Also these botnets fit with demographic/statistocal data of the area -- 500 Syrian refugees move to the city, so maybe 50 bots switch on and start tweeting in Syrian and acting suspicious.

Ocassionally, old people bots go inactive for a while or forever, another bot may say RIP etc.

Sometimes groups of Chinese/Russian/Downs Syndrome bots "move" from one place to another for no obvious reason, usually in groups of 3, evenly spaced, maintaining radio silence - mostly. One guy tweets "I love you" to his gf in cell 4 from a phone in transit -- and is never heard from again. His gf says "lol dumbass" immediately. One guy asks for the dude's copy of Battletoads etc

Huge spikes of encrypted data flies back and forth at random times, especially following certain event and on certain dates ---- with plaintext that appears to be ~90% of a nested cipher, followed by a random binary number, which others reply to with "yes," "no," "Old school Vaporslave Trashcore, duh! As a deaf person, causing discomfort to others through music is a spiritually rich experience "

Followed by "shit sorry wrong account"

This event triggered by "%n year old girl found murdered in woods in %city" news story posted to bot-run fake news site.

Other similar calls originate from other sites and their purpose is to add verisimilitude and also accidental geotagged photos of dead drops which are in fact loaded with glitterbombs and a Nic Cage style pic of Snowden

The endgame is to provoke deployment of military personell on the same day a genuine security threat is arrested on the other side of country (or something equally badass)