degenoah 🇨🇦🇺🇦 @degenoah Twitter profile

Last Seen Profiles

@MusallamAdil

@Paired_Aces

@TOFH1

@questiobn

@bosssg2k

@Aslibekiro

@stwmaniax

@crypto_kun7

@shi_na_728_893

@kendrick2__

@LenoreNixa96680

@Shenoud44646154

@kubara_honke

@Archive_Writes

@endroll_zzz

@bokeplokalmalam

@SlapCity6

@aljdyd72900

@ayayamadamu

@fa4q1

@bokeplokalmalam

@lindamludke

@EKnight03

@optirmismFND

@Canstatt93

@youtoozgoldie

@DarrenDoane

@MsJulieSLam

@R6esportsBR

@tutikstwgatel69

@riley_ludlam

@SePT_Gakugei

@tutikstwgatel69

@Barcelona_Mitsu

@tutikstwgatel69

@nemuu459182

degenoah 🇨🇦🇺🇦

@degenoah

5 months

so many new follows I can't keep up! If you recently followed and didn't receive a follow back, please reply to this so I can correct that! 🫡

69

24

206

degenoah 🇨🇦🇺🇦

@degenoah

7 months

Was seeing these bots around and decided to take a look. This is definitely a new disinformation campaign, utilizing fake news articles. In this thread I will go through the behavior of these sites, how they work, and how Russian threat actors could be behind this campaign.

Peter RockaFella

@PeterRockaFella

7 months

@sawyerjana14687 Achtung! #Bot !

0

1

7

5

50

151

degenoah 🇨🇦🇺🇦

@degenoah

4 months

@KartalEagleEye @Helldiversmedia gotta appease the shareholders somehow

12

0

123

degenoah 🇨🇦🇺🇦

@degenoah

2 months

@TrueSlazac @hisvault_eth @LadelaBackup @HuntinatorThe3 @loafnw @KarimalaKaya @JLee2028 @FredFellaIMO @TrumpDailyPosts prompt injection against a propaganda bot is fucking crazy lmao

0

77

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@KirscheVerstahl >offensive card game on purpose >zoomers get offended at said offensive game >cannot process the definition of satire

2

4

74

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@InspectorBaboon @DasRgen4 @imOnoja Igor gets everyone, at least once. I always need to double check stupid tweets nowadays to see if it's an Igor shitpost or not

1

0

55

degenoah 🇨🇦🇺🇦

@degenoah

7 months

There appears to have been an increased presence of bots on Twitter linked to the Russian #DOPPELGANGER disinformation campaign, as well as new propaganda targeting German readers

degenoah 🇨🇦🇺🇦

@degenoah

7 months

Was seeing these bots around and decided to take a look. This is definitely a new disinformation campaign, utilizing fake news articles. In this thread I will go through the behavior of these sites, how they work, and how Russian threat actors could be behind this campaign.

5

50

151

2

15

54

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@UA_Nationall oh it was abandoned? цікаво чому🤣

0

50

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@Kaylan_TX @FahCubeItches lmao

2

1

41

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@PStyle0ne1 that final safety shot always follows with a sigh of relief

0

40

degenoah 🇨🇦🇺🇦

@degenoah

8 months

@AndrewPerpetua "You spin me right 'round, baby, right 'round Like a record, baby, right 'round, 'round, 'round"

0

1

35

degenoah 🇨🇦🇺🇦

@degenoah

7 months

@front_ukrainian knowing how much media that brigade puts out, we might be able to see avdiivka from a whole new perspective

0

33

degenoah 🇨🇦🇺🇦

@degenoah

7 months

@secretsqrl123 I love how tucker has now gone to praising moscow, almost as if he's panicking trying to save himself from the wrath of his ruler lmao

3

0

28

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@HanganPaul1 @comp4dev @Alex_Oloyede2 ahem, how else did he get so much power?

1999 Russian apartment bombings - Wikipedia

en.wikipedia.org

1

0

26

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@bayraktar_1love @SChiron58 the mix of uniforms is funny. I remember near the start of the invasion most were wearing the standard russian uniform, just for it to slowly become a disorganized mess. so much for a "powerful" army that can't afford clothes lol

0

26

degenoah 🇨🇦🇺🇦

@degenoah

3 months

@nexta_tv is that why scott loves russia?

1

0

26

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@GloOouD 25mm of pure HATE GOD I love that thing

1

0

25

degenoah 🇨🇦🇺🇦

@degenoah

7 months

This is what the redirect chain looks like for one of these sites. It starts with the originally posted link -> a site that appears to point the chain to the desired fake article -> the fake article itself.

1

24

degenoah 🇨🇦🇺🇦

@degenoah

3 months

@NinjasInJokes @pcgamer literally this. steam is a dominant player solely because all of their competition keeps shooting themselves in the foot

1

2

24

degenoah 🇨🇦🇺🇦

@degenoah

7 months

The code itself is responsible for constructing a URL which will then be added as the source of a new script element. The content found at the constructed URL contains the code for our final redirect to the fake news article.

1

20

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@LilyBaby2021 @AdamParkhomenko I mean did you watch it? It's really well made and it definitely deserves that title. It's raw, unfiltered, and very emotional. Extremely powerful sound design and one of the best film styles I had seen on any documentary... So yeah, this Oscar was completely deserved..

2

0

19

degenoah 🇨🇦🇺🇦

@degenoah

7 months

@2d4a7z @mymouthdreams @JayTex888 @RealDWCB cut Ivan some slack, he's a new recruit

0

1

21

degenoah 🇨🇦🇺🇦

@degenoah

5 months

hi to all of these new friends dropping by 😁

4

1

19

degenoah 🇨🇦🇺🇦

@degenoah

7 months

I forgot to point this out, but another thing that likely links this to Russian APT groups is from the sheer number of bots that are involved here.

Peter RockaFella

@PeterRockaFella

7 months

@degenoah Die Artikel des Bot-Nrtzes werden von den Bots zum Teil zig tausendfach geteilt!

1

0

7

3

2

20

degenoah 🇨🇦🇺🇦

@degenoah

2 months

@Matt_laza @AndrewPerpetua also consider that UA revolutionized and pioneered this style of cheap drone warfare. russians only tried copying what they saw the Ukrainians doing without fully understanding the tactics employed.

1

0

20

degenoah 🇨🇦🇺🇦

@degenoah

7 months

We see what looks like an article from @washingtonpost . But it's not quite exactly the same. This article is on a domain that uses the '.pm' TLD, instead of the legit version, which is on '.com'. All of the links on the page also point to the real site.

1

2

20

degenoah 🇨🇦🇺🇦

@degenoah

7 months

The main things that point this to being from Russian threat actors should be pretty obvious. With the campaign being solely focused on inciting division within the west and spreading dangerous disinformation about the invasion, and the presence of Russian text.

1

20

degenoah 🇨🇦🇺🇦

@degenoah

7 months

This fake site is one of a few, and all contain multiple fake articles. Another domain of interest, used for spreading disinformation about the war, is a clone of RBC-Ukraine, hosted at www.rbk[.]media.

1

2

19

degenoah 🇨🇦🇺🇦

@degenoah

4 months

@UA_Nationall holy I forgot about that fb post

2

0

18

degenoah 🇨🇦🇺🇦

@degenoah

7 months

It also seems that Twitter has caught up with these bots as their presence has dropped somewhat, but I could be wrong. Also, this is just weird..

1

0

19

degenoah 🇨🇦🇺🇦

@degenoah

7 months

@DimitriASimes @GravitysRa1nbow Do you condemn predatory acts towards children?

0

19

degenoah 🇨🇦🇺🇦

@degenoah

7 months

As for the second redirect sites, they all appear to be from the same IP, which belongs to BL Networks (AS399629)

1

18

degenoah 🇨🇦🇺🇦

@degenoah

7 months

It seems that only the HTML header is important, as it also is what will redirect us to the second site.

1

17

degenoah 🇨🇦🇺🇦

@degenoah

7 months

The first URL returns a simple document which defines meta tags for a twitter embed, executes JavaScript which has been obfuscated with an eval call, with the rest of the page being what appears to be randomly generated chunks of Russian text.

1

18

degenoah 🇨🇦🇺🇦

@degenoah

7 months

The second site also contains randomly generated sentences, but this time in English. At the bottom of the document body, a script element is defined which defines it's source as base64, which isn't a very common thing i see.

1

18

degenoah 🇨🇦🇺🇦

@degenoah

7 months

We can see that washingtonpost[.]pm was acquired recently. It appears that rbk[.]media has been active for a little while longer.

1

2

18

degenoah 🇨🇦🇺🇦

@degenoah

4 months

@MatBabiak @TimothyDSnyder I really want to know which hearing this was from and watch it from full. idk why but I love laughing at everything she says

2

1

18

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@DefMon3 appropriate reaction, they're valid military targets in my eyes

0

15

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@Trollstoy88 tell me you don't know how satellite imagery works without telling me you don't know how satellite imagery works

2

0

17

degenoah 🇨🇦🇺🇦

@degenoah

7 months

In the page's source, we also can discover the article which this page was cloned from. Going to the root index of the site reveals that it is using Vesta Control Panel.

1

0

17

degenoah 🇨🇦🇺🇦

@degenoah

4 months

@RedPilledVishal @Christy4Change this tweet demonstrates how bad our education system is

0

16

degenoah 🇨🇦🇺🇦

@degenoah

7 months

The #DOPPELGANGER disinformation campaign was once previously uncovered by EU DisinfoLab. Source:

Doppelganger - Media clones serving Russian propaganda - EU DisinfoLab

How Doppelganger, an operation linked to Russian-based actors, cloned legitimate media outlets from multiple European countries to spread disinformation designed to undermine the support to Ukraine.

www.disinfo.eu

EU DisinfoLab

@DisinfoEU

2 years

#DOPPELGANGER : How Russia-based actors cloned legitimate media outlets from multiple countries (🇩🇪🇬🇧🇫🇷🇮🇹🇱🇻🇺🇦) to spread disinformation designed to undermine the support for Ukraine. Our last investigation:

21

505

725

1

2

16

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@RandyHeyyyy @miscaisg @rawsalerts meds now

1

0

16

degenoah 🇨🇦🇺🇦

@degenoah

8 months

@NormandeBrigade @UdaUkrainian what a piece of shit.. I have such resentment towards clout chasers who are willing to do this kind of shit and have the nerve to double down.

2

0

14

degenoah 🇨🇦🇺🇦

@degenoah

8 months

@Azovsouth if everything else hasn't pissed everyone off there yet, this one definitely will 🤭

0

14

degenoah 🇨🇦🇺🇦

@degenoah

2 months

@Gerashchenko_en >Russian "Z-bloggers" already blame Ukraine. again igor's satire perfectly predicts vatnik speech

Igor

@DasRgen4

5 months

Mohammed al-Ahbama, Ali ben-Fudid, Yassin al-Fuq and Mohammed sad-Diq are the four #Ukraine terrorists identified behind the act of terror in #Moscow #Russia This is outrageous from #NATO What’s did we do to the world to deserve it?!?!!? We thought Muslims were our friends

103

42

332

0

1

13

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@RangeSidewinder @Havoc_Six Finland joining NATO had pretty much sealed Russia's fate.

1

0

13

degenoah 🇨🇦🇺🇦

@degenoah

7 months

@Kaseylynae literally from state owned RT lmao

1

0

11

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@Getty776 you're telling us we need to mark vehicle losses as fortifications now?? god save me

0

1

12

degenoah 🇨🇦🇺🇦

@degenoah

2 months

@juntawflo @VoxArtificialis @XNewNorm @larryelder @RubinReport @AwakenWithJP @elonmusk you clearly have not seen the fanbase yet

2

0

18

degenoah 🇨🇦🇺🇦

@degenoah

5 months

it appears #Russia has begun a new campaign targeting Italian readers through their infamous #Doppelganger #disinformation campaign. @DisinfoLab

1

2

10

degenoah 🇨🇦🇺🇦

@degenoah

7 months

@KareemRifai @SpaghettiKozak assad literally attacked his own people with chemical weapons.. imagine supporting that kind of activity...

0

11

degenoah 🇨🇦🇺🇦

@degenoah

11 months

>both my husbands lolz

🐮🐝|Cowbee|🐝🐮 I 420 - 24/7 (Returns Sept. 2nd)

@Cowbellchaosvt

11 months

Jones and both my husbands are taking me on vacation to de-stress and decompress. Bye!!!

0

8

1

0

11

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@r_evolutie @cossackgundi joined twitter in march because he kept getting banned lmao

1

0

11

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@Gerashchenko_en @sadepiippu there's no way he wasn't the one who came up with that formula and that he wasn't on his 3rd bottle of vodka when doing so.

2

0

9

degenoah 🇨🇦🇺🇦

@degenoah

7 months

11 comments, lmao Yeah no my account got hacked i need a sugar daddy my metamask trust wallet got hacked i need someone to write my essay need a logo need a banner i am suspended from nft griffin metamask nft i need xbox 360 pls help my twitter account got banned my ps4 account

21

0

3

degenoah 🇨🇦🇺🇦

@degenoah

2 months

@UA_Nationall every time I see an orc's past social media posts I'm reminded of the time Simon Ostrovsky straight up doxed and tried to visit an orc just to prove that russian military personnel were operating in Donbas

Selfie Soldiers: Russia Checks in to Ukraine

As the conflict in Ukraine continues, so too does Russian President Vladimir Putin’s denial of any Russian involvement. But a recent report from think tank t...

www.youtube.com

1

0

9

degenoah 🇨🇦🇺🇦

@degenoah

7 months

Stage 2 domains I've seen: freexp3series[.]com arizztar[.]com sifinancialwealth[.]com beecontrolparadisevalleyaz[.]com The only stage 3 domain that seems to be actively used is at sdgqaef[.]site.

1

0

10

degenoah 🇨🇦🇺🇦

@degenoah

7 months

@wilplatypus @CIA Tor is linked because Russia has been trying to lock down their entire internet, and it's not so easy for censorship to take place with tor

2

0

7

degenoah 🇨🇦🇺🇦

@degenoah

5 months

If you haven't, go follow @giammaiot2 . His research is always fascinating and he regularly comes out with highly detailed threads that are definitely worth a read! Unfortunately he's been shadow banned as a result of botted reports, so he needs all the support right now!

GiamMa-based researchers SDR R&D IoT

@giammaiot2

5 months

@degenoah I have many things to say but it's a waste of time &lately this account is under a deep ban (due to accounts/bots that constantly report me),which I don't really care about, but it only indicates what has already been said in recent years,reiterated,repeated,verified,published...

1

0

2

3

1

8

degenoah 🇨🇦🇺🇦

@degenoah

4 months

Bear net activity on 5227 kHz CW has had a significant increase in messages. It's been roughly 3 hours since 6 Tu95MS bombers took off heading south from Olenya AE. #SIGINT #Russia #Ukraine

0

9

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@RepMTG you seem very very vocal on Ukraine and Ukraine specifically. makes me wonder as if you have far different intentions than "protecting the border".

0

1

9

degenoah 🇨🇦🇺🇦

@degenoah

3 months

@2ug2ug wtf why did you post my password!?

1

0

9

degenoah 🇨🇦🇺🇦

@degenoah

4 months

@GrandpaRoy2 @shrimpfella fella in disguise. igor is great

0

8

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@TobiAyodele @Maks_NAFO_FELLA 3 days guys

0

9

degenoah 🇨🇦🇺🇦

@degenoah

7 months

Yeah no my account got hacked i need a sugar daddy my metamask trust wallet got hacked i need someone to write my essay need a logo need a banner i am suspended from nft griffin metamask nft i need xbox 360 pls help my twitter account got banned my ps4 account

12

0

2

degenoah 🇨🇦🇺🇦

@degenoah

7 months

fellas pls share @CanadianKobzar @Maks_NAFO_FELLA @FreeUkraine91 @Reevesity @osint_69 @RockyFella666 @sternenko

2

1

9

degenoah 🇨🇦🇺🇦

@degenoah

7 months

Active disinformation redirects. sdgqaef[.]site/US-16-12-2_jpost sdgqaef[.]site/DE-29-01_spiegel sdgqaef[.]site/DE-30-01_tribunalukraine sdgqaef[.]site/UA-25-01_rbk sdgqaef[.]site/UA-25-01_rbk_-2

1

0

8

degenoah 🇨🇦🇺🇦

@degenoah

3 months

@emilkastehelmi @ResidBabovic taking a move out of the chinese playbook I see.

0

8

degenoah 🇨🇦🇺🇦

@degenoah

3 months

@ArmchairCopelrd @warrensbuffet2 since when did AWACS have combat capabilities?? 🤣

1

0

8

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@Shayan86 @golub wow, it's almost like ISIS, a group with Sunni values, doesn't like groups with Shia values!! 😱😱😱

1

0

7

degenoah 🇨🇦🇺🇦

@degenoah

7 months

@paytondev @luciascarlet isn't the windows calculator app open source? or am I misremembering

1

0

8

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@banderafella @SChiron58 inb4 putin starts getting 2nd chechen war flashbacks

0

8

degenoah 🇨🇦🇺🇦

@degenoah

6 months

@jdo0214 @JuliaPod_art @lMThomasWilson a "neo-nazi" battalion with a leader who has Israeli citizenship, makes sense.

1

0

8

degenoah 🇨🇦🇺🇦

@degenoah

2 months

@albafella1 where was this guy during brics games 2024?????

0

7

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@holy_hero @TheStudyofWar "The Czech government does not have teleportation abilities and must deliver the shells to you by hand. We sincerely apologize for the inconvenience."

0

8

degenoah 🇨🇦🇺🇦

@degenoah

3 months

@gettylegion

0

8

degenoah 🇨🇦🇺🇦

@degenoah

4 months

@peen420_ @sfjcody @svpino prompt injection never fails to amaze me

0

7

degenoah 🇨🇦🇺🇦

@degenoah

5 months

@Coloradosearch1 @SpeakerJohnson @HouseGOP Ukrainian families are far more in need of help than a middle class family whose problems boil down to minor inconveniences nobody else would even care about.

0

7

degenoah 🇨🇦🇺🇦

@degenoah

8 months

@Doktor_Klein wtf happened here?

1

0

5

degenoah 🇨🇦🇺🇦

@degenoah

2 months

@CanadianKobzar move to Calgary and make sure to always have a Ukrainian flag present. the local population will sort everything out naturally lol

0

7

degenoah 🇨🇦🇺🇦

@degenoah

2 months

@mandhistorian "keiv" is always a good one 🤣

1

0

6

degenoah 🇨🇦🇺🇦

@degenoah

4 months

@JanA55_D @char_krieger i don't see anything hateful in that statement?

0

7