Day 1 Bust | Massive Botnet Detected | Voting Bot Abuse | $32,000 Pending rewards

in Mosquito Squishers3 years ago (edited)

Hello all. So, I would not be creating an introductory post for this account. Instead, I'll get right to business.

image.png

On my research yesterday, I stumbled upon something weird. After a ton of digging into a user, I found evidence of plagiarism. However, this opened up the rabbit hole to something much bigger. So, strap on and let me take you through this entire network.

Say hello to the steemit user goodreader. I will not be tagging the users here, I will be posting a link to the plagiarized article though.

Plagiarized articleOriginal sourceProfessor
goodreaderhttps://steemit.com/hive-150232/@goodreader/20210417dianhttps://messari.io/asset/saffron/profile
goodreaderhttps://steemit.com/hive-150232/@goodreader/20210418tuiOriginal

image.png
Here is the Proof for first one

image.png
Here is the proof for the second one.

The article on the left seems to be using some rephrasing tool to not make it seem too obvious and make it impossible to be detected using a plagiarism tool.

This post has a big upvote thanks to the user buying votes from tipu. So, I decided to go and check his wallet transfer details to see how much it cost me.

Surprise!

There was no transfer made to @tipu. Since massive upvotes from tipu can only be bought, I started to dig a little deeper. Using an automation console app that I created to find the history of transfers received by @tipu, I came across the account hnt.

image.png
HNT's account page

Looking at the wallet history of this user, you will find that he buys upvotes, not just for himself but also for other accounts. If you look at the transfer history of this account here https://steemitwallet.com/@hnt/transfers, you will know what I mean.

image.png
HNT's vote buying activity | src

Now, to give hnt the benefit of the doubt I put my detective cap on and thought to myself, what could be the reason behind one user buying votes for someone else?

1- Family/Friends account for initial growth.
2- The user won some competitions hosted by hnt and the reward was a fat upvote.

image.png
100% back to hnt
Here is the next thing that I found on the accounts whose upvotes were being paid for by hnt. Yes! you saw that right! 100% benefactor rewards back to hnt. This is not the case with just 1 or 2 accounts. In fact, an entire community whose rewards are being funneled back into hnt's account.

So the community whose users are created just to bring back profit to hnt is https://steemit.com/trending/hive-150232
Currently, this has a pending reward of over $32,000!! Yes! you read that right! Over the next 7 days, $32,000 worth of rewards is set to be leached out of our blockchain if we don't do anything about it.

image.png
Here you can see another user with benefactor rewards routing back to hnt | Also the massive $32,000 pending payout

Most of the accounts that can be found on the trending page are brand new with just a single post with a fat upvote. Apart from the voting bots such as @tipu and @nutbox.mine being abused, this user is also abusing @justyy's delegation voting service.

image.png
Here is an example of a post where justyy upvote algorithm cast the vote because the user has delegated to @justyy | SRC

So, I would request @justyy to use caution while voting for a post from the AMAZE CREATOR UNION community.

How am I sure that this whole thing is a botnet?

So, one of the main uses of bots is to help do repetitive tasks faster. This is exactly what the posts within Amaze creator union show. Most of the posts here contain titles that are very generic, the format of the articles are very similar and best of all, they all provide links to the previous articles published by the user.

When a new user account is used to post an ad, they would not have any previous posts(Obviously!). However, the "Bot" still uses a template with an empty list of user's past articles.

image.png
An article of a user who has posted previously | SRC

image.png
An article of a user who is posting for the first time | SRC

From the above screenshots, it's evident that both these posts were created/formatted by the same user of the same bot.

So far we have seen hnt buying upvotes for all the members of this community. So, this must be the main account behind the entire operation, right? Nope.

image.png
Steem withdrawal to huobi (Probably for liquidation)
The brains behind this seem to be https://steemitwallet.com/@alanyao/transfers this account right here. hnt funnels all the rewards from the whole of Amaze Creator Community and sends it to alanyao who then seems to send it out to his huobi account.

image.png

Another weird thing I noticed is that hnt's pending rewards are $0 even though he has several high payout posts. On looking closer into this account, I found out that this user has set himself as the benefactor as well. This is currently not possible while using the steemit UI. However, it is most likely possible to do this if a bot directly uses the comment API to create a new post.

image.png
Here you can see the benefactor rewards set to himself. Normally, we don't see this if the author sets to receive a 100% author reward

I would request everyone in this community to have a look at this possible botnet leaching the rewards.

CC:
@steemcurator01 @endingplagiarism @sapwood @kiwi-crypto @steemitblog @justyy @steemchiller
@tatjanastan @steemcurator02

Sort:  

That's a great investigation. Many things are coming out. I don't what will come out in future. If everyone work together this platform will be pollution free one day. I'm also working on the same path.

 3 years ago 

Amazing work!

Let's wait for the reaction of those who manage the things on Steemit...

This is good Detective work, great done 👍

Thank you @xpilar. Can we somehow help in stopping this?

Yes, there will be an opportunity later when @steem-supporter finishes new steem-auto and we can join a downvote trail
@steem-supporter builds it from scratch and it can take time before it is completely ready for use

Sounds great! Can't wait for the rollout of that feature. If @steem-supporter needs any help in developing this feature, he can reach out to me as well. I'll be happy to assist him.

What can we the users do to prevent things like this from happening in the future?

Follow our downvote trail(Once it's out) and do not indulge in plagiarism!! No translations, no copy-paste! Ever!

keep up the good work :)

About my case: Yes @endingplagiarism I have been using pictures that aren't mine. But please I want to explain: I'm a photographer But in my country Venezuela it's very difficult to people respect and less pay for our craft, specially since the pandemic, I register on steemit on 2018 but I started to used on February / March of this year. And not only find a place where to work safely also bring together my family, we all are struggling my incomes on Steem decrease after Bitcoin drops and I didn't understand much about criptocurrencies, last night my uncle lost his bsttle against covid after a lot of time fighting. On this moment of stress and chaos in the world I can't take take any risk of get out and take pictures. So when Mr @axeman approached me I was destroyed and really stress about my personal situation and didn't act like a mature adult person. I was reckless and my responses weren't kind and I'm so sorry for that. I tried to write him but he muted me and also made me mute of of @Model-Agency and @steembangladesh wich is a shame and painful but I deserve it. I don't have the resources to create the spectacular pictures and paintings the usual winner can. So I try to put up my game. At the end.. It was neccesary for me to go through all this shame, all this pain? Maybe yes, in order to learn. So since here I'm trying to be the biggest person acknowledging my limitations and asking forgiveness for my transgressions. Since the bottom of my broken heart. I already finish the third achievement and I'm working on second a four achievement 🙏. I lie and I'm sorry.

Coin Marketplace

STEEM 0.28
TRX 0.11
JST 0.031
BTC 68609.44
ETH 3824.89
USDT 1.00
SBD 3.63