Facebook spotted four campaigns that appear independent, three of them associated with Russian threat actors.
One of the operations involved 18 Facebook accounts, nine pages, and three groups. Threat actors attempted to influence the sentiment of users in Ukraine regarding the relationship between the Russian and the Ukrainian governments.
The threat actors behind this campaign created fake profiles, impersonated deceased Ukrainian journalists, and engaged in fake engagement tactics. They also used a number of fake accounts to increase the popularity of their content and also to propose people content outside the social network.
Experts discovered that about 80,000 accounts followed one or more of these pages, and about 10 accounts joined at least one of these groups. According to Facebook, threat actors spent less than $100 on Facebook ads.
“We found four separate, unconnected operations that originated in Thailand, Russia, Ukraine and Honduras. We didn’t find any links between the campaigns we’ve removed, but all created networks of accounts to mislead others about who they were and what they were doing.” reads the report published by Facebook.
Facebook conducted an internal investigation into suspected Russia-linked coordinated inauthentic behavior, ahead of the elections in Ukraine.
Facebook also identified another campaign focused on Ukraine that involved 83 accounts, two Pages, 29 Groups, and five Instagram accounts engaged in coordinated inauthentic behavior that originated in Russia and the Luhansk region in Ukraine.
In this case, threat actors used fake accounts to impersonate military members in Ukraine and managed Groups posing as authentic military communities. Some of the Groups were used to disseminate content about Ukraine and the Luhansk region.
Content published by the operators includes topics like the military conflict in Eastern Ukraine, Ukrainian public figures and politics. Below some data related to this campaign:
A third campaign originating in Thailand focusing mainly on geopolitical issues appear to be the result of a Russian threat actor.
“We removed 12 Facebook accounts and 10 Facebook Pages for engaging in coordinated inauthentic behavior that originated in Thailand and focused primarily on Thailand and the US.” continues Facebook
“They also frequently shared divisive narratives and comments on topics including Thai politics, geopolitical issues like US-China relations, protests in Hong Kong, and criticism of democracy activists in Thailand. “
The activity was coordinated by threat actors in Thailand that is associated with a Moscow-based news outlet called New Eastern Outlook (https://journal-neo.org/), a Russian government-funded journal.
This operation was pushed with an investment in advertising on Facebook under $18,000:
Finally, Facebook removed 181 accounts and 1,488 Facebook Pages that were involved in domestic-focused coordinated inauthentic activity in Honduras. Operators aimed at increasing the president’s popularity by creating positive content about his political activity.
[adrotate banner=”9″] | [adrotate banner=”12″] |
(SecurityAffairs – Facebook, Ukraine)
[adrotate banner=”5″]
[adrotate banner=”13″]
CISA adds Cisco ASA and FTD and CrushFTP VFS vulnerabilities to its Known Exploited Vulnerabilities…
U.S. CISA added the Windows Print Spooler flaw CVE-2022-38028 to its Known Exploited Vulnerabilities catalog.…
The U.S. Department of Justice (DoJ) announced the arrest of two co-founders of a cryptocurrency mixer…
Google addressed a critical Chrome vulnerability, tracked as CVE-2024-4058, that resides in the ANGLE graphics…
Nation-state actor UAT4356 has been exploiting two zero-days in ASA and FTD firewalls since November…
A malware campaign has been exploiting the updating mechanism of the eScan antivirus to distribute…
This website uses cookies.