Suspected Iranian Influence Operation Leverages Network of Inauthentic
News Sites & Social Media Targeting Audiences in U.S., UK, Latin
America, Middle East fireeye.com/blog/threat-re…
we got 9 urls from FireEye's report.
and I had flagged another 13 back in march.
Mostly due to these reddit users:
Aug 4, 2018 • 11 tweets • 7 min read
Quick thread about a small set of bots I ran into this morning. Every once in a while I randomly check the @SecureDemocracy dashboard it's usually the same things. Today #WeAreCorbyn popped up. Figured I would check it out. #Botspot#Russia#KremlinTrolls
Tweeting this kinda as I go.
1st thing pull data on the hashtag.
visual studio code, python, and tweepy.
I only pulled about 40k tweets, not that many.
tagging everyone who might listen. please help me.
I MUST DESTROY THIS BOTNET.
I got curious about this claim. I can't say who runs them but a massive botnet DID used this hashtag.
This is the same botnet that i have been tracking for weeks now. twitter suspended 20,000 of the bots and barely put a dent in them.
They are creating over 3500 accounts A DAY.
Mar 23, 2018 • 45 tweets • 22 min read
Going to try to tweet this as I work through it. Someone out there doesn't like facebook. At least 3-4 different freshly minted botnets are retweeting anything with the #DeleteFacebook hashtag. #Bot#TwitterBots
the 1st "set" of bots is very similar to the elon musk cryptocurrency scammer bots that are running wild on twitter.
they are retweeting everything this account tweets:
russian reddit accounts and links reddit.com/user/eye_josh/… via @reddit
took me a few days to sort this out but this is the best way i could come up with to list all this information.
The accounts that posted links to known IRA "troll farm" websites are all connected to lots of other russian websites and accounts posted to reddit.
Feb 27, 2018 • 24 tweets • 10 min read
Got curious and tried to locate a URL for being patriotic or patriotus last night.
Decided to go browse the DNS history URLs that pointed to Greenfloid Llc's IP ranges.
and this website caught my eye: southtexasnews[.]net
Mostly because the list of russian or troll factory twitter handles congress got had a bunch of "news" twitter handles in it: