AMBA ransomware was here :)pic.twitter.com/ZY0HfO1ZfG
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
I only saw it on server with rdp and with backdoored website... So difficult to be sure but I would say 'via rdp'
Sounds very plausible, added to the ransomware overview. These ones are harder to track the origin from.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.