Social Networks

Facebook dismantled influence campaigns focused on Middle East and Northern Africa

Facebook announced it dismantled covert influence campaigns in some countries in the Middle East and Northern Africa, including one tied to the Saudi government.

Facebook uncovered two separate influence campaigns, one originated in the United Arab Emirates and Egypt, and another in Saudi Arabia.

The campaigns appeared to be distinct and involved “coordinated inauthentic behavior” on Facebook and its Instagram.

“This week, we removed multiple Pages, Groups and accounts that were involved in coordinated inauthentic behavior on Facebook and Instagram. We found two separate operations: one of which originated in United Arab Emirates and Egypt, and another in Saudi Arabia.” reads the post published by Facebook.

One of the influence campaigns was conducted by individuals linked to the government of Saudi Arabia. Threat actors used a network of fake accounts and pages on Facebook to promote state propaganda.

The company announced to have removed 217 Facebook accounts, 144 Facebook Pages, five Facebook Groups and 31 Instagram accounts that were involved in the campaign. The inauthentic behavior was originating from Saudi Arabia and focused primarily on the Middle East and Northern Africa, including Qatar, Saudi Arabia, UAE, Bahrain, Egypt, Morocco, Palestine, Lebanon and Jordan.

Operators behind this campaign posed as locals in targeted countries, they disseminated their content through a network of fake accounts and pages created by fictitious personas.

Facebook observed that the content posted by the threat actors aimed at express criticism of neighboring countries including Iran, Qatar and Turkey. They also called into question the credibility of Al-Jazeera news network and Amnesty International.

Facebook has no doubts, the campaign was orchestrated by individuals associated with the government of Saudi Arabia.

“Although the people behind this activity attempted to conceal their identities, our review found links to individuals associated with the government of Saudi Arabia.” continues the post.

Below the findings shared by the social network about this influence campaign.

  • Presence on Facebook and Instagram: 217 Facebook accounts, 144 Facebook Pages, 5 Facebook Groups and 31 Instagram accounts.
  • Followers: About 1.4 million accounts followed one or more of these Pages, about 26,000 accounts joined at least one of these Groups, and around 145,000 people followed one or more of these Instagram accounts.
  • Advertising: Around $108,000 spent on Facebook and Instagram ads paid for in Saudi riyal and US dollars.

The second influence campaign seems to be carried out by individuals from Egypt and the United Arab Emirates, and focused on countries in the Middle East as well as in northern and eastern Africa, including Libya,Sudan, Comoros, Qatar, Turkey, Lebanon, Syria, Jordan and Morocco.

Facebook removed 259 Facebook accounts, 102 Facebook Pages, five Facebook Groups, four Facebook Events and 17 Instagram accounts for engaging in coordinated inauthentic behavior.

Below the data published in the post:

  • Presence on Facebook and Instagram: 259 Facebook accounts (200 of which had been previously disabled by our automated systems), 102 Facebook Pages, 5 Facebook Groups, 4 Facebook Events, and 17 Instagram accounts.
  • Followers: More than 13.7 million accounts followed one or more of these Pages, about 9,000 accounts joined at least one of these Groups, and around 65,000 accounts followed at least one of these Instagram accounts.
  • Advertising: About $167,000 spent on Facebook ads paid for primarily in US dollars and Emirati dirhams.
  • Events: 4 events were hosted by these Facebook Pages. The first was scheduled for June 4, 2018, and the most recent was scheduled for June 19, 2019. Two hundred seventy people expressed interest in at least one of these events. We cannot confirm whether any of these events actually occurred.

Facebook continues to fight any abuse of its platform, especially the influence campaigns aimed at destabilizing the political contest in specific geographic areas.

Facebook recently also announced that it removed multiple pages, groups, and accounts tied to Russia involved in influence campaigns ahead of the election in Ukraine.

[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – influence campaigns, Facebook)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

MITRE revealed that nation-state actors breached its systems via Ivanti zero-days

The MITRE Corporation revealed that a nation-state actor compromised its systems in January 2024 by…

9 hours ago

FBI chief says China is preparing to attack US critical infrastructure

China-linked threat actors are preparing cyber attacks against U.S. critical infrastructure warned FBI Director Christopher…

22 hours ago

United Nations Development Programme (UNDP) investigates data breach

The United Nations Development Programme (UNDP) has initiated an investigation into an alleged ransomware attack…

1 day ago

FIN7 targeted a large U.S. carmaker with phishing attacks

BlackBerry reported that the financially motivated group FIN7 targeted the IT department of a large…

1 day ago

Law enforcement operation dismantled phishing-as-a-service platform LabHost

An international law enforcement operation led to the disruption of the prominent phishing-as-a-service platform LabHost.…

2 days ago

Previously unknown Kapeka backdoor linked to Russian Sandworm APT

Russia-linked APT Sandworm employed a previously undocumented backdoor called Kapeka in attacks against Eastern Europe since…

2 days ago

This website uses cookies.