Macro Evolution – From Manual Posts to Automation




Summary

The macro-based information manipulation campaign on DCInside’s U.S. Politics Gallery appears to have started around July 2023. In its early stages, the operation relied heavily on manual spam and provocation tactics, with key characteristics such as:


Graphic and offensive image spam: Including gore, feces-related content, and sexual or insect-themed shock images


Deliberate disruption of discussion flow and psychological targeting to drive users away


Derogatory nickname framing: Examples include “윤두창” (Yoon-douchang), “윤건희” (Yoon-Geoni), “썩은 동아줄” (rotten lifeline), etc.


However, since February to March 2024, these operations began evolving into a semi-automated, then fully automated structure.



Evolution Timeline


1. Manual Spam Phase (Jul 2023 ~ Jan 2024)


- Image-based trolling (gore, adult content, etc.)


- Irregular posting times, inconsistent message content


-B Emotion-driven, low-volume disruption


2. Semi-Automated Phase (Feb 2024 ~ May 2024)


- Repetitive titles and post structures


- Fixed political keywords and target names


- Consistent posting times (e.g., concentrated around 10AM, 12PM)


- Framing patterns from specific IPs and nicknames


3. Fully Automated Phase (Jun 2024 ~ Present)



- Hundreds of identical posts daily


- dentical file names repeatedly verified through archives


- Fixed psychological warfare keywords ("Insurrection dog", "두1창", "윤건희", "psychopath", etc.)


- Baiting reactions from users → Follow-up attacks targeting reactors


- IP cloning tactics to impersonate or entrap real users



 Persistence of Manual Attacks



Despite automation, manual tactics like gore/feces image spam are still in use, often deployed alongside macros to induce shock and anger.


This hybrid approach amplifies both emotional disruption and automated narrative control.





Conc.



The progression from manual posts to automated flooding clearly indicates a coordinated and systematic campaign rather than random trolling.


Time-patterned posts, reused file structures, IP cycling, and user reaction targeting all strongly suggest the use of scripts or automation tools.




update will follow soon