Read on Twitter
BREAKING: @Facebook took down a small, recently created network linked to “individuals associated with past activity by the Russian Internet Research Agency.”
Based on a website;
Targeted progressives;
Small % of US election content;
Low impact. https://about.fb.com/news/2020/09/august-2020-cib-report/
Based on a website;
Targeted progressives;
Small % of US election content;
Low impact. https://about.fb.com/news/2020/09/august-2020-cib-report/
Here's @Graphika_NYC's report on the PeaceData op.
We call it “Unlucky Thirteen”: 13 accounts in the Facebook set (and 2 pages), and they didn’t get much traction.
Of note: the operation hired apparently unwitting freelancers to write for them. https://graphika.com/reports/ira-again-unlucky-thirteen/
We call it “Unlucky Thirteen”: 13 accounts in the Facebook set (and 2 pages), and they didn’t get much traction.
Of note: the operation hired apparently unwitting freelancers to write for them. https://graphika.com/reports/ira-again-unlucky-thirteen/
Right from the start, it’s important to note: there’s no indication that this operation went viral. The English-language FB page had about 200 followers. The Twitter account had about 3,000, and was following more than that.
Keep calm.
Keep calm.
The operation was based around a website, peacedata[.]net. This is its About page. Armed conflicts, corruption, abuse of power, human rights, but… notice something about those profile pictures?
![The operation was based around a website, peacedata[.]net. This is its About page. Armed conflicts, corruption, abuse of power, human rights, but… notice something about those profile pictures?](https://pbs.twimg.com/media/Eg2My8rXkAMdSQS.jpg "The operation was based around a website, peacedata[.]net. This is its About page. Armed conflicts, corruption, abuse of power, human rights, but… notice something about those profile pictures?")
First clue that this is not what it seems: they look like they were generated by AI.
The operation had at least six personas with the same sort of profile pic. Blurred backgrounds, asymmetric glasses, and all the eyes align.
The operation had at least six personas with the same sort of profile pic. Blurred backgrounds, asymmetric glasses, and all the eyes align.
Telling detail: check out the connection between the frames and the arms on the glasses these two wore.
So what were these fake “editors” editing? The PeaceData website posted in English and Arabic.
From mid-December, it republished other people’s articles in English.
From about mid-March, it began running its own articles.
From April, it published in Arabic too.
From mid-December, it republished other people’s articles in English.
From about mid-March, it began running its own articles.
From April, it published in Arabic too.
What kind of content? Its articles in English and Arabic criticized capitalism, racism and Western interventions, and also other targets, like French influence in Africa, the Turkish government, Israel, and the Saudi campaign in Yemen.
Helpfully, the website categorised the stories by theme: here’s the breakdown by language.
The articles mentioned a wide range of countries, but by far the most mentions were of the U.S. - though a lot of these were in relation to other countries.
Only about 5% of the articles in English dealt primarily with the US election, candidates or campaigns.
Only about 5% of the articles in English dealt primarily with the US election, candidates or campaigns.
What audience was it targeting?
A progressive one. This is a list of all the Facebook groups that one of the fake accounts, “Alex Lacusta,” posted to.
Democratic Socialists… The Progessive Party… DemExit…
A progressive one. This is a list of all the Facebook groups that one of the fake accounts, “Alex Lacusta,” posted to.
Democratic Socialists… The Progessive Party… DemExit…
Here's an example. The same article to three different groups, a few minutes apart.
Like I said, only about 5% of the articles were about the U.S. election. They looked designed to appeal to a progressive audience - and to the extent that they talked about Biden or Harris, they were hostile.
(They pushed this article relatively hard. Six shares to different groups just a few minutes.)
That resembles the IRA’s efforts in 2016, when it targeted progressives with hostile messaging about Clinton. https://www.washingtonpost.com/politics/inside-the-russian-effort-to-target-sanders-supporters--and-help-elect-trump/2019/04/11/741d7308-5576-11e9-8ef3-fbd41a2ce4d5_story.html
Interestingly, there was a similar pattern in the writing about the UK: articles that the website published were anti-Tory, but also anti-Keir Starmer.
"Must stop steering right."
"Must stop steering right."
The site published about COVID-19, too. In many different contexts, but mostly ones that fit into its overarching narratives.
How did the website get its content?
Well, in the early days (December 2019 through March), it copied from other sources. A good way to build a portfolio and persona without having to write it yourself.
Well, in the early days (December 2019 through March), it copied from other sources. A good way to build a portfolio and persona without having to write it yourself.
But the operation tried to hire freelance writers from across the English-speaking world. Here it is on UpWork, offering $75 per article…
... on Guru[.]com...
![... on Guru[.]com...](https://pbs.twimg.com/media/Eg2Yp41XgAAtnwH.jpg "... on Guru[.]com...")
… and on Twitter. (From the cache.)
That resembles the IRA-linked operation in Ghana, which hired unwitting locals to post for it. And it resembles the IRA’s early Russian-language days, when it advertised for copy-writers. https://edition.cnn.com/videos/world/2020/03/12/russian-trolls-ghana-ward-pkg-vpx.cnn
Co-opting real people may look like a good way of hiding your traces, but remember, it also creates a load of witnesses.
For the original IRA, it also meant they got exposed by real journalists, really early. (h/t @soshnikoff) http://mr7.ru/articles/90769/
For the original IRA, it also meant they got exposed by real journalists, really early. (h/t @soshnikoff) http://mr7.ru/articles/90769/
Facebook attributed this to people linked to the IRA. The themes and the way it co-opted external writers fit earlier patterns. The use of AI-generated faces is new for this operation, though we've seen it enough times in other ones not linked to Russia. https://graphika.com/reports/operationffs-fake-face-swarm/
