All users have the single purpose of promoting Santhosh Kumar / Btw Santhosh. Tol ( talk | contribs) @ 07:00, 30 July 2023 (UTC)
Users from this farm have been creating articles on a hacker Santhosh Kumar / Draft:Santhosh Kumar. Once that got protected, they seem to have now switched to trying their luck with Draft:Hacktivist Vanguard (Indian Hacktivist) / Draft:Hacktivist Vanguard (Indian Hacktivist Group) (and possibly others), apparently a group set up by the said Kumar. The first (that I'm aware of) was XPosBot, but they got blocked because of their username, and CONFLIXERS picked up the baton; I'm sure they're the same user, as their user pages are very similar, and the newer account was set up only two days after the older got blocked. But more to the point, I'm saying I think they're both Btw Santhosh.
BTW, three years ago Scounder also created Santhosh Kumar, although that's so long ago that I don't think it's part of this campaign. It is apparently part of the Srinesh.saravanan farm. I'm just mentioning here in case there's any connection, which I think unlikely.
Requesting CU to confirm, as the Hacktivist topic is a degree removed from Kumar, and also for a scan of others waiting in the wings. -- DoubleGrazing ( talk) 09:00, 14 January 2024 (UTC)
Pro forma, all Confirmed to each other ( Kurta ipasvc ( talk · contribs) was created directly by CONFLIXERS through Special:CreateAccount). Whoslivesmatterss ( talk · contribs) might be just Likely instead but I don't see the point in making the distinction. DatGuy Talk Contribs 14:37, 14 January 2024 (UTC)
Very similar user pages. I warned User:Santhosh Rajput about the misleading user page here. User:BOMBBITA has used a dragon gif at the bottom of their user page [1], which I believe no one else uses other than me. Requesting CU based on the behavioral evidence, as I remember seeing a very similar user page a couple of times recently. Jeraxmoira🐉 ( talk) 18:25, 19 January 2024 (UTC)
New account, whose first two edits had to do with this Hacktivist Vanguard thing, which is has seen a lot of socking from different farms, but most recently (AFAIK) from the Btw Santhosh one, so thought I'd flag this up here just in case. -- DoubleGrazing ( talk) 11:21, 8 February 2024 (UTC)
They look to me like sockpupets or meatpuppets associated with Hafzal Murbani. They may or may not also be Btw Santhosh, but either way I think a CU to compare them with one another, and to look for possible sleepers, would be welcome. JBW ( talk) 20:03, 11 February 2024 (UTC)
Block evasion. New SPA ShingaChu created 10 February. 15 minutes after creation, first edit was to add 13 copies of "group" press release, posted to 13 different junk sites, to Draft:Hacktivist Vanguard: [3]. This is the same press release used heavily in deleted Hacktivist Vanguard and Hacktivist Vanguard (Hacktivist Group), and added this time to a parallel draft Draft:Hacktivist Vanguard, created in September before the master was blocked and the articles were deleted following strong consensus at AFD. Following day, first made a few precocious edits to Mir Sarwar, all marked as minor Then rewrote Draft:Hacktivist Vanguard in a single edit: [4], created a second nearly identical draft at Draft:Hacktivist Vanguard (Hacker Group), both using image uploaded by Hafzal Murbani.
New SPA Hafzal Murbani, uploaded non-free logo File:Hacktivist Vanguard.jpg to Commons as "own work", with the same spammy description used in the original article and the two new drafts. This identical to the non-free logo uploaded to Commons three times by master, and deleted three times over licensing. Wikishovel ( talk) 16:23, 11 February 2024 (UTC)
An anon editor also worked extensively on Draft:Hacktivist Vanguard on 6 Feb, adding "This section will be updated periodically to reflect the group's evolving history and its impact on the cybersecurity landscape.", with no AfC template, essentially settling for a permanently parked draft to promote a one-person, zero-notability "hacker group". Wikishovel ( talk) 16:27, 11 February 2024 (UTC)
Adding two more socks, Manoj12Kumar11 and Prithivi Goswami, SPAs who created [5] and worked on [6] [7] Draft:Hacktivist Vanguard respectively. Wikishovel ( talk) 16:32, 11 February 2024 (UTC)
Just noticed that User:Hafzal Murbani was indeffed and globally locked for sockpuppetry at FOwiki by User:WikiBayer, and previously indeffed at HAwiki by User:Gwanki. Wikishovel ( talk) 17:35, 11 February 2024 (UTC)
other socks
We have a brand new SPA creating yet another version of Draft:Hacktivist Vanguard. I believe this topic has been attempted by at least Btw Santhosh's farm as well as Pplkhhb's, but I had to pick one so went with Btw S. DoubleGrazing ( talk) 18:15, 22 March 2024 (UTC)
Block evasion: new SPA Techrd2000cork created 15 April. An hour later, recreated Draft:Hacktivist Vanguard at Draft:Team Hacktivist Vanguard. Wikishovel ( talk) 16:10, 15 April 2024 (UTC)
New SPA Brosscreater, created 16 April. Games autoconfirm, then recreates Rachana Shah, G5'd a day earlier. Requesting checkuser. Wikishovel ( talk) 15:42, 20 April 2024 (UTC)
Please see my comments at User talk:Bbb23#Rachana Shah.-- Bbb23 ( talk) 15:45, 20 April 2024 (UTC)
Right after deletion that I nominated, its being created again so I just think this user is sock or employed by same person. HarryD ( talk) 08:44, 21 April 2024 (UTC)
Obvious block evasion. New SPA HacktivistWasHere created 7 April. A minute after creation, first two edits were poorly sourced puffery about Hacktivist Vanguard at IIT Bombay: [8], [9]. Third edit just now was, as usual, to add Hacktivist Vanguard to List of hacker groups, with the usual rock-bottom blog sources: [10]. Checkuser might be a good idea at this point. Wikishovel ( talk) 15:47, 2 May 2024 (UTC)
All users have the single purpose of promoting Santhosh Kumar / Btw Santhosh. Tol ( talk | contribs) @ 07:00, 30 July 2023 (UTC)
Users from this farm have been creating articles on a hacker Santhosh Kumar / Draft:Santhosh Kumar. Once that got protected, they seem to have now switched to trying their luck with Draft:Hacktivist Vanguard (Indian Hacktivist) / Draft:Hacktivist Vanguard (Indian Hacktivist Group) (and possibly others), apparently a group set up by the said Kumar. The first (that I'm aware of) was XPosBot, but they got blocked because of their username, and CONFLIXERS picked up the baton; I'm sure they're the same user, as their user pages are very similar, and the newer account was set up only two days after the older got blocked. But more to the point, I'm saying I think they're both Btw Santhosh.
BTW, three years ago Scounder also created Santhosh Kumar, although that's so long ago that I don't think it's part of this campaign. It is apparently part of the Srinesh.saravanan farm. I'm just mentioning here in case there's any connection, which I think unlikely.
Requesting CU to confirm, as the Hacktivist topic is a degree removed from Kumar, and also for a scan of others waiting in the wings. -- DoubleGrazing ( talk) 09:00, 14 January 2024 (UTC)
Pro forma, all Confirmed to each other ( Kurta ipasvc ( talk · contribs) was created directly by CONFLIXERS through Special:CreateAccount). Whoslivesmatterss ( talk · contribs) might be just Likely instead but I don't see the point in making the distinction. DatGuy Talk Contribs 14:37, 14 January 2024 (UTC)
Very similar user pages. I warned User:Santhosh Rajput about the misleading user page here. User:BOMBBITA has used a dragon gif at the bottom of their user page [1], which I believe no one else uses other than me. Requesting CU based on the behavioral evidence, as I remember seeing a very similar user page a couple of times recently. Jeraxmoira🐉 ( talk) 18:25, 19 January 2024 (UTC)
New account, whose first two edits had to do with this Hacktivist Vanguard thing, which is has seen a lot of socking from different farms, but most recently (AFAIK) from the Btw Santhosh one, so thought I'd flag this up here just in case. -- DoubleGrazing ( talk) 11:21, 8 February 2024 (UTC)
They look to me like sockpupets or meatpuppets associated with Hafzal Murbani. They may or may not also be Btw Santhosh, but either way I think a CU to compare them with one another, and to look for possible sleepers, would be welcome. JBW ( talk) 20:03, 11 February 2024 (UTC)
Block evasion. New SPA ShingaChu created 10 February. 15 minutes after creation, first edit was to add 13 copies of "group" press release, posted to 13 different junk sites, to Draft:Hacktivist Vanguard: [3]. This is the same press release used heavily in deleted Hacktivist Vanguard and Hacktivist Vanguard (Hacktivist Group), and added this time to a parallel draft Draft:Hacktivist Vanguard, created in September before the master was blocked and the articles were deleted following strong consensus at AFD. Following day, first made a few precocious edits to Mir Sarwar, all marked as minor Then rewrote Draft:Hacktivist Vanguard in a single edit: [4], created a second nearly identical draft at Draft:Hacktivist Vanguard (Hacker Group), both using image uploaded by Hafzal Murbani.
New SPA Hafzal Murbani, uploaded non-free logo File:Hacktivist Vanguard.jpg to Commons as "own work", with the same spammy description used in the original article and the two new drafts. This identical to the non-free logo uploaded to Commons three times by master, and deleted three times over licensing. Wikishovel ( talk) 16:23, 11 February 2024 (UTC)
An anon editor also worked extensively on Draft:Hacktivist Vanguard on 6 Feb, adding "This section will be updated periodically to reflect the group's evolving history and its impact on the cybersecurity landscape.", with no AfC template, essentially settling for a permanently parked draft to promote a one-person, zero-notability "hacker group". Wikishovel ( talk) 16:27, 11 February 2024 (UTC)
Adding two more socks, Manoj12Kumar11 and Prithivi Goswami, SPAs who created [5] and worked on [6] [7] Draft:Hacktivist Vanguard respectively. Wikishovel ( talk) 16:32, 11 February 2024 (UTC)
Just noticed that User:Hafzal Murbani was indeffed and globally locked for sockpuppetry at FOwiki by User:WikiBayer, and previously indeffed at HAwiki by User:Gwanki. Wikishovel ( talk) 17:35, 11 February 2024 (UTC)
other socks
We have a brand new SPA creating yet another version of Draft:Hacktivist Vanguard. I believe this topic has been attempted by at least Btw Santhosh's farm as well as Pplkhhb's, but I had to pick one so went with Btw S. DoubleGrazing ( talk) 18:15, 22 March 2024 (UTC)
Block evasion: new SPA Techrd2000cork created 15 April. An hour later, recreated Draft:Hacktivist Vanguard at Draft:Team Hacktivist Vanguard. Wikishovel ( talk) 16:10, 15 April 2024 (UTC)
New SPA Brosscreater, created 16 April. Games autoconfirm, then recreates Rachana Shah, G5'd a day earlier. Requesting checkuser. Wikishovel ( talk) 15:42, 20 April 2024 (UTC)
Please see my comments at User talk:Bbb23#Rachana Shah.-- Bbb23 ( talk) 15:45, 20 April 2024 (UTC)
Right after deletion that I nominated, its being created again so I just think this user is sock or employed by same person. HarryD ( talk) 08:44, 21 April 2024 (UTC)
Obvious block evasion. New SPA HacktivistWasHere created 7 April. A minute after creation, first two edits were poorly sourced puffery about Hacktivist Vanguard at IIT Bombay: [8], [9]. Third edit just now was, as usual, to add Hacktivist Vanguard to List of hacker groups, with the usual rock-bottom blog sources: [10]. Checkuser might be a good idea at this point. Wikishovel ( talk) 15:47, 2 May 2024 (UTC)