Social Networks

Facebook dismantled influence campaigns focused on Middle East and Northern Africa

Facebook announced it dismantled covert influence campaigns in some countries in the Middle East and Northern Africa, including one tied to the Saudi government.

Facebook uncovered two separate influence campaigns, one originated in the United Arab Emirates and Egypt, and another in Saudi Arabia.

The campaigns appeared to be distinct and involved “coordinated inauthentic behavior” on Facebook and its Instagram.

“This week, we removed multiple Pages, Groups and accounts that were involved in coordinated inauthentic behavior on Facebook and Instagram. We found two separate operations: one of which originated in United Arab Emirates and Egypt, and another in Saudi Arabia.” reads the post published by Facebook.

One of the influence campaigns was conducted by individuals linked to the government of Saudi Arabia. Threat actors used a network of fake accounts and pages on Facebook to promote state propaganda.

The company announced to have removed 217 Facebook accounts, 144 Facebook Pages, five Facebook Groups and 31 Instagram accounts that were involved in the campaign. The inauthentic behavior was originating from Saudi Arabia and focused primarily on the Middle East and Northern Africa, including Qatar, Saudi Arabia, UAE, Bahrain, Egypt, Morocco, Palestine, Lebanon and Jordan.

Operators behind this campaign posed as locals in targeted countries, they disseminated their content through a network of fake accounts and pages created by fictitious personas.

Facebook observed that the content posted by the threat actors aimed at express criticism of neighboring countries including Iran, Qatar and Turkey. They also called into question the credibility of Al-Jazeera news network and Amnesty International.

Facebook has no doubts, the campaign was orchestrated by individuals associated with the government of Saudi Arabia.

“Although the people behind this activity attempted to conceal their identities, our review found links to individuals associated with the government of Saudi Arabia.” continues the post.

Below the findings shared by the social network about this influence campaign.

  • Presence on Facebook and Instagram: 217 Facebook accounts, 144 Facebook Pages, 5 Facebook Groups and 31 Instagram accounts.
  • Followers: About 1.4 million accounts followed one or more of these Pages, about 26,000 accounts joined at least one of these Groups, and around 145,000 people followed one or more of these Instagram accounts.
  • Advertising: Around $108,000 spent on Facebook and Instagram ads paid for in Saudi riyal and US dollars.

The second influence campaign seems to be carried out by individuals from Egypt and the United Arab Emirates, and focused on countries in the Middle East as well as in northern and eastern Africa, including Libya,Sudan, Comoros, Qatar, Turkey, Lebanon, Syria, Jordan and Morocco.

Facebook removed 259 Facebook accounts, 102 Facebook Pages, five Facebook Groups, four Facebook Events and 17 Instagram accounts for engaging in coordinated inauthentic behavior.

Below the data published in the post:

  • Presence on Facebook and Instagram: 259 Facebook accounts (200 of which had been previously disabled by our automated systems), 102 Facebook Pages, 5 Facebook Groups, 4 Facebook Events, and 17 Instagram accounts.
  • Followers: More than 13.7 million accounts followed one or more of these Pages, about 9,000 accounts joined at least one of these Groups, and around 65,000 accounts followed at least one of these Instagram accounts.
  • Advertising: About $167,000 spent on Facebook ads paid for primarily in US dollars and Emirati dirhams.
  • Events: 4 events were hosted by these Facebook Pages. The first was scheduled for June 4, 2018, and the most recent was scheduled for June 19, 2019. Two hundred seventy people expressed interest in at least one of these events. We cannot confirm whether any of these events actually occurred.

Facebook continues to fight any abuse of its platform, especially the influence campaigns aimed at destabilizing the political contest in specific geographic areas.

Facebook recently also announced that it removed multiple pages, groups, and accounts tied to Russia involved in influence campaigns ahead of the election in Ukraine.

[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – influence campaigns, Facebook)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Apple confirmed that Messages app flaw was actively exploited in the wild<gwmw style="display: none; background-color: transparent;"></gwmw>

Apple confirmed that a security flaw in its Messages app was actively exploited in the…

4 hours ago

Trend Micro fixes critical bugs in Apex Central and TMEE PolicyServer

Trend Micro fixed multiple vulnerabilities that impact its Apex Central and Endpoint Encryption (TMEE) PolicyServer…

7 hours ago

Paragon Graphite Spyware used a zero-day exploit to hack at least two journalists’ iPhones<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

Security researchers at Citizen Lab revealed that Paragon's Graphite spyware can hack fully updated iPhones…

18 hours ago

SinoTrack GPS device flaws allow remote vehicle control and location tracking

Two vulnerabilities in SinoTrack GPS devices can allow remote vehicle control and location tracking by…

1 day ago

U.S. CISA adds Wazuh, and WebDAV flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Wazuh, and WebDAV flaws to its Known…

1 day ago

Exposed eyes: 40,000 security cameras vulnerable to remote hacking

Over 40,000 internet-exposed security cameras worldwide are vulnerable to remote hacking, posing serious privacy and…

1 day ago