So for the first time in quite a while a newcomer hashtag had top spot on the #Hamilton68 Dashboard -- #walkaway. We remembered seeing this hashtag in the past few weeks but didnt really know what it was or follow up on it. #infosec#opsecdashboard.securingdemocracy.org
The background story on this hashtag #walkaway is a little strange & the number of bots, trolls, & fake testimonial promoting this hashtag is even stranger. Here's an example of a completely fake tweet highlighted by @daveweigel#opsec#infosec
We decided to look retrospectively at our own reverse engineered #Hamilton68 data. This is a wordcloud of 22893 tweets from our main Hamilton68 troll subset going from June 24th until now & #walkaway takes the #1 spot. #infosec#opsec
Looking at our #Hamilton68 troll subset that generally focuses on events directly related to Russia, we did a wordcloud of 19059 tweets from June 24th until now. And #walkaway also showed up although not as prominently as other subsets #opsec#infosec#bot#botnet
This is what I don't get @Aurora3379 u clearly have a vested interest in this #walkaway movement & claim to be a Democrat leaving the party when you clearly are not & probably never were a Democrat. U just have to look at ur timeline. That is what is so strange about all of this?
@Aurora3379 you have used the #walkaway hashtag over 300 times in the past week & apparently only tweet on Sunday?? Even a dumb apolitical capitalist like myself can clearly see from the hashtags you use that you are not a Democrat
Here are some more completely organic and legitimate tweets on the completely “real” snark #walkaway campaign #opsec#infosec
So this very suspect Row Powers #walkaway testimonial was retweeted 5400 times including Donald Trump Jr. The account retweets RT(.)com stories and strange mixture of affiliate marketing type tweets including an obscure dating site
The Ron Powers account was traced to the domain ronpowers(.)us & email address & its clearly a fake registration using Los Angeles as the city, Alabama as the state and a Burbank, CA phone number?? Hmm. Weird clients and tweet frequency that is very bot or cyborg like. #walkaway
This one is quite funny in that they have mixed up their messaging. This "MS-13" gang member is leaving (#walkway) the Democratic party and joining the Republican party. Huh?? Is that really the message u were shooting for? #infosec#opsec
This account @cecilia48188170 has tweeted three times since 2017. Yesterday it put out a #walkaway testimonial that magically got retweeted 377 times and liked 1.1k times. Impressive for an account with 20 followers and 3 tweets. Wish I had that kind of "organic" pull. LOLOL
Some great visualizations of the artificial connections and bot activity in the #walkaway propaganda hashtag by ( @3r1nG ). Anytime you get directly connected to #pizzagate the believability factor goes WAY down #infosec#opsec
This completely normal sounding Twitter name @72b84c5d3868437 from Erin's work tweets out at about 800 tweets per day and has used #walkaway almost 400 times in the past 5 days. Also really likes to eat at #pizzagate Totally normal "Human" activity! LOLOL
Very interesting analysis as usual done by @conspirator0 showing the Twitter accounts claiming to be former Democrats in the whole #walkaway propaganda campaign are nothing more than astroturf accounts #infosec#opsec
Here is another completely believable #walkaway account newly created. Democrat that had a recent crisis of conviction, just found Twitter & left the party 2 join the GOP and is an apparent black man who now tweets alt-right activist hashtags at 153 times a day mostly at 2:00 am
In honor of our country's Independence day @realShawnEib and I are outing the first still live #Hamilton68 troll. @KeepTexasRed7 retweeted a #WalkAway tweet on June 8th & was the first of the 250+ Hamilton68 trolls & bots we have collected to do so. #infosec#opsec
Interestingly since we first identified @keepTexasRed7 back on March 5th where it was tweeting at a good clip of 914 tweets/day it has since deleted all its tweets prior to June 30th 2018. #infosec#opsec#hamilton68
Another very interesting thread on #walkway by my research partner @realShawnEib. His socialbearing.com data also shows Russian involvement. Keep in mind that most good #pysops accounts dont have geo-enabled turned on so this is way under-represented
Can't remember if I mentioned the icing on the cake where Brandon Straka got an exclusive interview of all places RT(.)com. @realShawnEib posted it here yesterday. Also the @CarolN33 account has gone eerily silent #hamilton68#walkaway
More media & journalists picked up on this #walkaway astroturf / propaganda campaign 2day being pushed on #Twitter & #Facebook including detailed analysis by @RVAwonk confirming our findings
Lastly the Google trend search data over a 24 hr period for #walkaway is quite interesting. The 2 biggest spikes occurred in the 2:00 am -4:00 am range. Totally what you would expect for a domestic only organically-driven political movement <snark> #opsec#psyops#infosec#osint
Wonder if these fake #walkaway twitter accounts saying they r switching parties, leaving the Democrats & will b voting Republican qualify as the mythical "corpses that vote" in every election. The ones the conspiracy nuts rage about. They are certainly "Ghost in the Shell" voters
My research partner @realShawnEib has more VERY interesting details on the fake Ron Powers Twitter account and its #walkaway testimonal that was retweeted 5400 times including from Donald Trump Jr. #infosec#opsec#psyops#osint
Whomever was behind @ronpowers accnt was advertising to pay people 2 commandeer their twitter accounts ..presumably 2 create a Twitter botnet. Also had an account on the criminal Arizona based website Backpage which was seized by FBI back in April 2018
@RebootBill from the fake propaganda #walkaway movement has been suspended by #Twitter as of today. This accnt had been tweeting at a rate of 148 per day. So far the suspension rate is now at 5% for the #walkaway accnts we are following #infosec#opsec#osint#psyops
The new walkawaycampaign(.)com website was first registered at Godaddy on June 6th, 2018. Two days later we saw the first #Hamilton68 troll / Russian influence account @keepTexasRed7 retweet a #walkaway tweet. #infosec#osint#opsec
I realize the #justicekavanaugh confirmation has been a hyper-partisan issue (that by itself is very concerning for a Supreme Court nomination) 4 wks now but why have the #Hamilton68 Russian influencer accounts spent so much oxygen on this? Like #BeersforBrett ?
We looked at our roughly 310 Twitter accnts that we reversed engineered as #Hamilton68 accnts (described at dashboard.securingdemocracy.org) and we created wordclouds 4 various segmented categories of our Hamilton68 accounts over the past wk & highlighted them related 2 Judge #Kavanaugh
The first set we looked was our set of #Hamilton68 accounts that focus on Russian geopolitics. 14658 tweets were analyzed over a period of a week and #kavanaugh was the main hashtag promoted as it related to Judge Kavanaugh
On July 22nd Wikileaks released 22000 DNC emails that had been previously hacked by Russian GRU agents. On Oct 7th Wikileaks dumped hacked John Podesta emails soon after the seemingly damaging Access Hollywood tape came out where Donald Trump talked about sexual misconduct @ollie
In the second wk of July 2016 #DemExit became a social media campaign & political movement in response to Bernie Sanders formally endorsing rival Hillary Clinton 4 president. Bernie Sanders supporters in particular were encouraged to leave the Democratic Party in protest #infosec
According to some recent data by @conspirator0 who analyzed the Russian IRA Twitter data dump the conspiracy hashtags of #pizzagate, #pedogate, #qanon ect appear 2 have first been used by these accts in a measurable way in Nov 2016 & really ramping up in Nov 2017. #infosec#psyop
Looking at our current reverse engineered #Hamilton68#Twitter accts which are described as Russian influencer accts here (dashboard.securingdemocracy.org) .. our domestic Hamilton68 subset pushing #qanon has diverged significantly from the top Alt-right activist accts pushing #walkaway
Here are our previous threads on the fake propaganda #walkaway campaign
Last night we took a look at the Twitter dataset from suspended Kremlin troll accounts archived & posted by #NBC & look at the frequency of tweets discussing specific US states & display by swing states in 2016 election #Mueller Internet Research Agency nbcnews.com/tech/social-me…
As you can see there was a pretty clear grouping of purple states. This was an initial quick and dirty analysis and it doesn't take into account that bigger states would of course likely have a higher # of random tweets about them.
So in this next graph we normalized the # of tweets mentioning each state to the states electoral number thus normalizing the tweet frequency to the weight or importance of the state in the 2016 elections. Again a good grouping of purple states. #mueller Internet Research Agency