Facebook, Twitter Shut Down Iranian Anti-Israel Misinformation Operations

Iran “spread[s] hate, terrorism and disinformation online and offline, in our region and around the world,” tweeted Yuval Rotem, Director General of Israel’s Ministry of Foreign Affairs. 

By: AP and United with Israel Staff

Facebook has identified and banned hundreds of accounts, groups and pages engaged in misleading political behavior, a far larger discovery than the “sophisticated” effort it reported three weeks ago with great fanfare.

The social network said Tuesday that it had removed 652 pages, groups, and accounts linked to Russia and Iran, for “coordinated inauthentic behavior” that included sharing political material.

Facebook has significantly stepped up its policing efforts last year, when it acknowledged that Russian agents successfully ran political influence operations on its platform aimed at swaying the 2016 presidential election. Other social media networks have done likewise, and continue to turn up fresh evidence of political disinformation campaigns.

The latest group of apparently fake accounts appeared more intent on influencing US foreign policy and regional politics in the Middle East.

Shortly after Facebook’s announcement, Twitter revealed that it had also suspended 284 accounts for “coordinated manipulation,” many of them apparently originating from Iran.

Yuval Rotem, Director General of Israel’s Ministry of Foreign Affairs tweeted “‘Coordinated manipulation’ are probably two of the best words to describe Iran’s activities, spreading hate, terrorism and disinformation online and offline, in our region and around the world.”

“Thank you Twitter for exposing this vicious Iranian scheme,” he added.

The social network said it had not concluded its review of the material and declined to say how or why the state-backed actors were behaving the way they did. But it said it has informed the US and UK governments as well as the US Treasury and State Departments because of ongoing sanctions against Iran.

“There’s a lot we don’t know yet,” CEO Mark Zuckerberg said on a hastily called conference call with reporters Tuesday afternoon.

“You’re going to see people try to abuse the services in every way possible … including now nation states,” he said. He described the deception campaigns as “sophisticated and well-funded efforts that aren’t going to stop.”

FireEye, a cybersecurity firm that alerted Facebook to some of this activity, noted that it “does not appear to have been specifically designed to influence the 2018 US midterm elections, as it extends well beyond US audiences and US politics.”

Facebook said its latest action on Tuesday morning resulted from four investigations — three involving Iran, one involving Russia.

Iran’s ‘Liberty Front Press’ Exposed

The first focused on a group called “Liberty Front Press” that set up multiple accounts on Facebook and Instagram that were followed by 155,000 other accounts. The group was linked to Iranian state media based on website registrations, IP addresses and administrator accounts, Facebook said. The first accounts were created in 2013 and posted political content about the Middle East, the UK, and the US, although the focus on the West increased starting last year, Facebook said.

“The Iranians are now following the Kremlin’s playbook,” said Virginia Sen. Mark Warner, the top Democrat on the Senate intelligence committee. On Sept. 5, leaders of Facebook, Google and Twitter are scheduled to testify before the intelligence committee about their efforts to combat political disinformation on their social media networks.

FireEye called the Liberty Front Press group an influence operation apparently aimed at promoting Iranian political interests “including anti-Saudi, anti-Israeli, and pro-Palestinian themes” and support for the US-Iran nuclear deal.

While that group did not appear to be attempting to influence the US midterms, FireEye said its analysis “does not preclude such attempts being made.” Several social media personas it found related to the group masqueraded as liberal US activists who supported Sen. Bernie Sanders. One persona also used the Twitter handle “@berniecratss” and listed its location as the United States even though the phone number associated with it began with Iran’s country code, +98.

The group’s activity included “significant anti-Trump messaging,” but FireEye said in a detailed report “the activity extends well beyond US audiences and US politics.”

The second group also had multiple accounts and 15,000 followers. The group was linked to “Liberty Front Press” and attempted to hack people’s accounts to spread malware. Facebook said it disrupted those attempts.

A third group also operated out of Iran had as many as 813,000 followers, and also shared political content about the Middle East, the UK and US.

In all the Iranian-linked groups spent some $12,000 in advertising and hosted 28 different events.

“We’re working closely with U.S. law enforcement on this investigation,” Facebook said in a blog post.

In late July, Facebook also removed 32 apparently fake accounts on Facebook and Instagram that collectively had nearly 300,000 followers, including thousands that expressed interest in events they promoted.