consisting of (at least) 3586 accounts created between October 2013 and December 2022. The accounts have Turkish display names that rarely match their @-handles.
All of this network's recent tweets are retweets, and all of these retweets were tweeted via Twitter for Android. (Some accounts have older tweets sent with other apps; as we'll see, these accounts were likely hijacked and the old tweets are probably from the original owners.)
Despite recent rumors that all the spammy Twitter bots have been banished to a spamtastic afterlife, one only has to look at the followers of the aptly-named @TBotFightClub to find evidence that fake follower botnets continue to flourish on Twitter 2.0.
The first 83000 or so of @TBotFightClub's followers are all empty accounts (no tweets, no likes) created in either November or December 2022. By recursively exploring the followers of the other accounts these fake followers follow, we can map out the fake follower network.
This fake follower network consists of (at least) 925655 accounts created in November/ December 2022 (including some created after Elon Musk's recent bot cemetery tweet). All of these accounts follow a similar number of accounts and have zero tweets and zero likes.
A rogue's gallery of dishonest influencers have spent the last couple hours attempting to smear former Twitter Trust and Safety head Yoel Roth as a pedophile via old out-of-context tweets.
Predictably, the far-right hate mob is now spamming Roth with death threats.
It's the same tactic that LibsOfTikTok has used to direct hate swarms at hospitals and educators, but directed at a former Twitter employee and amplified by current Twitter leadership.
Update: @TwitterSafety appears to no longer be removing death threats. The man being targeted here been forced to flee his home (cnn.com/2022/12/12/tec…). Choosing to leave these threats online is a sociopathic and evil decision.
Here's a look at a smallish astroturf network targeting @SafeguardDefend (a non-profit group that has released multiple reports on human rights abuses in China) with spammy duplicate tweets. #SaturdaySpam
This network consists of 25 Twitter accounts created in multiple batches in September and October 2022. Thus far, all their tweets were tweeted via the Twitter Web App, and they generally go silent for two days a week (Friday and Saturday in US Pacific Time).
The content tweeted by this network is repetitive, with many tweets duplicated verbatim numerous times across multiple accounts. The most frequently repeated tweets all begin with the hashtag #SafeguardDefenders, and are all attacks on the Safeguard Defenders group.
Meet @patfkauffman, a "TRUMP 2024!" account motivated by freedom and hard work with over 44 thousand followers. Although this account may at first glance appear authentic, there are multiple problems.
First, @patfkauffman's profile pic is a GAN-generated face. The image has been cropped, preventing it from being detected by facial feature position, but other anomalies remain, such an incorrectly shaped ear and weird artifacts where the hair, skin, and clothing meet.
(More on GAN-generated faces and their use on Twitter and elsewhere here: