External Tweet loading...
If nothing shows, it may have been deleted
by @leahmcelrath view original on Twitter
We downloaded tweets going back to July 2015 containing the hashtag #IStandWithIsrael. There are several spikes, including two in mid-2016. Let's focus on those.
Restricting the time range to tweets between 5/1 and 9/1/2016 leaves 25404 unique tweets (73373 including retweets) from 989 accounts. Of the 20 that received the largest number of RTs, 14 have #PJNET in their profiles.
This diagram shows the retweet/reply relationships for #IStandWithIsrael tweets between 5/1 and 9/1/2016. 57 of 989 (5.8%) accounts have #PJNET in their bio, but these accounts earned 25394 or 47969 (53%) total RTs. #PJNET accounts are colored red.
Here's an earlier thread discussing #PJNET and pro-Roy Moore accounts. Among the important points is that PJNET provides tools for partially automating one's account.
External Tweet loading...
If nothing shows, it may have been deleted
by @conspirator0 view original on Twitter
The tweet schedules of several of the prominent mid-2016 #IStandWithIsrael users indeed show distinct signs of automation.
Looking at all the distinct #IStandWithIsrael tweets from mid-2016, an overall pattern emerges. The majority of the traffic seems to consist of short, coordinated campaigns.
For the sake of comparison, here's the tweet schedule for #IStandWithIsrael for the last month. Far more organic/disorganized (and volume is lower).
Another thing to check for when looking for automation is accounts that operate 24/7. 70 of the 989 accounts were flagged as such. This set is mostly distinct from the #PJNET accounts - only 6 are in both.
Did the users pushing this trend in mid-2016 have any contact with known Kremlin troll accounts? The short answer is yes (chart is based on replies to/mentions of ten banned IRA accounts).
The #PJNET/#IStandWIthIsrael users had significant interactions over time with five of the banned troll accounts: Jenn_Abrams, tpartynews, TheFoundingSon, TEN_GOP, and Pamela_Moore13.
On the subject of #PJNET and the banned Kremlin trolls, here are some examples of #PJNET accounts amplifying them.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Meet @ShawneeDeaver. This account's first tweet - and only non-reply tweet - is 2scEY0T, an apparently random 7-character alphanumeric code. The rest of the tweets are replies sent within hours of its creation; the collage is representative. (Thanks @OlgaNYC1211 for the lead).
We decided to look for more accounts like it. We started by harvesting the recent replies to the accounts that @ShawneeDeaver replied to, and filtering the results to accounts with a 7-character code as their first tweet and all subsequent tweets being quickly-launched replies.
Let's take an updated look at the traffic related to Russia Insider, a Russian news site featuring sections such as "Western Collapse", "The Jewish Question", "Free Assange", "Russiahoax", and "EU Conservative Uprising".
(previous Russia Insider thread in which failed Congressional Candidate Paul Nehlen featured prominently)
While looking for streams of the Kavanaugh confirmation cloture vote yesterday, we stumbled on @Seekandfind, an account that linked Russia Today's stream. Spoiler alert - this account is (at least presently) a bot with signs of some human interjections.
This account is extremely high-volume (900+ tweets per day at present) and uses a massive cornucopia of different automation tools to tweet (mostly Microsoft PowerApps, Buffer, Integromat, IFTTT, and Zapier).
What does @Seekandfind tweet about? 37.1% of tweets contain one or more of the keywords shown in this chart - the Trump, Hillary Clinton, MSM/fake news, and deep state categories being the most prominent.
On October 2nd, the news came out that envelopes containing suspected ricin had been mailed to the Pentagon and the White House. We downloaded tweets containing the word "ricin" a few hours after the news broke, resulting in 45007 tweets from 29308 accounts.
Here's the retweet network for "ricin" on 2018-10-02. It consists almost entirely of right wing accounts, most of which are speculating that the ricin mailing was left-wing terrorism.
We tested a sample of 10000 of the accounts with ricin tweets for automation (based on either 24/7 activity or 90%+ of tweets being posted via automation services/custom apps). 817 (8.2%) were flagged as bots. Let's look at a few of them.
Yesterday (2018-10-02), four members of the white supremacist group known as the "Rise Above Movement" were arrested by the feds for their part in the violence at the #UniteTheRight rally in Charlottesville in August 2018. Let's take a look at related Twitter traffic.
(previous thread on the Twitter activity surrounding the #UniteTheRight hashtag leading up to and during the rally last year.)
We downloaded tweets containing "Charlottesville" and "arrests", resulting in 15082 tweets from 12331 accounts beginning with the first report of the arrests (from @HenryGraff).
How does one go about detecting Twitter bots (automated accounts)? Let's take a look at three different tests for detecting signs of automation, and try them on three different sample sets of accounts.
The first two tests may be familiar from previous threads:
1. 24/7 tweet activity - this could point to multiple human operators, but is usually the result of automation/tweet scheduling. 2. Use of automation services such as IFTTT or custom apps built with the Twitter API.
The tweet schedule plots shown in the previous tweet can be used to visually perform both these tests. You can generate them yourself for accounts of interest here: makeadverbsgreatagain.org/allegedly