An anonymous reader writes: Somebody created a botnet of three million Twitter accounts in one single day, and Twitter staff didn’t even flinch — even if the huge 35.4 registrations/second should have caught the eye of any IT staffer. Another weird particularity is that the botnet was also synchronized to use Twitter usernames similar to Twitter IDs. Couple this with a gap of 168 million IDs before and after the botnet’s creation, it appears that someone specifically reserved those IDs. The IDs were reserved in October 2013, but the botnet was registered in April 2014 (except 2 accounts registered in March 2014). It’s like Twitter’s registration process skipped 168 million IDs, and someone came back a few months later and used them. [Softpedia reports:] “The botnet can be found at @sfa_200xxxxxxx, where xxxxxxx is a number that increments from 0 000 000 to 2 999 999. All accounts have a similar structure. They have “name” instead of the Twitter profile handle, display the same registration date, and feature the text “some kinda description” in the profile bio field. Additionally, there are also two smaller botnets available as well. One can be found between @cas_2050000000 and @cas_2050099999. Sadbottrue says it was registered between March 3 and March 5, 2015. The second is between @wt_2050100000 and @wt_2050199999, and was registered between October 23 and November 22, 2014.” Both have 100,000 accounts each. Theoretically, these types of botnets can be used for malware C and C servers, Twitter spam, or to sell fake Twitter followers. At 3 million bots, the botnet accounts for 1% of Twitter’s monthly active users.

Read more of this story at Slashdot.

Source: Slashdot – 3 Million Strong Botnet Grows Right Under Twitter’s Nose