In my latest for @DFRLab the man behind the xenophobic @ulerato_pillay Twitter account is revealed as a 32 year old former SANDF member: Sifiso Jeffrey Gwala.

Gwala used the account to foment violence against foreign nationals disguised as "nationalism". https://medium.com/dfrlab/xenophobic-twitter-campaigns-orchestrated-by-former-south-african-soldier-9e7702433176">https://medium.com/dfrlab/xe...
Xenophobic Twitter campaigns orchestrated by former South African soldier

A dismissed member of the South African National Defence Force has been gaming Twitter’s algorithms to foment xenophobic violence

https://medium.com/dfrlab/xenophobic-twitter-campaigns-orchestrated-by-former-south-african-soldier-9e7702433176
This follows an earlier investigation by @awildknight and I that showed the account was linked to a person by the name Sfiso Gwala.

Our investigation stopped short of identifying Gwala personally at the time. https://medium.com/dfrlab/afrophobic-south-african-twitter-account-connected-to-nationalist-political-party-7e7205cc8987">https://medium.com/dfrlab/af...
Afrophobic South African Twitter account connected to nationalist political party

The widely followed account displayed Afrophobic sentiment through hashtags and promoted content from the South African First party

https://medium.com/dfrlab/afrophobic-south-african-twitter-account-connected-to-nationalist-political-party-7e7205cc8987
In this investigation we found evidence linking Gwala to the account. User ID& #39;s for @uLerato_pillay and an archived version of @sfiso82648954 showed both used the same user ID.

In addition, a petition created by Gwala was shared by ULP less than 2 minutes after it was created.
In this investigation we found evidence linking Gwala to the account. User ID& #39;s for @uLerato_pillay and an archived version of @sfiso82648954 showed both used the same user ID.In addition, a petition created by Gwala was shared by ULP less than 2 minutes after it was created.
In this investigation we found evidence linking Gwala to the account. User ID& #39;s for @uLerato_pillay and an archived version of @sfiso82648954 showed both used the same user ID.In addition, a petition created by Gwala was shared by ULP less than 2 minutes after it was created.
Since then, Gwala has attempted to hide evidence linking him to the account.

"Sfiso J Gwala" was replaced as the author of the DSTV http://Change.org"> http://Change.org  by "Themba Mthiya".

But the website source code shows this is the same user as Sfiso J Gwala that created the petition.
An attempt was made by "Themba Mthiya" to delete the petition on 13 July, the same day that the Daily Maverick published our investigation.

This came shortly after a (later deleted) post by @uLerato_pillay claiming that Gwala never hid his identity.
An attempt was made by "Themba Mthiya" to delete the petition on 13 July, the same day that the Daily Maverick published our investigation.This came shortly after a (later deleted) post by @uLerato_pillay claiming that Gwala never hid his identity.
An attempt was made by "Themba Mthiya" to delete the petition on 13 July, the same day that the Daily Maverick published our investigation.This came shortly after a (later deleted) post by @uLerato_pillay claiming that Gwala never hid his identity.
An attempt was made by "Themba Mthiya" to delete the petition on 13 July, the same day that the Daily Maverick published our investigation.This came shortly after a (later deleted) post by @uLerato_pillay claiming that Gwala never hid his identity.
Since http://Change.org"> http://Change.org  authenticates using Facebook, this meant that the FB account that created the petition was changed.

At the same time, a Facebook account for Gwala, found but unpublished during the earlier investigation, suddenly disappeared.
Gwala was kind enough to appear on a @Powerfm987 show on 2 May 2020. During the interview he made several statements that could be linked to earlier tweets by @uLerato_pillay.

These are detailed in the piece.

https://omny.fm/shows/power-podcasts/complains-and-frustrations-about-dstv-being-too-ex">https://omny.fm/shows/pow...
Gwala was kind enough to appear on a @Powerfm987 show on 2 May 2020. During the interview he made several statements that could be linked to earlier tweets by @uLerato_pillay. These are detailed in the piece. https://omny.fm/shows/pow...
Gwala was kind enough to appear on a @Powerfm987 show on 2 May 2020. During the interview he made several statements that could be linked to earlier tweets by @uLerato_pillay. These are detailed in the piece. https://omny.fm/shows/pow...
As for his military background: it was clear from @uLerato_pillay& #39;s tweets that he knew the SANDF well.

Tweets by Gwala showed he knew the SANDF regalia and colours, had knowledge of their previous deployments and had inside knowledge of the SANDF.
In particular, he seemed to display inside knowledge of 121 SA Infantry Battallion, based in Mtubatuba near Richardsbay.

Several tweets by @uLerato_pillay also referenced the Richards Bay municipality and service delivery issues in the area.
His infamous attack on @NalediChirwa was based on her comments about the SANDF, and particularly the conduct of several soldiers during a UN deployment to the DRC in 2015.

@uLerato_pillay was especially fond of these repatriated soldiers...
His infamous attack on @NalediChirwa was based on her comments about the SANDF, and particularly the conduct of several soldiers during a UN deployment to the DRC in 2015. @uLerato_pillay was especially fond of these repatriated soldiers...
His infamous attack on @NalediChirwa was based on her comments about the SANDF, and particularly the conduct of several soldiers during a UN deployment to the DRC in 2015. @uLerato_pillay was especially fond of these repatriated soldiers...
His infamous attack on @NalediChirwa was based on her comments about the SANDF, and particularly the conduct of several soldiers during a UN deployment to the DRC in 2015. @uLerato_pillay was especially fond of these repatriated soldiers...
...likely because, as court documents show, "Sifiso Jeffrey Gwala" was one of these 34 soldiers assigned challenging the SANDF& #39;s decision to repatriate and dismiss them.
What is more, Gwala& #39;s phone numbers and email addresses could be linked to the @uLerato_pillay and newer @Lerato_pillay Twitter account.

This created a web of interactions and links that goes way beyond mere coincidence.
Note: The current @uLerato_pillay Twitter account is a fake created in August 2020.

The original @uLerato_pillay changed its user handle to @PutSAnsfirst_ , claiming that someone else would be taking over the account.

The @PutSAnsfirst_ account has since been deactivated.
Note: The current @uLerato_pillay Twitter account is a fake created in August 2020.The original @uLerato_pillay changed its user handle to @PutSAnsfirst_ , claiming that someone else would be taking over the account.The @PutSAnsfirst_ account has since been deactivated.
Note: The current @uLerato_pillay Twitter account is a fake created in August 2020.The original @uLerato_pillay changed its user handle to @PutSAnsfirst_ , claiming that someone else would be taking over the account.The @PutSAnsfirst_ account has since been deactivated.
You can follow @jean_leroux.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled:
There are a lot of misconceptions about the Turkish diaspora in Germany. Since i just finished writing an essay about this topic I thought it's time to give other people
Read more
Las mejores calculadoras online en 2020A thread http://totumat.com/2020/11/26/las-mejores-calculadoras-online-en-2020/ Cuando se estudian asignaturas que requieren de cálculos complicados, nada mejor que contar con una buena calculadora.
Read more
Mitigating #ClimateChange is as much about taking up new techs as about leaving others behindMost studies focus on #coal's global downfall but another #energy tech decline is loomingRead my new
Read more