It's a great day to look at an Arabic-language pornbot network that uses stolen profile pics. This particular botnet sometimes uses the same pic on multiple accounts, occasionally cropped differently. #MondaySpam

cc: @ZellaQuixote
This network consists of 303 accounts created from November 2020 to January 2021, with particularly large batches created on November 13th, November 15th, and December 16th, 2020.
Most of this botnet's content is in Arabic, most of it is retweets, and most of it is (allegedly) sent via the Twitter Web App. The retweets were all sent via the web app, and its original content was posted via Twitter for Advertisers, Twitter Ads, and Tweetdeck.
The botnet's original content (sent via Twitter for Advertisers/Twitter Ads/Tweetdeck) is almost all porn video tweets. The tweets posted via Twitter advertising products also contain links to dodgy-looking X-rated blogspot pages. (As always, be extremely wary of unknown links.)
Who do the accounts in this network retweet? As it turns out, mostly each other. The retweet network consists of five separate clusters of accounts that retweet each other profusely (and do not retweet the members of the other cluster).
You can follow @conspirator0.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled:

By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.