John Scott-Railton Profile picture
Jan 8, 2023 50 tweets 40 min read Read on X
BREAKING: pro-#Bolsonaro rioters breach Congress, Supreme Court & Presidential Palace in 🇧🇷#Brazil.

Ex president promotes a stolen election lie & has been close to Trump.

He skipped inauguration of his predecessor & flew to Florida.

By: @peterbmillard
bloomberg.com/news/articles/…
2/ What does this remind you of?

🇧🇷#Brazil is yet more proof that the "stolen election" lie is poison for Democracy.

3/ Appalling footage is surfacing of pro-#Bolsonaro rioters dragging and beating the police protecting 🇧🇷#Brazil's capitol.

This is very, very bad.

And looks extremely orchestrated.
4/ Pro-#Bolsonaro rioters ransacking 🇧🇷#Brazil's Supreme Court in the capitol, Brasília.

5/ Unlike the #January6th insurrection, President #Lula has already been inaugurated.

Here was #Bolsonaro's tear-streaked & self-pitying final address before he headed to Florida last week.

6/Pro-#Bolsonaro rioters demanding "source code."

Incredibly familiar.

Notably, some of their banners are in English.

Interesting.

Who exactly has been advising #Brazil's ex-president?
7/ Extreme-right playbook, 2020s edition:

Lose the election?

❌Claim it was stolen.
❌Cast doubt on the electoral process
❌Attack the institutions of democracy.

Social media plays a huge role in making this possible.
8/ #Bolsonaro slinking away to Florida in weepy self-pity seemed odd.

Anyone know where he is this afternoon?

IF he's outside #Brazil, he has conveniently put distance between himself and & immediate legal consequences for whatever role he's just played in the #Brasilia siege.
9/ Remember, we know that Steve #Bannon & Jason Miller have been advising #Bolsonaro since he lost the election.

#Brazil
By @lizzadwoskin & @pessoagabi
washingtonpost.com/world/2022/11/… Brazilian congressman Eduardo Bolsonaro, the president’s s
10/ English-language hashtags promoting the #Bolsonaro rioters now laying siege to #Brazil's Capitol #Brasilia are trending.

Again.

Just as they did right after the election.

Some rioters are carrying English language signs.

Again.
11/ The danger could not be more clear.

The global far right has a playbook & cast of strategists.

Many are 🇺🇸Americans.

They are the architects of our current political chaos.

And they will literally smash the institutions of democracy anywhere to get & hold power.
12/ Musk's takeover was a boon for right-wing Twitter in #Brazil.

#Bolsonaro called the acquisition a “breath of hope.”

This afternoon the platform is saturated with pro-insurrection content.

By @charlottepeet11
restofworld.org/2023/musk-twit…
13/ "It’s the start of a relationship which I’m sure will soon end in marriage" - #Bolsonaro on Musk.

It will be very interesting to see what comes next from the platform's CEO.
14/ Note: deleted a tweet showing pro-#Bolsonaro rioters savagely attacking a police officer in #Brazil.

I'm lightly concerned Twitter's moderation approach will reflect Musk's political views on the matter & I want to make sure this thread stays live.

nypost.com/2022/11/01/elo…
15/ Trump was conspicuously silent while his supporters did the worst of the #jan6Insurrection.

#Bolsonaro is similarly silent today.

Parallels everywhere.
16/ Minister responsible for security in #Brasilia was staunch #Bolsonaro ally Anderson Torres.

Brazilian newspaper Estadão cites unnamed sources saying he recently travelled to Florida.

He was just dismissed with immediate effect👇

Source estadao.com.br/politica/colun…
17/ Pro-#Bolsonaro rioters appear to smash cameras from the ceiling during #Brasilia siege.

18/ UPDATE: #Brazil's democratically-elected president #Lula orders security intervention to stop pro-#Bolsonaro siege of capitol #Brasilia.
19/ Democratically-elected President #Lula's address:

- Federal security intervention in #Brasilia
- Identified rioters will be punished
- Complicit Police & officials will be punished.
- Investigation will target financing for the siege
20/ NOW: Flashes & heavy crowd control gas clouds seen as authorities work to clear grounds #Brazil's National Congress building in #Brasilia.
21/ NOW: multiple government buildings including National Congress, Palace & Supreme Court cleared of pro-#Bolsonaro rioters.

Intense crowd control on the esplanade in front of National Congress in #Brasilia.

Still a large group remain in vicinity.

Reports of. 30 arrests.
22/ Arrest totals keep rising as night falls on the scene. 150 and counting per Globo.

Brazilian media commentators already talking about a failure of intelligence.

Large group of rioters currently remains West of the Palace of Justice.
23/ Police bus with smashed out windows carries off restrained rioters.

Wild scene.

#Brasilia
24/ WATCH First footage of aftermath.

Journalist stunned when he gets inside #Brazil's Supreme Tribunal.

Absolutely wrecked, inside and out.

Like anti-democratic hurricane.
25/ #Brasilia is a UNESCO Heritage site & crown jewel of modernism.

Pro-#Bolsonaro rioters busted everything they could get their hands on.

Computers, furniture, cabinets, televisions. They even soaked carpets & antique furniture by smashing open fire sprinklers.
26/ Elements among pro-#Bolsonaro rioters spotted yanking network cables from servers.

Interesting.

Voices suggest they may be disabling security camera systems.
27/ Rioters sacked #Brazil's capitol for hours.

Condemnations from world leaders have poured in.

Meanwhile?

Complicit, cowardly silence from ex-president #Bolsonaro.
28/ "Bolsonarist radicalism can bring together thousands of coup supporters, but still it cannot take a country."

Analysis by André Petry tonight.

Original (pt-br): piaui.folha.uol.com.br/nunca-foi-tao-…
29/ They did resolve matters peacefully.

With a fair election.

The people you've gotten close to lost.

This is weak and fools nobody.

Since you arrived Twitter has been a launchpad for the lies that underpinned this attack on #Brazil's democracy.
30/ Reminder: Musk's arrival at Twitter turbocharged #Brazil's far right.

Similar bumps did not happen on Instagram & Youtube during the same timeframe.

Report by @charlottepeet11 restofworld.org/2023/musk-twit…
31/ If he wants peace for Brazilians, Musk should encourage everyone to accept the results of democratic elections.

At this point, anything less is playing footsie with authoritarianism.
32/ #Brazil's AG Office requests pro-#Bolsonaro official in charge of security for the Federal District be arrested

Anderson Torres (@andersongtorres), perhaps not coincidentally, is currently in the United States. Like Bolsonaro.

oglobo.globo.com/politica/notic…
33/ Claimed to be the original of Brazil's 1988 constitution.¹

Which ended 21 years of dictatorship.

Makes me sick to my stomach.

¹OSINT: Maybe? Same cover. Original kept in museum section of the Supreme Federal Tribunal. Which was attacked today.
34/ "I have always been within the four lines of the Constitution" - Bolsonaro

The ex-president waited till the attack failed & his supporters been arrested & kicked out by riot squads before delivering this weak & evasive statement.

So familiar.
35/ Hashtag associated with #Bolsonaro supporters: "BrazilianSpring."

Very active today.

First, it's in English.

Second? Hard to imagine a Brazilian came up with the term...

Because it's the *middle of Brazil's scorching summer.*

Weird.
36/ Democratically-elected president @LulaOficial arrives.

"...The coup plotters who promoted the destruction of public property in Brasilia are being identified and will be punished. Tomorrow we resume work... Democracy always. Goodnight"

37/ Bannon spent today compulsively posting the mantra that #Brazil's election was stolen.

It wasn't. And he knows it.

He also called the rioters freedom fighters.

They aren't.

And he knows that, too.
38/ January 3rd, Florida:

Supporters of ex-president #Bolsonaro who met him at beach club mansion say he told them that the "best is yet to come."
39/ "I was surrounded, kicked, pushed, cursed. They broke my glasses, pulled my hair, tried to take my cell phone."

Just like on #Jan6 journalists were assaulted in #Brasilia.

h/t @tomphillipsin
40/#Brazil's Supreme Court orders immediate removal of #Brasilia's governor for 90 days.

Says attacks could have only happened w/official complicity.

Hours ago Gov @IbaneisOficial began a video with an apology to president #Lula.

Which was interesting.
g1.globo.com/politica/notic…
41/ Musk fired Twitter's entire #Brazil staff, except for some salespeople.

Including everyone who worked on moderation of violence & misinformation.

By @lizzadwoskin
washingtonpost.com/technology/202…
42/ Pro-#Bolsonaro accounts used the code phrase (“Festa da Selma”) to organize & hype the assault on #Brazil's capitol today.

Some even shared maps.

Here are some examples from just one user.
43/ The “Festa da Selma” code phrase saw a huge spike in the run-up to the attack in #Brasilia.

Over 10k accounts.

Pic: @arcelinobsilva (who posts in Portuguese) has been tracking the term.
44/Wild. It took me thirty seconds find scores of Twitter accounts telling everyone exactly where to go to attack #Brasilia.

This was in plain sight.
46/ Another good follow, @msoares found accounts responding to coded tweets about the imminent #Brasilia siege tweeting questions like which "side" the military will be on during the attack.

Right. Out. In. The. Open.
47/ The sheer obviousness of tweets in the run-up is staggering.

Everything was spelled out in the thinnest of codes.

I think #Twitter was either willfully blind or utterly negligent as #Brazil careened towards an organized siege against the three branches of government.
48/ There appears to be a growing effort among #Bolsonaro supporters to construct a narrative that the ransacking was *actually* done by #Lula supporters / infiltrators.

Just like with the US insurrection on #Jan6.

Same. Playbook.
49/ Just learned that @agenciapublica reported in November that Steve Bannon coined the term "BrazilianSpring."

Which went on to become a major trending topic on Brazilian Twitter.

h/t @barbaradosualdo
By @lauradscofield(in Portuguese): apublica.org/sentinela/2022…
50/ To cap off a wild 24h, #Brazil's ex-president #Bolsonaro just checked himself into a Florida hospital.

This would be a telenovela if it weren't so consequential.
scc10.com.br/saude/bolsonar…
51/I've pointed to possible links to US-based folks like Bannon & #Jan6 parallels.

And Twitter's failures.

Investigations needed.

That said, Brazil has its own history w/dictators & coups.

Now it's stock-taking time & I recommend seeking out *Brazilian* experts & voices.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with John Scott-Railton

John Scott-Railton Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @jsrailton

Sep 2
NEW: foreign mercenary spyware is coming to the US.

ICE just quietly unsuspended contract with spyware maker #Paragon.

Remember them?

Caught earlier this year being used to hack journalists.

Bad move for Americans rights, national security & counterintelligence 1/Image
2/ #Paragon was co-founded in Israel in 2019 by ex head of Israel's NSA equivalent (Unit 8200) w/ major backing from former Israeli PM Ehud Barak.

Pitched themselves as stealthy & abuse-proof alternative to NSO Group's Pegasus.

& have been trying to get into the US market for years.Image
Image
Image
Image
3/For a long time all we knew about Paragon was their performance as a 'virtuous' spyware company with values.

All that came to a crashing halt in 2025 when they got very caught, helping customers hack targets across @WhatsApp.

WhatsApp did the right thing & notified users.

By @razhael
Image
Image
Image
Read 18 tweets
Aug 29
NEW: @WhatsApp caught & fixed a sophisticated zero click attack...

Now they've published an advisory about it.

Say attackers combined the exploit with an @Apple vulnerability to hack a specific group of targets (i.e. this wasn't pointed at everybody)

Quick thoughts 1/Image
Wait, you say, haven't I heard of @WhatsApp zero-click exploits before?

You have.

A big user base makes a platform big target for exploit development.

Think about it from the attacker's perspective: an exploit against a popular messenger gives you potential access to a lot of devices.

You probably want maximum mileage from that painstakingly developed, weaponized, and tested exploit code you created/ purchased (or got bundled into your Pegasus subscription).
3/ The regular tempo of large platforms catching sophisticated exploits is a good sign.

They're paying attention & devoting resources to this growing category of highly targeted, sophisticated attacks.

But it's also a reminder of the magnitude of the threat out there...

whatsapp.com/security/advis…
Read 4 tweets
Aug 20
WHOA: megapublisher @axelspringer is asking a German court to ban an ad-blocker.

Their claim that should make everyone nervous:

The HTML/ CSS code of websites are protected computer programs.

And influencing they are displayed (e.g by removing ads) violates copyright.

1/Image
2/ Preventing ad-blocking would be a huge blow to German cybersecurity and privacy.

There are critical security & privacy reasons to influence how a websites code gets displayed.

Like stripping out dangerous code & malvertising.

Or blocking unwanted trackers.

This is why most governments do it on their systems.Image
3/Defining HTML/CSS as a protected computer program will quickly lead to absurdities touching every corner of the internet.

Just think of the potential infringements:

-Screen readers for the blind
-'Dark mode' bowser extensions
-Displaying snippets of code in a university class
-Inspecting & modifying code in your own browser
-Website translators
Read 7 tweets
Jul 10
NEW: Mexico's former president under investigation for taking bribes from spyware industry.

Contracts included #Pegasus deal.

Story from @TheRecord_Media's Suzanne Smalley 1/Image
Image
Image
2/ Mexico's former president is denying everything...

But folks may recall that Pegasus was massively and systematically abused in Mexico.

Against journalists, spouses of cartel victims, lawyers, families of cartel-disappeared people, anti-corruption groups etc. etc.

There were so many cases that we eventually had EIGHT investigative reports...
therecord.media/former-mexican…Image
3/ What still gives me chills is how many cases surfaced of people killed by cartels... or their family members... getting targeted with Pegasus spyware.

The #PegasusProject found even more potential cases in Mexico. Image
Image
Image
Image
Read 5 tweets
Jun 18
🚨NEW REPORT: exposing a new hacking tactic.

🇷🇺Russian state-backed hackers used an App-Specific Password attack against prominent Russia expert @KeirGiles & others.

It's like they know what we all expect from them...and then did the opposite 1/

By us @citizenlab & @google's GTIGImage
Image
Image
2/ Let's begin: @KeirGiles gets a message purporting to be from @StateDept asking for a consultation.

The attackers send the message from a @gmail, but CC'd a bunch of email addresses @ state.gov.

Strong credibility signal to have a bunch of gov ppl on the CC line right?

Well, what the attackers were counting on is that the State Dept mailserver just accepts all email addresses without emitting a bounce.

So they seem to have just created some fake State Dept staff names and addresses.Image
3/ The attackers wait for the 2nd interaction to introduce the pivotal deception: getting @KeirGiles to 'connect to a secure platform.'

In the next days they patiently walk him through what they want him to do, even sending a very official looking (but fake) State Dept. documentImage
Image
Read 10 tweets
Jun 12
🚨NEW INVESTIGATION: We just forensically unmasked #Paragon's Apple spyware.

Zero-click targets: Journalists. In 🇪🇺Europe.

Like 🇮🇹Italian reporter @ciropellegrino.

Reopen's #Italy's spyware scandal.

Follows our @citizenlab investigation of their Android spyware. 1/ Image
2/ Back in April, @Apple sent out a threat notification to a select group of users. Some got in touch with us @citizenlab to get analyzed.

They'd been targeted with a sophisticated zero-click attack (think: no click, no attachment to open, no mistake needed...).Image
3/ While my brilliant colleague @billmarczak was working on the phone of a prominent European journalist, he made a smoking gun discovery:

Requests to server matching our P1 fingerprint for #Paragon's graphite.

Paragon's 'undetectable' Apple spyware had just been found...Image
Image
Image
Read 13 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(