all of them relatively new. with very weird friends and followers.
Mr pepe memer is probably the most interesting.
His followers include lots of pepe accounts, and lots of pro-Trump accounts. twitter.com/pipovski
Probably the most interesting is that the Russian Embassy Macedonia follows it.
as i was scrolling past the accounts followers i noticed these accounts:
all created in 2010 with similar stats, and location set to Russia Moscow, in Cyrillic.
The previous record holders for oldest Russian botnet were these 4K bots from 2013 they looked like this:
This Russian botnet dates all the way back to 2010 and there are at least 6000 of them.
The friends and followers of those initial 9 accounts are a crazy mix of Russian accounts and bots.
you would think a twitter handle called VisitMacedonia would follow some normal accounts but you would be wrong twitter.com/1VisitMacedoni…
I would say that twitter should red flag any account that has friended or follows one of those 9.
These old Russian bots are kinda cool, they talked to each other.
They were also sharing links to livejournal.
The original russian trolls were "ukrainian" livejournal bloggers.
google sheet with just the bots
this is one of many botnets that are in the friends and followers of those accounts. docs.google.com/spreadsheets/d…
Took me a minute to figure it out, but this is basically the great granddad russian spam botnet.
That is also used to boost some "macedonian" accounts follower counts.
almost 10k accounts dating all the way back to 2009. @allpaallpa83 @yarikova85 @cheltheme88
• • •
Missing some Tweet in this thread? You can try to
force a refresh
In just what happened to be an odd coincidence I happened to be looking at russian bots when @rob_barry did a thread about "CyberCaliphate"
At some point in march 2014 after the russian invasion of crimea GRU setup Cyber Berkut and started attacking various Ukrainian infrastructure and websites. motherjones.com/politics/2014/…
Suspected Iranian Influence Operation Leverages Network of Inauthentic
News Sites & Social Media Targeting Audiences in U.S., UK, Latin
America, Middle East fireeye.com/blog/threat-re…
we got 9 urls from FireEye's report.
and I had flagged another 13 back in march.
Mostly due to these reddit users:
/u/Mike_Rubin
/u/AllenDono
/u/finalin
/u/KevanKing
/u/Pazaj
/u/erickiskandar
Most of these sites share OR shared a common host at some point in time.
AS24940 hetzner[.]com
Quick thread about a small set of bots I ran into this morning. Every once in a while I randomly check the @SecureDemocracy dashboard it's usually the same things. Today #WeAreCorbyn popped up. Figured I would check it out. #Botspot#Russia#KremlinTrolls
Tweeting this kinda as I go.
1st thing pull data on the hashtag.
visual studio code, python, and tweepy.
I only pulled about 40k tweets, not that many.
next step is to crack open that .csv file and remove all the duplicate accounts leaving only one row per account.
Then start sorting. IF there is a pattern you will notice it almost immediately.
Here 16 accounts show up with the same stats, sorted by tweet source. Bots.