The curious case of user one134500 and the most obvious reply spam ever

in a wacky coincidence, all of these accounts have the same login credentialsBeginning on May 10th, 2023, a network of recently-created accounts started spamming Twitter users with repetitive replies containing what appeared to be login credentials for a mysterious website ( This activity kicked into high gear on May 12th, 2023, with hundreds of thousands of replies from thousands of spam accounts generated in the ensuing days. Although Twitter has removed some of the accounts, a majority remain active and continue to flood the site with spam more than a week later.although Twitter has suspended some of the accounts, at least 13000 are keeping the spam rolling merrily alongAt the time of this writing, there are at least 13719 active accounts in this spam network, all of which were created in March or April 2023. None of these accounts has ever liked a tweet, and all of their tweets subsequent to May 10th, 2023 are replies. Although these accounts theoretically tweet via the Twitter Web App, automation seems likely due to the repetitive nature of the content and the sheer volume. Most of the accounts in the network were sporadically active prior to May 10th, 2023; this early content was generic-sounding tweets about daily activities rather than reply spam.nothing inspires confidence like a “Customer Service” department that you reach via a gmail address with a bunch of random numbers in itThe website promoted in the network’s initial wave of reply spam,, describes itself as a “financial income platform” and…The curious case of user one134500 and the most obvious reply spam ever

Leave a Reply

Your email address will not be published. Required fields are marked *