I was going through my latest ‘followers’ and this popped up :

Hackers embed attack in Twitter profile image

I assume it was in one of the Britney type I blocked but what disturbs me is that a) it ever got through and b) it’s flagged at a known attack

If one got through you can be very sure that hundreds or probably thousands more bot accounts are similarly affected.

If you want an in depth look at this form of attack watch with 40 minute video DefCon 15 – T312 – The Executable image Exploit

You can read of the older GDI hack on this Cisco page : Microsoft GDI+ GIF Image Parsing Memory Corruption Vulnerability

There are other similar exploits and hacks. Scary eh. What’s irritating the heck out of me is Twitter let this through!

For some time, the follower and following counts we display have been incorrect for some folks. We’re soon to push a change that will address this issue. This means that the count you see in your sidebar should match what you see on your follower and following pages.

However, a consequence of this change is that follower counts will drop for some people. In particular, those with large followings may see significant changes as we correct for spam accounts and data inconsistencies. No legitimate followings should be affected—we’re just cleaning up artifacts in the system.

@Mashable took at look at this here too: Twitter Correcting Follower Counts: 1000s of Spammers Perish. Pretty much he repeats Twitters own message, as above. What’s of more interest on his blog entry are all the replies – over 500 when I looked, including my own, copied below:

I have three accounts, one for close friends, a main bulk one and a new one I’ve been specifally adding spammers too…

My friends one… No losses at all

On my Whale account… I lost 370 bots out of over 10,000
(For this one I but lost few if any ‘following’ – I vet everyone I add, yes all!)

However, for my “spam” account* which I just started to look for bots – it went UP 400 for ‘friend’ and UP 700 for following (even after the purge)
*(This is largely manual but automated overnight to overnight)

Seems to me the bots are winning !

*(while no doubt ignoring the untold millions of spammers!)

OYE! @Twitter, what you playing at at all – so far at least two of my friends have been suspended now! Give us back @trinawright !

rt @AndrewTF @piginthepoke There are a few accounts that are being suspended, including the social networking correspondant for the Times!!

OYE! @Twitter. Why have you gone and suspended @shandreen Give her back to us!

Accounts gone include:

@() @milliontwits Hi @trinawright here nicked daughters acc as they’ve suspended me as well, whats happening?

…
(new account)
@TrinaLWright Right am logging off for a mo as v pissed off to see 2 porn bots following whilst my real account is suspended.. Facebook here I come!

Yes – in the few minutes after she created a new account a new account she acquired two p0rn spammers, including the ever present ‘Sexy ABEGALE’

(@Trinawright’s is back now) (20.45pm)

[@pembsdave] RT @Ladybug8321: Hi Dave my original a/c (ladybug8320)has been suspended, will you plse add me and RT. Thank you

… They deleted the new one too. She is fuming!

[@pembsdave] RT @MontyStillRules: @PembsDave Original account @MontyRules, now @MontyStillRules Please RT Dave

@Treagus@milliontwits oh I see! I wondered whether it was connected. @johnweston said it takes up to 30 days to investigate!

mummbles01 …@shandreen is back as @Applecored temporarily

… @Shandreen (is back now too)

@paul_steele @milliontwits hi can we add @gibbzer ? seems these people are getting jailed for 30 days?

@pennynash @milliontwits @beachhut81 has been suspended too. I’m reading tweets and telling her via fb.!

@agnieszkasshoes @milliontwits @violamaths suspended as well & has filed a request

(Soon after)
@violetmaths Wow, SURREAL evening. Getting suspended, now back. Really is time for supper methinks.

@ ViolaMaths @milliontwits Thanks 4 your tweets on the #twitterfail business. They’ve now restored me. Phew!! Checking out some of the others.

@Treagus @milliontwits that I know of so far @girl_foo and @johnweston
…

@Nuff55 @milliontwits: RT @weeelady Twitter is restoring accidentally suspended accounts tinyurl.com/qvbfte … Actually that was a week ago :S

Sun 5th July 2009
Restoring accidentally suspended accounts 1 week ago
Earlier today, we accidentally suspended a number of accounts.

We regret the human error that led to these mistaken suspensions and we are working to restore the affected accounts—we expect this to be completed in the next several hours.

One additional note: some the accounts suspended were using the third-party site Tweetlater. However, Tweetlater is not to blame for these suspensions nor is it in violation of our Terms.

@paul_steele @milliontwits Hey @felicityfuller came back from suspension, maybe she knows some more info?

@paul_steele hiya they said that “It looks like you got caught up in some sort of spam cloud (through no fault of your own)” @milliontwits

Anyone else noticed that Twitter has revised follower/following for browsers ? Still no ‘report spam’ button *POKE* but it’s a start.

I particularly like that Twitter offer the expanded / contracted list. Nice touch. You can see the last post as a glance, see the sort of thing they are Tweeting and act, if necessary. OK, nothing amazing, but for sorting your lists, helpful.

Twitter follower update expanded

HOWEVER:
I am REALLY, REALLY miffed that they removed the Bio information supplied when you hover the mouse over a persons name. Now, when you do that, it just gives their name…
I ALREADY KNOW WHAT THE NAME IS, I JUST MOVED MY PIGGING MOUSE OVER IT!!!

That information helps us easily decide whether we want to follow or remove a person – or look at at their profile and timeline in more detail. In removing this information Twitter have further alienated genuine users, again, favouring the Spammers!

Twitter browser update - stating the obvious

Also, why have they moved the ‘direct message’ links to the drop down menu and not replaced it with anything to see if your followers have recipricated? Before I could see at a glance how many followed me back!

Why should this matter, you may ask. If you don’t already know, Twitter set a limit of 2,000 followers. After this point, they enforce a 1.1 follower ratio. Unless you are some ‘celebrity’ that racks up a one way following, you are screwed. The only way to get more following you is to keep it balanced. For instance, if you are following 4,440 and only have 4,000 following you, you cannot add anyone. The only way to sort that is to remove anyone that hasn’t followed you back. Now – thanks to this new change – the only practical way to do this is to trust third party applications.

SO, Twitter, I have this to ask you. Why do all the changes appear to favour spammers, penalise regular users (someone mention #twitterjail?) and actively drive users into the hands of third party developers – a majority of whom, it has to be pointed out, are snake oil merchants, outright scams and even phishing sites.

WHY Twitter, would you push users this way?

How the updated browser looks when unprotected

How the updated browser looks when protected. Note the remove option

No, really, have to shout at them. I have no tolerance for stupid stuff like this. Twitter has hundreds of programmers and technical staff, tens of millions of dollars in Venture Capital sitting in the bank. And they can’t even design a simple interface. Even with the api limits people are moving to the likes of TweetDeck by the million because Twitter clearly haven’t a ruddy clue how to do it! Not only that – that are copying the ideas that others have – only badly. Can’t they think for themselves?

Twitter update vs Tweetdeck

Hint: Note the lack of a ‘report spam’ button that Tweetdeck was rightly praised for when they added it. AGAIN, I am forced to ask why Twitter themselves are reticent to do this. What’s in it for them that they seem to want the millinos of spammers flooding in. Ah, perhaps there we have it. The more accounts they can claim, the greater the hype and greater their preceived value, should they sell up. Cynical? Of course, but this is the stuff conspiracy theories are made from, hmmm. Naturally I am not accusing Twitter of this, merely pointing out that, to some, this is how it looks. *cough*

If they could just include the followering/follower count I’m sure it would reduce Spam further. Apart from those autofollowing back (a crazy practice), who really want to follow someone that’s just added 1,000 names and got 3 back. For all the genuine businesses obsessing over getting your follower count up, I offer you this thought:
If you have 20,000 followers and only a few actually see your posts, what value have they?

@Twitter really do need to get on with adding a simple ‘report & block & remove spammer’ action button

Twitter follower update contracted

Twitter following update expanded

Twitter following - contracted

Initial Stats (rounded):

• 80% failed to provide a homepage URL
• 75% of users have not entered a bio in their profile
• 69% have not specified a location
• 55% are not following anyone
• 54% have never tweeted
• 53% have no followers

Personally I am very reluctant to follow anyone without a profile.

I also work on the principal that 95% of all accounts are in the hands of spammers and self-interested affiliate marketers etc aggressively pushing one way links. As such I also don’t automatically believe or trust any profile unless everything else bears out.

However you look at it, half the population of Twitter is dormant and most of the other half is spam!

Hubspot are more forgiving and use the following criteria to assume only 9% is dormant:

• Fewer than 10 followers AND
• Fewer than 10 friends AND
• Fewer than 10 updates

Reversing the first set of figures, we get:

• 24% of users have a bio in their profile
• 31% of users have a location in their profile
• 20% of users have a homepage URL in their profile

The document also give graphs for things like distribution by tweets by hour – but neglects to give the timezone basis, rather a critical omisssion, really. It does however show that tweeters are most prolific on a thursday.

However: the report glosses over a few home truths, namely:

Of the measly quarter that bother with a profile many will either lie (especially the spammers) or simply put whatever comes to mind in, making any demographic data unreliable beyond a vague guide.

Of the third that enter a location many will either lie (again, usually spammers) or be obscure. So we have Americans claiming to live in London, England and Londoners living in places like ‘Neverneverland’ and ‘Twitterverse

And the rest? A huge percentage of the ‘homepages’ I see tend to be affiliate link. Meh!

Jaded? Cynical? Maybe so, but it doesn’t mean I’m entirely wrong!

One figure we don’t have if that number of accounts – the percentage of accounts that are banned.

Compare these 2009 figures for Twitterholic on Twitter

• 1st Mar 281,904
• 2nd Apr 628,349
• 1st May 990,563
• 1st Jun 1,257,912
• 26th Jun 1,575,535

As show below in the Twittercounter graph below, @twitter’s account has grown by over a million in a few short months:

Twitter counters stats for Twitter June 2009

I have doubts about the accuracy of the following two graphs from Twitteranalyzer, other than them backing up the feeling that the continued exponential growth is not with active users. I could be wrong, and again am deeply cynical, but I suspect a vast number of accounts are actually dormant ones prepared by spammers for ongoing campaigns. In the same way email has been over-run they are laying down literally millions of accounts and bringing them into action as others are blocked.

Twitters followers broken down by join date

Below we can see that a massive 92% of followers, new accounts, have less that 20 followers.

Graph of @twitter's followers showing their own follower base

There are a number of names this person currently uses – like ‘johngoogle’ ‘jamessunny’ ‘tomesomencoo’ ‘WoukHerman’ and ‘WottonHenry’ among countless others and gibberish names. From the links, the spammers real name may be Lee Caine, or maybe Caine Lee.

The profile image is randomly generated and can be anything from young women bathing to old men fishing, as seen below:

Spam Twittertraffic- Scammer affiliate johngoogle

So far all the ones I’ve seen have a bio reading:

Bio I’m an ordinary people who are using twitter. I’d like to collect useful twitter tips and categorise them properly .
(clearly English isn’t his 1st language!)
and point to
Web (http…) twitterfan.info

All his posts obviously being affiliate links.

The content on the twitterinfo site is probably copied (stolen) and, bizarrely half of it seen to be hypocritically slagging off (and at the same time promoting) The Twitter Traffic Machine and Tweetlater. The entire point of this site – and the relentless spam it to push people towards clicking on the adverts at the top of the page – including…

Yes, you guessed it: “http… twitter traffic machine com/?hop=cainelee”

affiliate site for twitter traffic

You might also note the date, underlined. This site was probably thrown together specifically for this batch of Twitter account – and they are batches, presumably in lots of a hundred.

By his own words, and I quote: “All lies. All a con. All a scam.” Which gives you an insight into the type of parasite he is as he has rotating banner going to them* so he can get commission on sales! *(Amongst four others, most of whom I also have blocked at the router)

The image below, taken from the site, cynically decries the evil of this pernicious scam – while his affiliate banner advert say how wonderful it is!

spammers affiliate site for twittertraffic

Others I have blocked include the following .com’s:

turbo cash generator
the – cb – code
the 7 figure net worker

Hardly the first and certainly won’t be the last and Twitters solution is to warn people in a blog:
“No matter how good that ‘best video’ looks, don’t go to any just.ru domains. We’re aware of the situation and are working on it”

Actually – YOU MORONS TWITTER – what is wrong with announcing the warning on logout and sending out timed warning from @twitter and @spam. The criminals pushed this cr*p on YOUR system have no problem opening hundreds of accounts and having bots send out the dodgy links 24/7

Actually, I – WE – know why know why you keep quiet – embarrassment. Really, firmly starting to believe the management and directors at Twitter are incompetent to the point of criminal negligence.

Anyway, the article goes on to add that the attack indicates a larger trend of cybercriminals actively exploiting Twitter for profit.
(No sh*t Sherlock)

“This attack is very significant. It would seem that at least one criminal group is now exploring the distribution of for-profit on Twitter. If the trends we’ve seen on other social platforms are any indicator for Twitter, then we can only expect an increase in the attacks,” said researchers on the Viruslist.com blog.

A worm that resurfaced last week, luring users with the subject line “OMG I just got over 1000 followers today from http://twittercut.com” The link took users to a fraudulent site requesting Twitter login names and passwords. A tweet was sent to the user’s followers, which subsequently replicated the worm.
Have to add, after a week or two of looking and experiementing I neither need, use nor trust sites that promise followers like this.

The article ominously (for Twitter) goes on to add that Twitter is suffering from numerous retention problems. According to a Harvard Business School study, 10 percent of Twitter users account for more than 90 percent of the posted messages. (Safe bet those 10% are affiliate type spammers!).

Last month, a study revealed that 60 percent of new Twitter tweeters abandon their Twitter.com memberships after only one month. (I wonder why…)

ON A SIMILAR VEIN

Foxnews reports that Flood of Twitter Spam Has Only Just Begun.
Great, like it’s not overwhelming already. But, as I’ve said several times and continue to reiternate: Twitter themselves are entirely to blame. They are the cause and ignore the solution! As the article points out:

Twitter’s own half-hearted attempt to control the spam has had little effect.