Meta recently disclosed the disruption of three covert influence operations linked to Iran, China, and Romania during the first quarter of 2025, as outlined in its quarterly Adversarial Threat Report.<\/p>\n
The first operation involved a coordinated network comprising 658 Facebook accounts, 14 Pages, and two Instagram accounts targeting Romania. These accounts spanned multiple platforms, including Meta’s services as well as TikTok, X, and YouTube. One of the Pages had amassed around 18,300 followers before its removal.<\/p>\n
The individuals behind this operation utilized counterfeit accounts to manage Facebook Pages, redirect users to external websites, and engage in discussions on posts from political figures and news organizations. Posing as locals, these accounts disseminated content related to sports, travel, and local news.<\/p>\n
Despite receiving minimal engagement from genuine audiences, Meta noted that these deceptive personas created a presence across various platforms to enhance their credibility. The company emphasized the operational security measures employed to obscure the origins and coordination of the campaign, which included the use of proxy IP infrastructure. The pseudonymous actors predominantly communicated in Romanian, discussing news and current events, particularly focusing on elections in Romania.<\/p>\n
The second network disrupted by Meta originated in Iran and aimed at Azeri-speaking populations in Azerbaijan and Turkey across multiple platforms, including X and YouTube. This operation was comprised of 17 Facebook accounts, 22 Facebook Pages, and 21 Instagram accounts.<\/p>\n
These counterfeit accounts were deployed to post content, manage Groups and Pages, and comment on their own content, artificially inflating their engagement. Many of the accounts emulated female journalists and pro-Palestine activists and employed popular hashtags such as #palestine, #gaza, #starbucks, and #instagram to infiltrate ongoing public discussions.<\/p>\n
Content published by this group included discussions about the Paris Olympics, allegations of U.S. aggression, critiques of President Biden’s administration, and Israel’s military actions in Gaza. This operation has been attributed to the Storm-2035 threat activity cluster, previously identified by Microsoft as an Iranian initiative focused on U.S. voter manipulation through polarizing messaging.<\/p>\n
In recent months, OpenAI disclosed that it blocked ChatGPT accounts linked to Storm-2035 that were attempting to harness the chatbot for content generation intended for social media dissemination.<\/p>\n
Meta’s report also highlighted the removal of 157 Facebook accounts, 19 Pages, one Group, and 17 Instagram accounts associated with a campaign targeting audiences in Myanmar, Taiwan, and Japan. The perpetrators of this operation implemented AI technology to create profile images and establish an “account farm” for generating new fake accounts.<\/p>\n
This Chinese-origin operation consisted of three distinct clusters that reposted content in English, Burmese, Mandarin, and Japanese related to news and current events. In Myanmar, the accounts advocated for the cessation of conflict, criticized civil resistance movements, and expressed support for the military junta. In Japan, their posts criticized government actions and military affiliations with the U.S. Meanwhile, in Taiwan, the operation propagated claims of political and military corruption among local leaders, running Pages that supposedly showcased posts submitted anonymously to suggest a fa\u00e7ade of genuine discourse.<\/p>\n","protected":false},"excerpt":{"rendered":"
Meta recently disclosed the disruption of three covert influence operations linked to Iran, China, and Romania during the first quarter…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"Default","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[],"tags":[],"class_list":["post-1710","post","type-post","status-publish","format-standard","hentry"],"acf":[],"yoast_head":"\n