On July 22nd Wikileaks released 22000 DNC emails that had been previously hacked by Russian GRU agents. On Oct 7th Wikileaks dumped hacked John Podesta emails soon after the seemingly damaging Access Hollywood tape came out where Donald Trump talked about sexual misconduct @ollie
3million tweets from the Russian Internet Research Agency were recently archived & made available by the site @fivethirtyeight. We wanted to look at particular hashtags related to Green Party Candidate Jill Stein and #DemExit
fivethirtyeight.com/features/why-w… @ollie #infosec #osint #opsec
In the second wk of July 2016 #DemExit became a social media campaign & political movement in response to Bernie Sanders formally endorsing rival Hillary Clinton 4 president. Bernie Sanders supporters in particular were encouraged to leave the Democratic Party in protest #infosec
The first significant use of #DemExit on twitter appears 2 have been around May 31st 2016 & the first use by known IRA accounts was July 23rd. Of note is this occurred less than 24 hrs after Wikileaks released 22000 DNC emails that had been previously hacked by Russian GRU agents
It is noteworthy that the Russian IRA trolls were able to quickly mobilize accounts to use the #DemExit immediately after Wikileaks released the hacked DNC emails .. like this example. Google search data also shows July as the first spike in #DemExit
Additional #DemExit spikes occurred on Sept 17 & Oct 7, 2016. Oct 7th is noteworthy because its when Wikileaks released John Podesta's hacked emails soon after the seemingly damaging Access Hollywood tapes & the day US Intelligence confirmed Russia was behind the earlier DNC hack
There was a fair amount of overlap between IRA tweets promoting Jill Stein's candidacy and the #DemExit hashtag. On June 22, 2015 Dr. Jill Stein announces her bid for President running as the Green Party candidate. #infosec #osint #opsec
On Dec. 10, 2015 Dr. Jill Stein attends the 10th anniversary celebration of RT in Moscow. Russian President Vladimir Putin and retired Lt. Gen. Michael Flynn are also seated at the same table. This event would later fuel speculation and conspiracy theories #infosec #osint #opsec
On July 26th, 2016 Green Party presidential candidate Jill Stein posted a tweet using the #Demxit hashtag for the first time and encouraging people to leave the Democratic Party #infosec #opsec #osint
On July 31 eight of the pro-Jill Stein IRA accounts that we found from known data retweeted the following tweet by @mrnegromilitant over the period of an hour
July 31, 2016 appears to be the first big spike in pro-Jill Stein activity by the IRA trolls and subsequent spikes on Sep 17, Oct 6 and election day. Unlike the strictly #DemExit tweets the pro-Jill Stein tweets seemed far less coordinated to major events like Wikileaks dumps.
Both campaigns however spiked around Sep 17th, 2016 & its unclear whether this was planned or not. The only major events we could find were the pipe bombing in NJ, explosion in Chelsea neighborhood and mall stabbing in Minnesota. So obviously some terrorism fear was at play
What is clear is that Russian trolls from the Internet Research Agency were attempting 2 promote the narrative of voting for a 3rd party candidate like Jill Stein or not vote at all. They also continued 2 stoke #BLM unrest & even combined topics like Jill Stein #BLM and #DemExit
It should also be noted that these findings are based only on publicly known IRA data. Its our feeling that we are still only looking at tip of the iceberg. In fact some of our recent #Hamilton68 data goes back to 2016 including this accnt which is currently live #opsec #infosec

• • •

Missing some Tweet in this thread? You can try to force a refresh

Keep Current with Eric Ellason 🇺🇲🇺🇦

Eric Ellason 🇺🇲🇺🇦 Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!


Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @SlickRockWeb

Oct 7, 2018
I realize the #justicekavanaugh confirmation has been a hyper-partisan issue (that by itself is very concerning for a Supreme Court nomination) 4 wks now but why have the #Hamilton68 Russian influencer accounts spent so much oxygen on this? Like #BeersforBrett ?
We looked at our roughly 310 Twitter accnts that we reversed engineered as #Hamilton68 accnts (described at dashboard.securingdemocracy.org) and we created wordclouds 4 various segmented categories of our Hamilton68 accounts over the past wk & highlighted them related 2 Judge #Kavanaugh
The first set we looked was our set of #Hamilton68 accounts that focus on Russian geopolitics. 14658 tweets were analyzed over a period of a week and #kavanaugh was the main hashtag promoted as it related to Judge Kavanaugh
Read 13 tweets
Aug 7, 2018
According to some recent data by @conspirator0 who analyzed the Russian IRA Twitter data dump the conspiracy hashtags of #pizzagate, #pedogate, #qanon ect appear 2 have first been used by these accts in a measurable way in Nov 2016 & really ramping up in Nov 2017. #infosec #psyop
Looking at our current reverse engineered #Hamilton68 #Twitter accts which are described as Russian influencer accts here (dashboard.securingdemocracy.org) .. our domestic Hamilton68 subset pushing #qanon has diverged significantly from the top Alt-right activist accts pushing #walkaway
Here are our previous threads on the fake propaganda #walkaway campaign
and here . Its interesting that #walkaway seems 2b slowly dying in propaganda value to the Russian influencer #Hamilton68 accounts. #infosec #psyop
Read 6 tweets
Jul 2, 2018
So for the first time in quite a while a newcomer hashtag had top spot on the #Hamilton68 Dashboard -- #walkaway. We remembered seeing this hashtag in the past few weeks but didnt really know what it was or follow up on it. #infosec #opsec dashboard.securingdemocracy.org
The background story on this hashtag #walkaway is a little strange & the number of bots, trolls, & fake testimonial promoting this hashtag is even stranger. Here's an example of a completely fake tweet highlighted by @daveweigel #opsec #infosec
We decided to look retrospectively at our own reverse engineered #Hamilton68 data. This is a wordcloud of 22893 tweets from our main Hamilton68 troll subset going from June 24th until now & #walkaway takes the #1 spot. #infosec #opsec
Read 31 tweets
Feb 16, 2018
Last night we took a look at the Twitter dataset from suspended Kremlin troll accounts archived & posted by #NBC & look at the frequency of tweets discussing specific US states & display by swing states in 2016 election #Mueller Internet Research Agency nbcnews.com/tech/social-me…
As you can see there was a pretty clear grouping of purple states. This was an initial quick and dirty analysis and it doesn't take into account that bigger states would of course likely have a higher # of random tweets about them.
So in this next graph we normalized the # of tweets mentioning each state to the states electoral number thus normalizing the tweet frequency to the weight or importance of the state in the 2016 elections. Again a good grouping of purple states. #mueller Internet Research Agency
Read 8 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!


0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy


3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!