It's a holiday weekend, so let's look at a mostly-dormant botnet that follows YouTube political commentator @Timcast. #SundayShenanigans

cc: @ZellaQuixote
It's a holiday weekend, so let's look at a mostly-dormant botnet that follows YouTube political commentator @Timcast. #SundayShenaniganscc: @ZellaQuixote
It's a holiday weekend, so let's look at a mostly-dormant botnet that follows YouTube political commentator @Timcast. #SundayShenaniganscc: @ZellaQuixote
We found a total of 1249 very similar looking accounts following @Timcast, created in batches at various points in 2016. All follow a three digit number of accounts but have almost no followers, tweets, or likes of their own.
Most of the tweets accounts in this network have tweeted are retweets, and this is where things get weirder. The tweets being retweeted all have far more retweets than likes, with many having ratios of 100-to-1 or greater.
By exploring the retweet and follower networks of the 1249 accounts following @Timcast, we found 4894 total accounts that we believe to be part of this botnet, mostly created in 2016 and active in 2016-2017, with the majority of tweets sent via Twitter Web Client.
By exploring the retweet and follower networks of the 1249 accounts following @Timcast, we found 4894 total accounts that we believe to be part of this botnet, mostly created in 2016 and active in 2016-2017, with the majority of tweets sent via Twitter Web Client.
By exploring the retweet and follower networks of the 1249 accounts following @Timcast, we found 4894 total accounts that we believe to be part of this botnet, mostly created in 2016 and active in 2016-2017, with the majority of tweets sent via Twitter Web Client.
By exploring the retweet and follower networks of the 1249 accounts following @Timcast, we found 4894 total accounts that we believe to be part of this botnet, mostly created in 2016 and active in 2016-2017, with the majority of tweets sent via Twitter Web Client.
These accounts fall into two distinct categories:

Followers: these accounts follow a 3 digit number of accounts and have rarely if ever tweeted.
Retweeters: these accounts follow few if any accounts and have tweeted a 3 digit number of times, mostly retweets.
These accounts fall into two distinct categories:Followers: these accounts follow a 3 digit number of accounts and have rarely if ever tweeted.Retweeters: these accounts follow few if any accounts and have tweeted a 3 digit number of times, mostly retweets.
These accounts fall into two distinct categories:Followers: these accounts follow a 3 digit number of accounts and have rarely if ever tweeted.Retweeters: these accounts follow few if any accounts and have tweeted a 3 digit number of times, mostly retweets.
These accounts fall into two distinct categories:Followers: these accounts follow a 3 digit number of accounts and have rarely if ever tweeted.Retweeters: these accounts follow few if any accounts and have tweeted a 3 digit number of times, mostly retweets.
Who (other than @Timcast) do these accounts follow? It's an eclectic lineup, featuring everyone from the mayor of San Miguel, El Salvador, a former Apprentice UK contestant, and various artists, musicians, and journalists.
What content does this botnet amplify (or did - the accounts have been mostly silent since 2017)? As with who they follow, it's all over the map. Much is relatively benign advertising/promotions, but we did find both political content and accounts peddling fake engagement.
What content does this botnet amplify (or did - the accounts have been mostly silent since 2017)? As with who they follow, it's all over the map. Much is relatively benign advertising/promotions, but we did find both political content and accounts peddling fake engagement.
What content does this botnet amplify (or did - the accounts have been mostly silent since 2017)? As with who they follow, it's all over the map. Much is relatively benign advertising/promotions, but we did find both political content and accounts peddling fake engagement.
What content does this botnet amplify (or did - the accounts have been mostly silent since 2017)? As with who they follow, it's all over the map. Much is relatively benign advertising/promotions, but we did find both political content and accounts peddling fake engagement.
What content does this botnet amplify (or did - the accounts have been mostly silent since 2017)? As with who they follow, it's all over the map. Much is relatively benign advertising/promotions, but we did find both political content and accounts peddling fake engagement.
Correction: the y-axis of the accounts creation date chart shown in both these tweets should read "number of accounts", not "number of tweets."
https://twitter.com/conspirator0/status/1264668615707627521 https://twitter.com/conspirator0/status/1264668725728423936
You can follow @conspirator0.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled:
There are a lot of misconceptions about the Turkish diaspora in Germany. Since i just finished writing an essay about this topic I thought it's time to give other people
Read more
Las mejores calculadoras online en 2020A thread http://totumat.com/2020/11/26/las-mejores-calculadoras-online-en-2020/ Cuando se estudian asignaturas que requieren de cálculos complicados, nada mejor que contar con una buena calculadora.
Read more
Mitigating #ClimateChange is as much about taking up new techs as about leaving others behindMost studies focus on #coal's global downfall but another #energy tech decline is loomingRead my new
Read more