100 KiB
100 KiB
| 1 | timestamp | case_hash | case_id | source_subcategory | source | source_for_display | source_for_query | source_nation | source_category | disinformant | disinformant_for_query | disinformant_nation | disinformant_nation_for_query | disinformant_attribution | add_query_terms | short_title | short_description | attribution_url | archived_attribution_url | image_url | image_credit | open_web | social_media | messaging_platforms | other | start_date | end_date | attribution_date | methods | facebook_engagement | twitter_engagement | reddit_engagement | total_engagement | article_count | attribution_financial_incentive | attribution_financial_transparency | attribution_endorse_political | attribution_campaign_affiliation | attribution_published_mis_disinfo | attribution_credibility_score | attribution_language | attribution_convey_content | attribution_factual_argument | attribution_objectivity_score | attribution_clarity | attribution_context | attribution_identified_responsibility | attribution_strategic_rationale | attribution_privileged_evidence | attribution_evidence_score | attribution_open_access | attribution_methodology | attribution_open_source | attribution_acknowledge_limitations | attribution_corroboration | attribution_transparency_score | credibility_score | attribution_total_score | tags | allsides_count_left | allsides_count_leanleft | allsides_count_center | allsides_count_leanright | allsides_count_right | allsides_engagement_left | allsides_engagments_leanleft | allsides_engagments_center | allsides_engagments_leanright | allsides_engagments_right | allsides_engagments_left_facebook | allsides_engagments_left_twitter | allsides_engagments_left_reddit | allsides_engagments_leanleft_facebook | allsides_engagments_leanleft_twitter | allsides_engagments_leanleft_reddit | allsides_engagments_center_facebook | allsides_engagments_center_twitter | allsides_engagments_center_reddit | allsides_engagments_leanright_facebook | allsides_engagments_leanright_twitter | allsides_engagments_leanright_reddit | allsides_engagments_right_facebook | allsides_engagments_right_twitter | allsides_engagments_right_reddit | entry_date | announced_date | url | fb_pages_total | budget_usd_total | fb_accounts_total | fb_pages_followers_total | fb_groups_total | fb_groups_followers_total | Events_total | ig_accounts_total | ig_followers_total | cases |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2 | 6/15/2020 18:38 | IAE7CREQ | Russia >> United States 2016 | NBC News | United States | Media | Internet Research Agency | USAIRA.ru | Russia | Direct Attribution | NBC: Russia Responsible for Fake Disinformation Campaign | NBC examined a website linked to Russia's Internet Research Agency, which announced that it had undertaken a massive operation against the 2018 U.S. midterm election. "Whether you vote or not, there is no difference as we control the voting and counting systems," the website declared. NBC could find no evidence that the operation existed. | https://www.nbcnews.com/tech/tech-news/russian-troll-farm-set-elaborate-social-media-trap-midterms-no-n933781 | https://web.archive.org/web/20200615223555/https://www.nbcnews.com/tech/tech-news/russian-troll-farm-set-elaborate-social-media-trap-midterms-no-n933781 | https://media2.s-nbcnews.com/j/newscms/2018_15/2228976/171116-google-street-view-internet-research-agency-russia-ew-1114a_1baabf71c3a69e02c66a474b203cc7ce.fit-560w.jpg | Google Street View/NBC | "Junk News" Website | Facebook, Instagram, Twitter, YouTube | 11/1/2016 | 11/6/2018 | 11/7/2018 | Sockpuppets | 1078 | 357 | 319 | 1754 | 7 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 0 | 1 | 1 | 1 | 1 | 4 | 8 | 16 | 1 | 1 | 0 | 0 | 0 | 39 | 1709 | 0 | 0 | 0 | 14 | 25 | 0 | 1063 | 327 | 319 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||
| 3 | 6/17/2020 20:32 | QHVF6C7V | Russia >> United States | Senior U.S. Official | Defense Secretary James Mattis | United States | Government | Russia | Direct Attribution | Mattis: Russia Attempted to Interfere in 2018 Election | Then-Secretary of Defense James Mattis confirmed in a Fox News interview that Russia had attempted to interfere in the 2018 U.S. midterm election. He did not specify further details. | https://foreignpolicy.com/2018/12/01/mattis-confirms-russia-interfered-in-us-midterm-elections-putin-trump/ | https://web.archive.org/web/20200618002957/https://foreignpolicy.com/2018/12/01/mattis-confirms-russia-interfered-in-us-midterm-elections-putin-trump/ | https://upload.wikimedia.org/wikipedia/commons/thumb/3/39/James_Mattis_official_Transition_portrait.jpg/480px-James_Mattis_official_Transition_portrait.jpg | Wikimedia | 12/1/2018 | 36907 | 7514 | 40865 | 85286 | 13 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 0 | 1 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 9 | 3 | 2 | 2 | 1 | 0 | 13764 | 22647 | 45914 | 1815 | 0 | 12058 | 755 | 951 | 16255 | 1100 | 5292 | 7395 | 5358 | 33161 | 404 | 40 | 1371 | 0 | 0 | 0 | |||||||||||||||||||||||||||
| 4 | 4/28/2020 14:28 | XBVGVN5V | Iran >> United States 2010 | United States | Technology Company | Iran | Iran | Direct Attribution | 783 | Facebook: Assets Linked to Iran | Facebook removed 783 pages, groups and accounts for coordinated inauthentic behavior tied to Iran. The accounts posted commentary on Israeli-Palestinian relations and the conflicts in Syria and Yemen, targeting audiences in the Middle East, Europe, and the United States and falsely portraying themselves as locals. Some pages had been active since 2010. | https://about.fb.com/news/2019/01/removing-cib-iran/ | http://web.archive.org/web/20200425191628/https://about.fb.com/news/2019/01/removing-cib-iran/ | https://about.fb.com/wp-content/uploads/2019/01/irancontentexample5-1.png?resize=506%2C434 | FALSE | 1/1/2010 | 1/31/2019 | 1/31/2019 | Sockpuppets | 19384 | 7415 | 1023 | 27822 | 113 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 1 | 1 | 3 | 7 | 15 | 2 | 9 | 7 | 3 | 1 | 841 | 19960 | 1807 | 199 | 51 | 700 | 141 | 0 | 13248 | 5876 | 836 | 1308 | 488 | 11 | 106 | 87 | 6 | 27 | 24 | 0 | 11/10/2019 | 1/31/2019 | https://newsroom.fb.com/news/2019/01/removing-cib-iran/ | 262 | 30000 | 356 | 2000000 | 3 | 1600 | 8 | 162 | 254000 | 1 | |||||||||||
| 5 | 5/4/2020 15:04 | UCMQQ4SU | Iran >> United States 2016 | United States | Technology Company | Iran, Internet Research Agency, Venezuela | Iran, Russia, Venezuela | Direct Attribution, Proxy/Inferred Attribution | Twitter: Assets Linked to Iran, Russia, Venezuela | Twitter removed 2,617 malicious accounts that it believes may have originated in Iran, as well as 418 accounts from Russia that exhibited behavior similar to the Internet Research Agency. Twitter also removed 764 accounts located in Venezuela for a "foreign campaign of spammy content focused on divisive political themes." | https://blog.twitter.com/en_us/topics/company/2019/further_research_information_operations.html | http://web.archive.org/web/20200427201733/https://blog.twitter.com/en_us/topics/company/2019/further_research_information_operations.html | https://pixabay.com/get/57e2d1464c54af14f1dc8460da29317e153cdfed565271_640.jpg | Free-Photos/Pixabay | 8/1/2018 | 1/31/2019 | 1/31/2019 | Sockpuppets, Botnets | 9183 | 3472 | 788 | 13443 | 17 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 0 | 1 | 1 | 0 | 1 | 3 | 1 | 0 | 1 | 1 | 0 | 3 | 7 | 13 | 1 | 3 | 0 | 1 | 1 | 838 | 5847 | 0 | 615 | 502 | 697 | 141 | 0 | 3359 | 1793 | 695 | 0 | 0 | 0 | 326 | 266 | 23 | 478 | 19 | 5 | |||||||||||||||||||||||||
| 6 | 5/4/2020 15:17 | 4TVIMK7Y | Macedonia, Kosovo >> United States 2017 | United States | Technology Company | individuals | Macedonia, Kosovo | Non-Aligned Commercial Enterprise | Facebook: Assets Linked to Kosovo/Macedonia | Facebook removed 212 pages, groups and accounts originating in Macedonia and Kosovo for engaging in coordinated inauthentic behavior. The accounts ran pages claiming to represent political communities in Australia, the U.K. and the U.S., where they posted about topics like nationalism, Islam, and political figures. They also shared content on astrology, celebrities, and beauty. | https://about.fb.com/news/2019/03/cib-iran-russia-macedonia-kosovo/ | http://web.archive.org/web/20200420063703/https://about.fb.com/news/2019/03/cib-iran-russia-macedonia-kosovo/ | https://pixabay.com/get/57e7dc4b4a53ad14f1dc8460da29317e153cdfed545476_640.jpg | D1_TheOne/Pixabay | 1/1/2017 | 1/1/2017 | 3/26/2019 | Sockpuppets | 1487 | 214 | 2606 | 4307 | 24 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 1 | 1 | 3 | 7 | 15 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 41 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 18 | 21 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 11/10/2019 | 3/26/2019 | https://newsroom.fb.com/news/2019/03/cib-iran-russia-macedonia-kosovo/ | 40 | 5800 | 172 | 685000 | 0 | 0 | 0 | 0 | 0 | 1 | ||||||||||||
| 7 | 5/4/2020 15:21 | WI5CM5LF | Iran >> United States 2017 | United States | Technology Company | Iran | Iran | Direct Attribution | FireEye | Facebook: Assets Linked to Iran | Based on a tip from FireEye, Facebook removed 51 Facebook accounts, 36 pages, seven groups and three Instagram accounts involved in coordinated inauthentic behavior. The accounts originated in Iran and discussed topics like U.S. and British politics, U.S. secessionist movements, Islam, Arab minorities in Iran, and the influence of Saudi Arabia in the Middle East. The accounts also impersonated legitimate news organizations and attempted to contact authentic Instagram accounts. | https://about.fb.com/news/2019/05/removing-more-cib-from-iran/ | http://web.archive.org/web/20200504192049/https://about.fb.com/news/2019/05/removing-more-cib-from-iran/ | https://about.fb.com/wp-content/uploads/2019/05/5.28.19-samples.002.jpeg | Facebook, Instagram | 12/9/2015 | 5/28/2019 | 5/28/2019 | Brigading, Sockpuppets | 3748 | 1138 | 168 | 5054 | 24 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 1 | 1 | 3 | 7 | 14 | 1 | 3 | 4 | 1 | 0 | 830 | 2279 | 1074 | 184 | 0 | 830 | 0 | 0 | 1816 | 438 | 25 | 644 | 309 | 121 | 131 | 42 | 11 | 0 | 0 | 0 | 11/5/2019 | 5/28/2019 | https://newsroom.fb.com/news/2019/05/removing-more-cib-from-iran/ | 36 | 0 | 51 | 21000 | 7 | 1900 | 0 | 3 | 2600 | 1 | |||||||||||
| 8 | 5/4/2020 15:26 | B3RT49PV | Iran >> United States 2018 | United States | Technology Company | Iran | Iran | Direct Attribution | accounts | Twitter: Assets Linked to Iran | Twitter removed more than 4,700 accounts associated with or directly backed by the Iranian government. The accounts tweeted news content with a pro-Iran perspective and engaged in conversations on Iran and Israel. In some cases, they appeared to engage with U.S. Twitter users. | https://blog.twitter.com/en_us/topics/company/2019/information-ops-on-twitter.html | http://web.archive.org/web/20200502004018/https://blog.twitter.com/en_us/topics/company/2019/information-ops-on-twitter.html | https://pixabay.com/get/54e6dc404853ac14f1dc8460da29317e153cdfec505473_640.jpg | jorono/Pixabay | 10/1/2018 | 6/13/2019 | 6/13/2019 | Sockpuppets, Botnets | 7311 | 4238 | 363 | 11912 | 95 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 1 | 0 | 4 | 6 | 14 | 0 | 3 | 5 | 0 | 1 | 0 | 640 | 647 | 0 | 251 | 0 | 0 | 0 | 467 | 170 | 3 | 452 | 159 | 36 | 0 | 0 | 0 | 148 | 103 | 0 | ||||||||||||||||||||||||
| 9 | 6/16/2020 18:00 | G7LNVVQF | Iran >> United States 2019 | Microsoft | United States | Technology Company | Holmium, Mercury, Thallium, Yttrium, Strontium | Holmium Mercury, Thallium, Yttrium Strontium | Iran, North Korea, Russia | Proxy/Inferred Attribution | Microsoft: Foreign Cyberattacks Target Election Security | Between August 2018 and July 2019, Microsoft notified 781 political campaigns, parties, and democracy-focused NGOs that their accounts were targeted by nation-state actors. The majority of these attacks originated in Iran, North Korea, and Russia, and 95% of them targeted U.S.-based organizations. | https://blogs.microsoft.com/on-the-issues/2019/07/17/new-cyberthreats-require-new-ways-to-protect-democracy/ | https://web.archive.org/web/20200616215909/https://blogs.microsoft.com/on-the-issues/2019/07/17/new-cyberthreats-require-new-ways-to-protect-democracy/ | https://upload.wikimedia.org/wikipedia/commons/e/ef/Voting_United_States.jpg | Tom Arthur/Wikimedia | 7/16/2019 | 7/17/2019 | Hacking - Data Exfiltration | 11460 | 4305 | 1459 | 17224 | 150 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 0 | 1 | 1 | 1 | 1 | 4 | 0 | 0 | 0 | 0 | 0 | 0 | 7 | 10 | 0 | 4 | 7 | 0 | 0 | 0 | 6518 | 3371 | 0 | 0 | 0 | 0 | 0 | 4600 | 1772 | 146 | 2076 | 1084 | 211 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||||
| 10 | 5/6/2020 11:40 | NNFS2A1Q | Russia >> United States 2018 | United States | Technology Company | Secondary Infektion | DELETE | Russia | Direct Attribution | leaks, Britain | Reddit: Assets Linked to Russia | Reddit banned 1 subreddit and 61 accounts for vote manipulation and misuse of the platform. These accounts were linked to “Secondary Infektion,” a global Russian disinformation campaign analyzed by Graphika, which built on an earlier report by the DFRLab. | https://www.reddit.com/r/redditsecurity/comments/e74nml/suspected_campaign_from_russia_on_reddit/ | https://web.archive.org/web/20200503114319/https://www.reddit.com/r/redditsecurity/comments/e74nml/suspected_campaign_from_russia_on_reddit/ | https://miro.medium.com/max/1900/1*YeUqtIshY8RSS1Trtlpdsw.jpeg | @KaranKanishk/DFRLab | 1/1/2018 | 7/22/2019 | 12/6/2019 | Sockpuppets, Botnets | 81944 | 26466 | 60462 | 168872 | 193 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 0 | 1 | 1 | 1 | 1 | 1 | 0 | 1 | 4 | 1 | 1 | 1 | 1 | 1 | 5 | 7 | 15 | 4 | 16 | 13 | 1 | 1 | 1602 | 15185 | 12314 | 4 | 7262 | 1282 | 293 | 27 | 9427 | 3348 | 2410 | 10122 | 1549 | 643 | 0 | 2 | 2 | 5838 | 1424 | 0 | |||||||||||||||||||||||
| 11 | 5/6/2020 15:40 | 72SHQDJ4 | Thailand, Russia >> United States 2020 | United States | Technology Company | New Eastern Outlook | Thailand, Russia | Direct Attribution | Facebook: Assets Linked to Russia/Thailand | Facebook removed 12 accounts and 10 pages for coordinated inauthentic behavior. The accounts originated in Thailand and targeted Thailand and the U.S. The network used sockpuppet accounts to run pages, increase engagement, disseminate content, drive people to off-platform blogs posing as news outlets, and push divisive narratives on topics like Thai politics, U.S.-China relations, and protests in Hong Kong. This activity was linked to New Eastern Outlook, a Russian government-funded journal. | https://about.fb.com/news/2019/07/removing-cib-thailand-russia-ukraine-honduras/ | http://web.archive.org/web/20200506193859/https://about.fb.com/news/2019/07/removing-cib-thailand-russia-ukraine-honduras/ | https://about.fb.com/wp-content/uploads/2019/07/cib-2.png?resize=553%2C592 | 7/25/2020 | 7/25/2019 | Sockpuppets | 607 | 174 | 122 | 903 | 33 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 1 | 1 | 3 | 7 | 14 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 11/7/2019 | 7/25/2019 | https://newsroom.fb.com/news/2019/07/removing-cib-thailand-russia-ukraine-honduras/ | 10 | 18000 | 12 | 38000 | 0 | 0 | 0 | 0 | 0 | 1 | ||||||||||||||
| 12 | 6/23/2020 16:18 | E8YL4KIJ | Iran >> United States 2019 | Microsoft | United States | Technology Company | Phosphorus | Iran | Proxy/Inferred Attribution | Microsoft: Cyberattacks Linked to Iran Target 2020 Election | An Iranian hacker group made more than 2,700 attempts to identify the email accounts of current and former U.S. government officials, journalists covering political campaigns, and accounts associated with a presidential campaign during a 30-day period. The group then attacked 241 of these accounts. | https://blogs.microsoft.com/on-the-issues/2019/10/04/recent-cyberattacks-require-us-all-to-be-vigilant/ | https://web.archive.org/web/20200623201118/https://blogs.microsoft.com/on-the-issues/2019/10/04/recent-cyberattacks-require-us-all-to-be-vigilant/ | https://pixabay.com/get/55e3d1414c5baa14f1dc8460da29317e153cdfec555773_640.jpg | B_A/Pixabay | 9/30/2019 | 10/4/2019 | Hacking - Data Exfiltration | 84262 | 25884 | 22505 | 132651 | 323 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 0 | 0 | 1 | 7 | 13 | 4 | 21 | 14 | 1 | 6 | 41119 | 38492 | 8591 | 84 | 956 | 35175 | 5720 | 224 | 25755 | 12206 | 531 | 5129 | 2725 | 737 | 20 | 54 | 10 | 663 | 278 | 15 | |||||||||||||||||||||||||
| 13 | 4/28/2020 14:39 | QVQ936DM | Iran >> United States 2020 | United States | Technology Company | BLMNews, Liberty Front Press, Internet Research Agency | BLMNews AND Liberty Front Press, Internet Research Agency | Iran, Russia | Direct Attribution | Facebook: Assets Linked to Iran, Russia | Facebook removed 93 accounts, 17 pages and four Instagram accounts for coordinated inauthentic behavior. The activity was mainly targeted at the U.S. Fake and compromised accounts were used to masquerade as locals, join groups, and drive people to off-platform sites associated with the Iran-linked “Liberty Front Press.” The accounts typically posted about U.S. and Israeli politics, support for Palestine, and the conflict in Yemen. | https://about.fb.com/news/2019/10/removing-more-coordinated-inauthentic-behavior-from-iran-and-russia/ | http://web.archive.org/web/20200425035551/https://about.fb.com/news/2019/10/removing-more-coordinated-inauthentic-behavior-from-iran-and-russia/ | https://about.fb.com/wp-content/uploads/2019/10/hands-in.png?w=960&resize=656%2C311 | "Junk News" Website | Facebook, Instagram | 2/5/2017 | 10/21/2019 | 10/21/2019 | Sockpuppets | 36701 | 7320 | 2995 | 47016 | 9 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 0 | 1 | 2 | 7 | 15 | 1 | 2 | 1 | 0 | 0 | 1784 | 42034 | 2494 | 0 | 0 | 883 | 237 | 664 | 32815 | 6889 | 2330 | 2437 | 57 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 11/5/2019 | 10/21/2019 | https://newsroom.fb.com/news/2019/10/removing-more-coordinated-inauthentic-behavior-from-iran-and-russia/ | 20 | 0 | 98 | 7745 | 0 | 0 | 0 | 61 | 253445 | 3 | ||||||||||
| 14 | 5/6/2020 13:41 | EWEDMP63 | Saudi Arabia >>> United States 2018 | United States | Technology Company | Smaat | Saudi Arabia | Direct Attribution | Twitter: Assets Linked to Saudi Arabia | Twitter blocked 88,000 accounts engaged in spammy behavior and attributed them to a significant state-backed information operation originating in Saudi Arabia. The accounts were managed by Smaat, a social media marketing company that ran Twitter accounts for high-profile individuals and Saudi government departments. The accounts pushed messages favorable to the Saudi authorities, amplifying discussion about sanctions in Iran and appearances by Saudi government officials in Western media. | https://blog.twitter.com/en_us/topics/company/2019/new-disclosures-to-our-archive-of-state-backed-information-operations.html | http://web.archive.org/web/20200506173908/https://blog.twitter.com/en_us/topics/company/2019/new-disclosures-to-our-archive-of-state-backed-information-operations.html | https://pixabay.com/get/54e6dc444950ac14f1dc8460da29317e153cdfec545777_640.jpg | Kaufdex/Pixabay | 1/1/2018 | 12/20/2019 | 12/20/2019 | Brigading, Sockpuppets, Botnets | 120540 | 17157 | 32448 | 170145 | 205 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 0 | 1 | 1 | 4 | 7 | 17 | 1 | 7 | 10 | 4 | 3 | 218 | 30409 | 46860 | 335 | 78 | 164 | 54 | 0 | 25512 | 3141 | 1756 | 12705 | 3778 | 30377 | 202 | 129 | 4 | 54 | 23 | 1 | |||||||||||||||||||||||||
| 15 | 4/28/2020 14:33 | B2K8L2QM | United States,Vietnam >> United States 2020 | United States | Technology Company | Epoch Media Group, The BL | United States,Vietnam | Vietnam | Direct Attribution | Facebook: Assets Linked to Anti-China Media Organization | Facebook removed 610 accounts, 89 pages, 156 groups and 72 Instagram accounts for coordinated inauthentic behavior on behalf of a government or foreign actor. The activity was primarily targeted at the U.S. and linked to The BL and Epoch Media Group, both U.S.-based media companies. The network was run by individuals in Vietnam and the U.S. It used fake accounts (some of which had profile photos generated by deep learning processes) and automated posting to direct traffic to off-platform sites. The accounts also masqueraded as Americans and posted on U.S. political issues. | https://about.fb.com/news/2019/12/removing-coordinated-inauthentic-behavior-from-georgia-vietnam-and-the-us/ | http://web.archive.org/web/20200427035411/https://about.fb.com/news/2019/12/removing-coordinated-inauthentic-behavior-from-georgia-vietnam-and-the-us/ | https://media-exp1.licdn.com/dms/image/C4E0BAQEt6S9z7QLAWg/company-logo_200_200/0?e=2159024400&v=beta&t=JbZ1bwIYPtksYzUzDU4I2fpF5rWnHoD_H7Psf_TieI4 | 10/5/2019 | 12/20/2019 | 12/20/2019 | Sockpuppets | 537840 | 18838 | 33474 | 590152 | 319 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 1 | 1 | 1 | 4 | 7 | 15 | 4 | 7 | 11 | 5 | 2 | 27375 | 240518 | 41926 | 2876 | 3441 | 23195 | 671 | 3509 | 203924 | 12204 | 24390 | 37980 | 1359 | 2587 | 1435 | 679 | 762 | 3208 | 233 | 0 | 12/21/2019 | 12/20/2019 | https://about.fb.com/news/2019/12/removing-coordinated-inauthentic-behavior-from-georgia-vietnam-and-the-us/ | 89 | 9500000 | 610 | 55000000 | 156 | 381500 | 0 | 72 | 92000 | 1 | ||||||||||||
| 16 | 6/16/2020 17:51 | 2VHOY7IC | North Korea >> United States 2019 | Microsoft | United States | Technology Company | Thallium | North Korea | Proxy/Inferred Attribution | Microsoft: Cyberattacks Linked to North Korea | A U.S. district court unsealed Microsoft documents describing cyberattacks by a hacking group called Thallium, which is believed to operate from North Korea. Targets included government employees, think tanks, university staff members, members of organizations focused on world peace and human rights, and individuals that work on nuclear proliferation issues. Most of the targets were based in the U.S. | https://blogs.microsoft.com/on-the-issues/2019/12/30/microsoft-court-action-against-nation-state-cybercrime/ | https://web.archive.org/web/20200616204428/https://blogs.microsoft.com/on-the-issues/2019/12/30/microsoft-court-action-against-nation-state-cybercrime/ | https://pixabay.com/get/57e1d0424b51ab14f1dc8460da29317e153cdfec5b5779_640.jpg | Chickenonline/Pixabay | 7/16/2019 | 12/30/2019 | Hacking - Data Exfiltration | 11777 | 3761 | 1097 | 16635 | 256 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 0 | 1 | 0 | 1 | 3 | 0 | 1 | 0 | 1 | 0 | 2 | 7 | 12 | 0 | 6 | 11 | 2 | 2 | 0 | 5250 | 2495 | 23 | 61 | 0 | 0 | 0 | 3645 | 1080 | 525 | 2192 | 287 | 16 | 7 | 14 | 2 | 38 | 23 | 0 | |||||||||||||||||||||||||
| 17 | 4/28/2020 14:21 | CU6V8230 | Iran >> United States 2020 | United States | Technology Company | Iran | Iran | Direct Attribution | Facebook: Assets Linked to Iran | Facebook removed 6 Facebook accounts and 5 Instagram accounts involved in foreign interference originating in Iran and targeted at the U.S. The network used fake accounts to attempt to contact public figures as well as to share posts on the U.S. elections, Christianity, U.S.-Iran relations, U.S. immigration policy, and U.S. foreign policy in the Middle East. Facebook found links between this network and the network that it had removed in January 2019. | https://about.fb.com/news/2020/02/removing-coordinated-inauthentic-behavior/ | http://archive.ph/6WdYn | https://pixabay.com/get/51e6d040484faa0df7c5997cc128377d1436d7e35a_640.png | Simon Steinberger/Pixabay | Facebook, Instagram | 1/1/2020 | 2/1/2020 | 2/12/2020 | Sockpuppets | 51450 | 3470 | 1195 | 56115 | 171 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 1 | 0 | 2 | 7 | 13 | 2 | 5 | 6 | 0 | 1 | 423 | 6820 | 2683 | 0 | 662 | 250 | 171 | 2 | 4895 | 859 | 1066 | 2361 | 298 | 24 | 0 | 0 | 0 | 607 | 54 | 1 | 2/13/2020 | 2/12/2020 | https://about.fb.com/news/2020/02/removing-coordinated-inauthentic-behavior/ | 0 | 0 | 6 | 0 | 0 | 0 | 0 | 5 | 60 | 1 | |||||||||||
| 18 | 6/23/2020 15:51 | Y8YL4NQH | Russia >> United States | U.S. Intelligence | Intelligence Officials | United States | Government | Russia | Direct Attribution | Sanders | U.S. Intelligence: Russia Targets Sanders Campaign | The Washington Post published information about a confidential briefing given by U.S. officials to Senator Bernie Sanders (D-VT) warning him that Russia was attempting to help his campaign as part of an effort to interfere with the Democratic primary. Sanders said that “[his] understanding” was that Russia was “us[ing] Internet propaganda to sow division.” | https://www.washingtonpost.com/national-security/bernie-sanders-briefed-by-us-officials-that-russia-is-trying-to-help-his-presidential-campaign/2020/02/21/5ad396a6-54bd-11ea-929a-64efa7482a77_story.html | https://web.archive.org/save/https://www.washingtonpost.com/national-security/bernie-sanders-briefed-by-us-officials-that-russia-is-trying-to-help-his-presidential-campaign/2020/02/21/5ad396a6-54bd-11ea-929a-64efa7482a77_story.html | https://upload.wikimedia.org/wikipedia/commons/e/ee/Bernie_Sanders_%2848647153227%29.jpg | Gage Skidmore/Wikimedia | 2/21/2020 | 2175908 | 242209 | 344148 | 2762265 | 916 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 11 | 34 | 50 | 59 | 29 | 13 | 131629 | 1615173 | 398661 | 92130 | 167066 | 91769 | 9640 | 30220 | 1277641 | 186959 | 150573 | 294164 | 11215 | 93282 | 78818 | 12666 | 646 | 161379 | 5598 | 89 | ||||||||||||||||||||||||||
| 19 | 4/28/2020 15:07 | TCAVVVR4 | India >> United States 2020 | United States | Technology Company | aRep Global | India | Non-Aligned Commercial Enterprise | Facebook: Assets Linked to Iran, Indian Company | Facebook removed a network of 37 accounts, 32 pages, 11 groups and 42 Instagram accounts. This activity originated in India and focused on the Gulf region, United States, United Kingdom, and Canada. Facebook’s investigation found links to aRep Global, a digital marketing firm in India. A small Iranian network of five Facebook accounts and four Instagram accounts was also removed. | https://about.fb.com/news/2020/03/february-cib-report/ | http://web.archive.org/web/20200420062152/https://about.fb.com/wp-content/uploads/2020/03/February-2020-CIB-Report.pdf | https://pixabay.com/get/54e0dc4a4852a914f1dc8460da29317e153cdce5515773_640.png | Gordon Johnson/Pixabay | Facebook, Instagram | 1/1/2020 | 3/2/2020 | 3/2/2020 | Sockpuppets | 1703 | 1079 | 10480 | 13262 | 58 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 0 | 1 | 2 | 7 | 13 | 0 | 1 | 5 | 0 | 0 | 0 | 2620 | 460 | 0 | 0 | 0 | 0 | 0 | 191 | 190 | 2239 | 333 | 122 | 5 | 0 | 0 | 0 | 0 | 0 | 0 | 3/3/2020 | 3/2/2020 | https://about.fb.com/news/2020/03/february-cib-report/ | 32 | 450 | 37 | 29000 | 1100 | 0 | 0 | 42 | 74000 | 1 | |||||||||||
| 20 | 4/27/2020 13:10 | EWV49KEX | Russia >> United States 2020 | Facebook, CNN, Twitter, Graphika, Clemson University | United States | Civil Society Organization | EBLA | Russia, Ghana, Nigeria | Russia | Direct Attribution | Various: Assets Operating Out of Ghana/Nigeria Linked to Russia | Facebook, CNN, Twitter, Graphika, and Clemson University uncovered a cross-platform influence operation run from Ghana. The operation targeted black communities in the U.S. but was still in the early stages of building its audience. The operation was linked to individuals associated with the Internet Research Agency as well as a Ghanaian NGO traceable to Russia. | https://graphika.com/reports/ira-in-ghana-double-deceit/ | http://web.archive.org/web/20200424053336/https://graphika.com/reports/ira-in-ghana-double-deceit/ | https://pixabay.com/get/54e9d74a4356b10ff3d89960c62e377e163ddded5759_640.jpg | Thomas Ulrich/Pixabay | "Junk News" Website | Facebook, Instagram, Twitter | 1/1/2020 | 3/12/2020 | 3/12/2020 | Sockpuppets, Botnets, Deceptive Content Manipulation | 21400 | 2323 | 8761 | 32484 | 62 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 1 | 1 | 5 | 7 | 17 | 0 | 3 | 6 | 0 | 0 | 0 | 7970 | 12368 | 0 | 0 | 0 | 0 | 0 | 6263 | 1337 | 370 | 12041 | 189 | 138 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||
| 21 | 5/11/2020 13:27 | 1JRQ977C | Russia >> United States 2019 | Barack Obama | President Barack Obama | United States | Influential Individual | Senate Republicans | Russia | Proxy/Inferred Attribution | Ukraine | Obama: Senate Republicans Amplifying Russian Disinformation | Former President Barack Obama's office claimed in a letter that Senate Republicans were supporting "a Russian disinformation campaign" by pushing the narrative that Ukraine was responsible for interference in the 2016 election instead of Russia. | https://www.documentcloud.org/documents/6882587-Letter-From-Obama-Office-to-NARA-03-13-20.html | https://web.archive.org/web/20200511171341/https://www.documentcloud.org/documents/6882587-Letter-From-Obama-Office-to-NARA-03-13-20.html | https://upload.wikimedia.org/wikipedia/commons/4/48/Barack_Obama_2016.jpg | WDKrause/Wikimedia | 11/21/2019 | 3/13/2020 | 5/5/2020 | 155074 | 4590 | 11534 | 171198 | 37 | 0 | 1 | 1 | 1 | 1 | 4 | 1 | 0 | 0 | 1 | 0 | 0 | 1 | 1 | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 5 | 7 | 5 | 5 | 3 | 5 | 1 | 13343 | 60855 | 8626 | 52498 | 6957 | 13177 | 149 | 17 | 49818 | 8 | 11029 | 8301 | 0 | 325 | 51137 | 1214 | 147 | 6953 | 0 | 4 | |||||||||||||||||||||||
| 22 | 6/15/2020 13:02 | U4GQKN35 | United States >> United States 2020 | White House | United States | Government | Voice of America | China | Direct Attribution | White House: Voice of America Tool for Chinese Propaganda | The White House published an article claiming that Voice of America had “amplified Beijing’s propaganda,” pointing to Voice of America tweets about the COVID-19 epidemic in China. | https://www.whitehouse.gov/articles/amid-a-pandemic-voice-of-america-spends-your-money-to-promote-foreign-propaganda/ | https://web.archive.org/web/20200615165424/https://www.insidevoa.com/a/voa-director-s-statement-on-cdc-s-media-interview-policy-excluding-voa-journalists/5462335.html | https://upload.wikimedia.org/wikipedia/commons/d/d0/Voice_of_America_Reporter_at_March_for_Science%2C_Washington%2C_DC_%2834078320141%29.jpg | scattered1/Wikimedia | State Media | 4/1/2020 | 4/10/2020 | 4/10/2020 | 78166 | 4972 | 678 | 83816 | 72 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 1 | 0 | 2 | 1 | 0 | 1 | 0 | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 2 | 4 | 0 | 7 | 4 | 6 | 1 | 0 | 27896 | 14214 | 10058 | 10324 | 0 | 0 | 0 | 25949 | 1666 | 281 | 13559 | 647 | 8 | 8209 | 1803 | 46 | 10292 | 32 | 0 | ||||||||||||||||||||||||
| 23 | 5/11/2020 14:09 | 8PPYXGVD | China >> US 2020 | U.S. Intelligence | Intelligence Officials | Intelligence Officials | United States | Government | China | fake messages | China | Direct Attribution | U.S. Intelligence: China Amplified COVID-19 Disinformation | According to New York Times reporting, American officials claimed Chinese operatives amplified fake text messages and social media posts about President Trump locking down the country. | https://www.nytimes.com/2020/04/22/us/politics/coronavirus-china-disinformation.html?action=click&module=Top%20Stories&pgtype=Homepage&mkt_tok=eyJpIjoiWWpoa1pHTXpNMlU0TjJWbCIsInQiOiJ0NGhaUzJTMGU1OEZLNkdvRzRleWJ0NEp1Z3JuT1hnNEFaUW9tSSs1aGU1TkRkV1hkM2pGcWFuUGp2eVRObEZYWHR4dFlRVnlOdWM5b2MxQzc5V3gyS1d2OHJXM3grNDNCcmxjK3drM2hvRmJ5OTZOayt5Y25YdUs2ZGIzcjg4OCJ9 | https://pixabay.com/get/52e9dd444c53a414f1dc8460da29317e1538dee7565374_640.jpg | sandeep darji/Pixabay | Facebook, Instagram, Twitter | WhatsApp, SMS | 3/10/2020 | 4/22/2020 | 4/22/2020 | Sockpuppets, Botnets | 54595 | 16577 | 3024 | 74196 | 12 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 0 | 1 | 1 | 1 | 4 | 0 | 0 | 0 | 1 | 0 | 1 | 8 | 13 | 0 | 3 | 3 | 0 | 1 | 0 | 62572 | 6195 | 0 | 1585 | 0 | 0 | 0 | 45980 | 14561 | 2031 | 4575 | 1177 | 443 | 0 | 0 | 0 | 930 | 541 | 114 | ||||||||||||||||||||
| 24 | 4/29/2020 11:20 | 0UG7TPJ6 | China, Russia >> NATO 2020 | NATO | Jens Stoltenberg | NATO AND Jens Stoltenberg | Foreign Government Body | China, Russia | China, Russia | Direct Attribution | Stoltenberg: China/Russia Using COVID-19 to Target NATO | NATO Secretary-General Jens Stoltenberg accused China and Russia of spreading disinformation about NATO’s response to the COVID-19 pandemic in order to “undermine the cohesion of NATO allies.” | https://www.rferl.org/a/nato-s-stoltenberg-blasts-chinese-russian-disinformation-about-coronavirus/30579874.html | http://web.archive.org/web/20200428004630/https://www.rferl.org/a/nato-s-stoltenberg-blasts-chinese-russian-disinformation-about-coronavirus/30579874.html | https://upload.wikimedia.org/wikipedia/commons/7/7b/Jens_Stoltenberg_%284682429800%29.jpg | Hakan Dahlstrom/Wikimedia | 1/15/2020 | 4/27/2020 | 4/27/2020 | 111 | 11 | 0 | 122 | 5 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 0 | 2 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 7 | 10 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||||
| 25 | 5/6/2020 13:13 | TUVODB5C | Iran >> United States 2011 | United States | Technology Company | Islamic Republic of Iran Broadcasting | Iran | Direct Attribution | Facebook: Assets Linked to Iran | Facebook removed 118 pages, 389 Facebook accounts, 27 groups, and 6 Instagram accounts linked to the Islamic Republic of Iran Broadcasting Corporation. The network engaged in coordinated inauthentic behavior targeted at the U.S. and other countries. | https://about.fb.com/news/2020/05/april-cib-report/ | http://web.archive.org/web/20200506171135/https://about.fb.com/wp-content/uploads/2020/05/April-2020-CIB-Report.pdf | https://upload.wikimedia.org/wikipedia/en/9/97/IRIB_Logo.svg | Wikimedia | Facebook, Twitter | 1/1/2011 | 4/30/2020 | 5/5/2020 | Brigading, Sockpuppets | 103150 | 2953 | 2112 | 108215 | 183 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 1 | 0 | 2 | 7 | 13 | 2 | 9 | 3 | 2 | 1 | 230 | 13970 | 2494 | 5239 | 104 | 156 | 74 | 0 | 11589 | 714 | 1667 | 2441 | 26 | 27 | 5152 | 87 | 0 | 104 | 0 | 0 | 5/6/2020 | 5/5/2020 | https://about.fb.com/news/2020/05/april-cib-report/ | 164 | 4750 | 480 | 585300 | 29 | 69100 | 0 | 7 | 135800 | 2 | |||||||||||
| 26 | 5/27/2020 14:27 | 3WTUPUK1 | Russia and/or China >> United States 2020 | Carnegie Mellon University | United States | Civil Society Organization | Russia, China | Russia, China | Proxy/Inferred Attribution | Carnegie Mellon: COVID-19 "Propaganda Machine" Emulates Russia and China | CMU researchers analyzed tweets discussing COVID-19 in the U.S. and found that a large portion of influential accounts are likely bots. The researchers concluded that this "propaganda machine...definitely [matched] the Russian and Chinese playbooks," but could not substantiate the connection. | https://www.cs.cmu.edu/news/nearly-half-twitter-accounts-discussing-%E2%80%98reopening-america%E2%80%99-may-be-bots | http://archive.ph/YvkNa | https://pixabay.com/get/53e1d2474c55ad14f1dc8460da29317e153cdce55a5172_640.jpg | Gerd Altmann/Pixabay | 1/20/2020 | 5/20/2020 | Botnets | 1632567 | 34706 | 86923 | 1754196 | 145 | 1 | 1 | 1 | 0 | 1 | 4 | 1 | 1 | 1 | 3 | 1 | 1 | 0 | 0 | 0 | 2 | 0 | 0 | 0 | 1 | 0 | 1 | 7 | 10 | 6 | 3 | 5 | 2 | 2 | 70205 | 35351 | 1531825 | 5351 | 2453 | 67058 | 804 | 2343 | 28606 | 5358 | 1387 | 1423270 | 27561 | 80994 | 5152 | 104 | 95 | 2446 | 0 | 7 | |||||||||||||||||||||||||
| 27 | 6/2/2020 12:15 | 4L5N3407 | United States >> United States 2020 | U.S. Intelligence | US officials | United States | Government | Boogaloo Boys, Proud Boys, ANTIFA, Foreign Actors | foreign actors | DELETE | Proxy/Inferred Attribution | Floyd | U.S. Officials: Foreign Actors Targeting George Floyd Protests | U.S. officials warned that "foreign agents" could be orchestrating a social media disinformation campaign regarding the George Floyd protests. | https://apnews.com/32bc90566697388645f01675359dcad1 | https://web.archive.org/web/20200602161336/https://apnews.com/32bc90566697388645f01675359dcad1 | https://upload.wikimedia.org/wikipedia/commons/6/66/George_Floyd_protests_in_Philadelphia_04.jpg | .RGB./Wikimedia | Facebook, Instagram, Twitter, YouTube, Reddit | Telegram | 5/1/2020 | 5/31/2020 | 5/31/2020 | Sockpuppets, Botnets, Hacking - DDoS | 1759987 | 103919 | 44127 | 1908033 | 247 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 1 | 1 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 10 | George Floyd Protests | 3 | 6 | 9 | 2 | 1 | 1160 | 1814383 | 27852 | 6345 | 0 | 882 | 278 | 0 | 1674333 | 96426 | 43624 | 21994 | 5609 | 249 | 5943 | 400 | 2 | 0 | 0 | 0 | ||||||||||||||||||
| 28 | 6/4/2020 17:18 | VO553UH8 | Multiple, unlisted >> United States 2020 | Senior U.S. Official | Attorney General William Barr | United States | Government | Foreign Actors | Proxy/Inferred Attribution | Barr: Foreign Actors Targeting George Floyd Protests | In a press conference, Attorney General William Barr said, "We have evidence that antifa and other similar extremist groups, as well as actors of a variety of different political persuasions have been involved in instigating and participating in the violent activity.” Barr added, "We are also seeing foreign actors playing all sides to exacerbate the violence." | https://abcnews.go.com/Politics/ag-barr-evidence-antifa-foreign-actors-involved-sowing/story?id=71066996 | https://web.archive.org/web/20200604211727/https://abcnews.go.com/Politics/ag-barr-evidence-antifa-foreign-actors-involved-sowing/story?id=71066996 | https://upload.wikimedia.org/wikipedia/commons/0/03/Candlelight_Vigil_2019-184_%2832905730027%29.jpg | Shane T. McCoy/Wikimedia | Facebook, Instagram, Twitter, YouTube, Reddit | 6/2/2020 | 6/4/2020 | 6/4/2020 | Sockpuppets, Botnets | 283088 | 7367 | 696 | 291151 | 74 | 0 | 0 | 0 | 1 | 1 | 2 | 1 | 1 | 0 | 2 | 0 | 0 | 0 | 0 | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 4 | 5 | George Floyd Protests | 2 | 8 | 2 | 0 | 4 | 3242 | 166658 | 4690 | 0 | 36039 | 1868 | 1374 | 0 | 164808 | 1702 | 148 | 4209 | 429 | 52 | 0 | 0 | 0 | 33907 | 1811 | 321 | ||||||||||||||||||||||
| 29 | 6/17/2020 16:47 | HJXZK59K | China >> United States 2020 | United States | Technology Company | APT | China, Iran | Proxy/Inferred Attribution | Google: Cyberattacks Linked to China/Iran Target 2020 Election | Google announced that state-backed hackers from China targeted staffers working on Joe Biden’s campaign. Separately, Iranian hackers targeted email accounts belonging to President Donald Trump's campaign staff, Google claimed. | https://www.voanews.com/usa/us-politics/google-chinese-iranian-hackers-targeted-biden-trump-campaigns | https://web.archive.org/web/20200617210456/https://www.voanews.com/usa/us-politics/google-chinese-iranian-hackers-targeted-biden-trump-campaigns | https://pixabay.com/get/57e9d1474c5aa414f1dc8460da29317e153cdce4525977_640.jpg | Darwin Laganzon/Pixabay | 6/4/2020 | 6/4/2020 | Hacking - Data Exfiltration | 15796 | 5498 | 816 | 22110 | 42 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 0 | 0 | 0 | 0 | 0 | 7 | 11 | 0 | 5 | 5 | 0 | 1 | 0 | 10566 | 6629 | 0 | 37 | 0 | 0 | 0 | 7813 | 2439 | 314 | 4416 | 1755 | 458 | 0 | 0 | 0 | 25 | 12 | 0 | ||||||||||||||||||||||||||
| 30 | 6/17/2020 18:52 | UIWBCVSM | Russia >> United States 2020 | New York Times | United States | Media | @DanWals83975326, @DanRadov | @DanWals83975326 | Russia | Proxy/Inferred Attribution | Mook | NYT: Russia Linked to Iowa Caucus Misinformation | The New York Times found that online personas with ties to Russia amplified a Twitter conspiracy theory about technical failures during the contested Iowa Democratic caucus. | https://www.nytimes.com/2020/06/15/technology/coronavirus-disinformation-russia-iowa-caucus.html | https://web.archive.org/web/20200617225128/https://www.nytimes.com/2020/06/15/technology/coronavirus-disinformation-russia-iowa-caucus.html | https://upload.wikimedia.org/wikipedia/commons/9/98/Sanders_supporters_in_Iowa%2C_January_31%2C_2016.jpg | Max Goldberg/Wikimedia | 1/27/2020 | 6/15/2020 | 6/15/2020 | Sockpuppets, Botnets | 13360 | 4416 | 1028 | 18804 | 50 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 1 | 1 | 1 | 0 | 0 | 3 | 8 | 15 | 0 | 5 | 1 | 0 | 0 | 0 | 17473 | 77 | 0 | 0 | 0 | 0 | 0 | 12303 | 4142 | 1028 | 45 | 32 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||
| 31 | 6/17/2020 17:43 | A1O7CILS | Russia >> United States 2014 | Graphika | United States | Civil Society Organization | Operation Secondary Infektion | Russia | Proxy/Inferred Attribution | Graphika: Russia Spreading Disinformation | Building off of a DFRLab report, Graphika found over 2,500 pieces of content related to Secondary Infektion, a Russian information operation. The operation targeted the U.S. and other Western countries with fake stories and forged documents intended to provoke tensions between Russia’s perceived enemies. | https://secondaryinfektion.org/report/secondary-infektion-at-a-glance/ | https://web.archive.org/web/20200617212215/https://secondaryinfektion.org/downloads/secondary-infektion-report.pdf | https://pixabay.com/get/57e1dc414c51a914f1dc8460da29317e153cdce4505872_640.jpg | Chickenonline/Pixabay | "Junk News" Website | Facebook, Twitter, YouTube, Reddit, Quora | 1/1/2014 | 6/16/2020 | Sockpuppets, Botnets, Deceptive Content Manipulation | 61932 | 8070 | 53180 | 123182 | 64 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 0 | 1 | 1 | 1 | 1 | 1 | 1 | 0 | 4 | 1 | 1 | 1 | 1 | 1 | 5 | 6 | 15 | 1 | 4 | 6 | 0 | 1 | 1111 | 86299 | 28108 | 0 | 36 | 804 | 303 | 4 | 32281 | 2197 | 51821 | 23550 | 3711 | 847 | 0 | 0 | 0 | 35 | 1 | 0 | |||||||||||||||||||||||
| 32 | 6/24/2020 14:51 | L98UBEZR | FOREIGN COUNTRIES >> United States | Donald Trump | President Donald Trump | United States | Government | Foreign countries | unspecified | Trump: Foreign Actors Will Cast Millions of Ballots in Election | President Donald Trump tweeted, "RIGGED 2020 ELECTION: MILLIONS OF MAIL-IN BALLOTS WILL BE PRINTED BY FOREIGN COUNTRIES, AND OTHERS. IT WILL BE THE SCANDAL OF OUR TIMES!" | https://twitter.com/realDonaldTrump/status/1275024974579982336 | https://upload.wikimedia.org/wikipedia/commons/4/4b/Donald_Trump_%2829496131773%29.jpg | Gage Skidmore/Wikimedia | 6/22/2020 | 216763 | 69386 | 43594 | 329743 | 91 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 2 | 5 | 4 | 6 | 2 | 1 | 19966 | 5210 | 78752 | 7448 | 35 | 19656 | 310 | 0 | 4515 | 615 | 80 | 76776 | 1722 | 254 | 7318 | 87 | 43 | 27 | 8 | 0 | ||||||||||||||||||||||||||||
| 33 | 7/23/2020 15:04 | K7AZA3CE | N/A >> United States | Congressional Democrats | Speaker of the House Nancy Pelosi, Senate Democratic Leader Chuck Schumer, House Intelligence Committee Chairman Adam Schiff, and Senate Intelligence Committee Vice Chairman Mark Warner | Pelosi Schumer Schiff Warner | United States | Government | Russia | DELETE | Congressional Democrats: Information About Russian Interference Suppressed | Prominent Democrats in Congress wrote a public letter to FBI Director Christopher Wray stating that they were, “gravely concerned...that Congress appears to be the target of a concerted foreign interference campaign, which seeks to launder and amplify disinformation in order to influence congressional activity, public debate, and the presidential election in November.” | https://intelligence.house.gov/news/documentsingle.aspx?DocumentID=1029 | https://upload.wikimedia.org/wikipedia/commons/f/fb/United_States_House_Permanent_Select_Committee_on_Intelligence.jpg | Wikimedia | 7/20/2020 | 47814 | 26629 | 135735 | 210178 | 29 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 0 | 2 | 0 | 0 | 0 | 1 | 1 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 7 | 9 | 0 | 7 | 2 | 1 | 0 | 0 | 65130 | 9932 | 11 | 0 | 0 | 0 | 0 | 24525 | 25711 | 14894 | 9365 | 523 | 44 | 1 | 9 | 1 | 0 | 0 | 0 | |||||||||||||||||||||||||||
| 34 | 7/24/2020 11:12 | 7OREGDIV | Russia, China, Iran >> United States | U.S. Intelligence | NCSC Director William Evanina | United States | Government | Russia, China, Iran | Russia China Iran | Russia, China, Iran | DELETE | Direct Attribution | U.S. Intelligence: China, Iran, Russia Target 2020 Election | Director of the U.S. National Counterintelligence and Security Center William Evanina wrote in a press release that U.S. adversaries (primarily China, Russia, and Iran) were attempting to “compromise the private communications of U.S. political campaigns, candidates and other political targets” as well as election infrastructure. He also warned, “Foreign nations continue to use influence measures in social and traditional media in an effort to sway U.S. voters’ preferences and perspectives, to shift U.S. policies, to increase discord and to undermine confidence in our democratic process.” | https://www.dni.gov/index.php/newsroom/press-releases/item/2135-statement-by-ncsc-director-william-evanina-100-days-until-election-2020 | https://web.archive.org/web/20200724151120/https://www.dni.gov/index.php/newsroom/press-releases/item/2135-statement-by-ncsc-director-william-evanina-100-days-until-election-2020 | https://pbs.twimg.com/profile_images/671742150288105472/Vl7Ww3_j_400x400.png | Facebook, Instagram, Twitter, YouTube, Reddit | 7/24/2020 | Sockpuppets, Botnets, Deceptive Content Manipulation | 72177 | 7330 | 14465 | 93972 | 83 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 11 | 2 | 5 | 3 | 3 | 0 | 15697 | 16849 | 13264 | 3531 | 0 | 2500 | 851 | 12346 | 13824 | 2229 | 796 | 12015 | 756 | 493 | 3383 | 148 | 0 | 0 | 0 | 0 | |||||||||||||||||||||||
| 35 | 7/29/2020 14:44 | T6FALRDO | Russia >> United States 2020 | U.S. Intelligence | Intelligence Officials | United States | Government | GRU, InfoRos, SVR | Russian intelligence | Russia | Direct Attribution | U.S. Intelligence: Russia Amplified COVID-19 Disinformation | Declassified U.S. intelligence material describes how Russian intelligence agencies have used websites InfoRos and OneWorld.Press to spread disinformation about the COVID-19 pandemic. | https://www.nytimes.com/2020/07/28/us/politics/russia-disinformation-coronavirus.html | http://web.archive.org/web/20200729183812/https://www.nytimes.com/2020/07/28/us/politics/russia-disinformation-coronavirus.html | https://pixabay.com/get/54e8d2444f56ac14f1dc8460da29317e153cdce4555774_640.jpg | IGORN/Pixabay | State Media, "Junk News" Website | 5/15/2020 | 7/15/2020 | 7/28/2020 | Deceptive Content Manipulation | 57773 | 7623 | 1188 | 66584 | 115 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 0 | 0 | 1 | 1 | 2 | 8 | 15 | 1 | 1 | 7 | 0 | 0 | 1085 | 35219 | 7055 | 0 | 0 | 582 | 503 | 0 | 30750 | 4115 | 354 | 4468 | 1976 | 611 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||
| 36 | 8/14/2020 10:45 | 619P6SZ6 | Russia >> United States | U.S. Intelligence | NCSC Director William Evanina | United States | Government | Russia, China, Iran | Russia China Iran | Russia, China, Iran | Direct Attribution | U.S. Intelligence: China, Russia, Iran Each Targeting U.S. Election | Following up on his July 24 press release, Director of the U.S. National Counterintelligence and Security Center William Evanina warned that “foreign states will continue to use covert and overt influence measures in their attempts to sway U.S. voters’ preferences and perspectives, shift U.S. policies, increase discord in the United States, and undermine the American people’s confidence in our democratic process.” He also included information about recent propaganda efforts by China, Russia, and Iran, but only the information about Russia implicated specific actors. | https://www.dni.gov/index.php/newsroom/press-releases/item/2139-statement-by-ncsc-director-william-evanina-election-threat-update-for-the-american-public | https://upload.wikimedia.org/wikipedia/commons/f/f3/William_Evanina_official_photo.jpg | Wikimedia | Facebook, Twitter, YouTube | 8/7/2020 | 150479 | 21527 | 7056 | 179062 | 90 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 11 | 2 | 2 | 6 | 0 | 0 | 33179 | 17040 | 31971 | 0 | 0 | 33170 | 9 | 0 | 14218 | 2225 | 597 | 30624 | 1003 | 344 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||||||
| 37 | 8/13/2020 11:30 | XFSW02FX | China >> United States 2020 | Graphika | United States | Private Consultancy | China | video | Graphika: China Using Spam Video Propaganda | Graphika reported that social media accounts from a pro-Chinese political spam network posted English-language videos attacking American policy and the administration of President Donald Trump, in particular its handling of the COVID-19 outbreak and racial inequality as well as its moves against TikTok. The videos were poorly made and had language errors, automated voiceovers, and profile pictures generated by deep learning processes. | https://public-assets.graphika.com/reports/graphika_report_spamouflage_dragon_goes_to_america.pdf | https://web.archive.org/web/20200813152654/https://public-assets.graphika.com/reports/graphika_report_spamouflage_dragon_goes_to_america.pdf | https://pixabay.com/get/54e6d4444f53ac14f1dc8460da29317e153cdce4545876_640.jpg | StockSnap/Pixabay | YouTube | 6/13/2020 | 8/7/2020 | 8/12/2020 | Botnets, Deep Learning Processes | 8240 | 2031 | 11781 | 22052 | 20 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 0 | 1 | 1 | 1 | 1 | 1 | 1 | 0 | 4 | 1 | 1 | 1 | 1 | 0 | 4 | 6 | 14 | 1 | 1 | 0 | 1 | 0 | 268 | 4805 | 0 | 5262 | 0 | 247 | 21 | 0 | 2404 | 1419 | 982 | 0 | 0 | 0 | 4735 | 507 | 20 | 0 | 0 | 0 | ||||||||||||||||||||||||
| 38 | 6/12/2020 14:35 | TJ82BE1R | Russia, China, Iran >> United States 2020 | U.S. Intelligence | Department of Homeland Security, ABC | Homeland Security | United States | Government | Russia, China, Iran | Russia China Iran | Russia, China, Iran | DELETE | Direct Attribution | Floyd | DHS: China, Iran, Russia Target George Floyd Protests | ABC News obtained an intelligence bulletin sent to law enforcement by the Department of Homeland Security. The bulletin accuses Russia, China and Iran of "employing state media, proxy outlets, and social media accounts to amplify criticism of the United States related to the death of George Floyd and subsequent events." | https://abcnews.go.com/US/intel-bulletin-warns-malign-actors-targeting-us-george/story?id=71184163 | http://archive.ph/F8INV | https://pixabay.com/get/53e3dc454352a414f1dc8460da29317e153cdce6555870_640.jpg | Ana Carolina Mantelli/Pixabay | State Media | Facebook, Twitter, YouTube | 6/11/2020 | 9612 | 2129 | 285 | 12026 | 30 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 0 | 1 | 1 | 1 | 4 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 12 | George Floyd Protests | 0 | 2 | 1 | 2 | 0 | 0 | 4879 | 98 | 2153 | 0 | 0 | 0 | 0 | 4173 | 682 | 24 | 50 | 48 | 0 | 1792 | 358 | 3 | 0 | 0 | 0 | |||||||||||||||||||
| 39 | 9/17/2020 17:16 | 508A8K4X | Russia, Iran, China >>> United States 2019 | Department of Homeland Security, ABC | ABC, DHS | United States | Media | Russia, Iran, China | Russia, Iran, China | Direct Attribution | DHS Analyst: Russian Narratives Spread About Biden Mental Health | ABC leaked a draft of a Department of Homeland Security intelligence bulletin on Russian efforts to promote “allegations about the poor mental health” of former Vice President Joe Biden. The memo also mentioned Iranian and Chinese propaganda about President Donald Trump’s mental health. Although the memo was submitted on July 7, it was never released because it “failed to meet the agency’s standards.” | https://abcnews.go.com/Politics/dhs-withheld-july-intelligence-bulletin-calling-russian-attack/story?id=72747130 | https://web.archive.org/web/20200914112820/https://abcnews.go.com/Politics/dhs-withheld-july-intelligence-bulletin-calling-russian-attack/story?id=72747130 | https://upload.wikimedia.org/wikipedia/commons/e/e5/Joe_Biden_%2848554137807%29.jpg | Gage Skidmore/Wikimedia | 9/1/2019 | 5/31/2020 | 9/2/2020 | 364505 | 51197 | 33345 | 449047 | 167 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 1 | 0 | 2 | 8 | 15 | 7 | 20 | 16 | 5 | 5 | 42335 | 326350 | 19349 | 634 | 30875 | 34010 | 4165 | 4160 | 264520 | 37113 | 24717 | 12327 | 6071 | 951 | 481 | 148 | 5 | 29160 | 564 | 1151 | ||||||||||||||||||||||||
| 40 | 9/18/2020 0:30 | 20W6K0PZ | Russia >>> United States 2020 | Kamala Harris | Senator Kamala Harris | United States | Influential Individual | Russia | Russia | Direct Attribution | Harris: Foreign Interference Could Cost Her the Election | Senator Kamala Harris (D-CA) said foreign interference could potentially cost her and former Vice President Joe Biden the White House in November. “I do believe that there will be foreign interference in the 2020 election and that Russia will be at the front of the line,” she said. | https://apnews.com/79be8d5f69b1bfbcc55dbaec3ca001e4 | https://web.archive.org/web/20200918042650/https://apnews.com/79be8d5f69b1bfbcc55dbaec3ca001e4 | https://upload.wikimedia.org/wikipedia/commons/9/9a/Kamala_Harris_by_Gage_Skidmore.jpg | Gage Skidmore/Wikimedia | 9/6/2020 | 215927 | 6664 | 3568 | 226159 | 26 | 0 | 1 | 0 | 1 | 0 | 2 | 1 | 1 | 0 | 2 | 0 | 1 | 1 | 0 | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 4 | 6 | 3 | 3 | 3 | 3 | 1 | 4614 | 3586 | 5266 | 59637 | 144414 | 4130 | 484 | 0 | 2239 | 989 | 358 | 4238 | 819 | 209 | 56621 | 1246 | 1770 | 142037 | 2374 | 3 | ||||||||||||||||||||||||||
| 41 | 9/18/2020 0:42 | 24DYHJXI | Russia >>> United States 2020 | U.S. Intelligence | Department of Homeland Security | United States | Government | Russia | Russia | Direct Attribution | vote | DHS: Russia Targeting Confidence in Mail-In Voting | In an internal bulletin, the Department of Homeland Security warned that Russia was trying to undermine U.S. confidence in mail-in voting. Since March, Russian state media outlets have published criticism of widespread mail-in voting, the bulletin reported. | https://abcnews.go.com/Politics/russia-amplifying-claims-mail-voter-fraud-intel-bulletin/story?id=72799959 | https://web.archive.org/save/https://abcnews.go.com/Politics/russia-amplifying-claims-mail-voter-fraud-intel-bulletin/story?id=72799959 | https://upload.wikimedia.org/wikipedia/commons/3/34/USPS_Mailbox.jpg | Iain Laurence/Wikimedia | State Media | 3/1/2020 | 9/3/2020 | 149663 | 28378 | 78931 | 256972 | 64 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 11 | 6 | 9 | 5 | 0 | 1 | 10174 | 209866 | 14147 | 0 | 123 | 4386 | 1699 | 4089 | 114653 | 20601 | 74612 | 11398 | 2705 | 44 | 0 | 0 | 0 | 91 | 32 | 0 | |||||||||||||||||||||||
| 42 | 9/18/2020 13:13 | 35JWSYN9 | Russia >>> United States 2020 | Senior U.S. Official | Brian Murphy | Brian Murphy, DHS | United States | Government | Russia | Russia | Proxy/Inferred Attribution | DHS Whistleblower: Told to Stop Writing about Russian Interference | Brian Murphy, a senior Department of Homeland Security intelligence official, alleged that he was told to stop providing intelligence reports on Russian interference in the 2020 election, in part because it “made the President look bad.” He said he was told to shift the focus to election interference by China and Iran. | https://www.nytimes.com/2020/09/09/us/politics/homeland-security-russia-trump.html | https://web.archive.org/save/https://www.nytimes.com/2020/09/09/us/politics/homeland-security-russia-trump.html | https://www.dhs.gov/sites/default/files/styles/medium/public/images/18_0709_Brian-J-Murphy.jpg?itok=TmVxNZc2 | DHS | 9/9/2020 | 1463843 | 139076 | 58123 | 1661042 | 184 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 0 | 1 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 10 | 12 | 19 | 14 | 4 | 1 | 42584 | 967221 | 110498 | 290050 | 2570 | 30918 | 6006 | 5660 | 836013 | 117108 | 14100 | 98944 | 5471 | 6083 | 283876 | 5720 | 454 | 2468 | 101 | 1 | |||||||||||||||||||||||||
| 43 | 9/18/2020 13:27 | B67Q8PAA | Venezuela >>> United States 2020 | White House, Rick Scott | United States | Government | Nicolas Maduro | Venezuela | Direct Attribution | White House: Maduro Inciting Violence at Protests | The White House said that individuals linked to Venezuelan leader Nicolás Maduro have incited violence at the George Floyd protests, but refused to discuss the “non-open source information” supporting that assessment. Senator Rick Scott (R-FL) had previously highlighted a similar claim. | https://www.miamiherald.com/news/politics-government/article243266536.html | https://web.archive.org/save/https://www.miamiherald.com/news/politics-government/article243266536.html | https://upload.wikimedia.org/wikipedia/commons/3/33/George_Floyd_Miami_Protest%2C_June_7%2C_2020_17.jpg | Mike Shaheen/Wikimedia | Individuals at protests | 6/5/2020 | 81978 | 4840 | 14096 | 100914 | 34 | 0 | 0 | 0 | 1 | 0 | 1 | 1 | 1 | 0 | 2 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 3 | 6 | 4 | 2 | 0 | 0 | 0 | 1997 | 34719 | 0 | 0 | 0 | 1661 | 336 | 0 | 34697 | 3 | 19 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||||||
| 44 | 9/18/2020 17:10 | TZ3OU1FU | Russia >>> United States 2014 | DFRLab | United States | Civil Society Organization | Operation Secondary Infektion | Russia | Direct Attribution | DFRLab: Broad Russian Influence Operation Uncovered | DFRLab uncovered a broad influence operation originating in Russia. The scale of the operation, its tradecraft, and its obsession with secrecy indicate that it was run by a persistent, sophisticated, and well-resourced organization, possibly an intelligence agency. The activity took place not only on Facebook and Twitter, but also on Medium, Reddit, and other online platforms. In all, more than 30 online services were employed across 9 languages. | https://www.atlanticcouncil.org/in-depth-research-reports/report/operation-secondary-infektion/ | https://web.archive.org/web/20200918210426/https://www.atlanticcouncil.org/in-depth-research-reports/report/operation-secondary-infektion/ | Screenshot | DFRLab | Facebook, Instagram, Twitter, Reddit, Forum Board | 1/1/2014 | 6/22/2019 | Sockpuppets, Deceptive Content Manipulation | 527 | 143 | 69 | 739 | 6 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 1 | 1 | 5 | 8 | 18 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||||
| 45 | 9/23/2020 12:33 | W1U1SUQ9 | Russia, China, Iran >>> United States 2020 | Microsoft | United States | Technology Company | Strontium, Zirconium, Phosphorus | DELETE | Russia, China, Iran | Direct Attribution | Microsoft: Cyberattacks on Election Campaigns | Microsoft detected cyberattacks targeting people and organizations involved in the upcoming presidential election, including unsuccessful attacks on both the Trump and Biden campaigns. A Russian group has attempted to hack more than 200 political organizations. Chinese hackers have attacked high-profile individuals associated with the election, particularly the Biden campaign, and has compromised almost 150 accounts. An Iranian hacker group has targeted the accounts of people associated with the Trump campaign, as well as organizations interested in Middle Eastern politics. | https://blogs.microsoft.com/on-the-issues/2020/09/10/cyberattacks-us-elections-trump-biden/ | https://web.archive.org/web/20200923162921/https://blogs.microsoft.com/on-the-issues/2020/09/10/cyberattacks-us-elections-trump-biden/ | https://upload.wikimedia.org/wikipedia/commons/thumb/9/96/Microsoft_logo_%282012%29.svg/512px-Microsoft_logo_%282012%29.svg.png | Wikimedia | Independent Media | Email, Domains | 3/1/2020 | 9/10/2020 | 9/10/2020 | Hacking - Data Exfiltration | 190160 | 29485 | 123924 | 343569 | 631 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 1 | 0 | 2 | 7 | 14 | 5 | 19 | 37 | 6 | 5 | 80101 | 108205 | 73117 | 1385 | 6297 | 6585 | 2307 | 71209 | 91287 | 11572 | 5346 | 27980 | 2717 | 42420 | 939 | 194 | 252 | 5738 | 559 | 0 | |||||||||||||||||||||
| 46 | 9/23/2020 13:28 | 5SP5O2PK | Russia >>> United States 2013 | Yahoo News | Yahoo | United States | Media | Antifa.com | Russia | Proxy/Inferred Attribution | Yahoo News: Antifa.com Connected to Russia | After an OAN correspondent noted that the website URL antifa.com redirected to Joe Biden’s campaign website, Yahoo News investigated the website and found that it was registered in Russia from 2013 until July 2019. Although any number of entities could have registered the URL, Yahoo's headline appeared to implicate Russia directly. | https://news.yahoo.com/atifa-website-one-america-chanel-rion-russia-004727528.html | https://web.archive.org/web/20200923172220/https://news.yahoo.com/atifa-website-one-america-chanel-rion-russia-004727528.html | https://upload.wikimedia.org/wikipedia/commons/1/14/Antifa_logo.jpg | Wikimedia/Enix150 | Independent Media | Domain | 1/1/2013 | 8/12/2020 | 8/12/2020 | Deceptive Content Manipulation | 161905 | 8335 | 52251 | 222491 | 19 | 1 | 1 | 0 | 0 | 1 | 3 | 1 | 1 | 1 | 3 | 1 | 0 | 1 | 0 | 0 | 2 | 0 | 1 | 1 | 0 | 0 | 2 | 6 | 10 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||
| 47 | 9/23/2020 14:11 | T81C4QVK | Russia >>> United States 2020 | Facebook, Twitter | DELETE | United States | Technology Company | Peace Data | Russia | Direct Attribution | Facebook: Assets and False News Organization Linked to Russia | Based on a tip from the FBI, Facebook removed 8 accounts and two pages linked to the Internet Research Agency. Twitter also removed five accounts associated with the network. The operation, centered around a fake media organization called Peace Data, used unsuspecting American freelancers to write left-leaning content. Peace Data had also tried unsuccessfully to place content in progressive magazines. | https://about.fb.com/news/2020/09/august-2020-cib-report/ | https://web.archive.org/web/20200923174823/https://about.fb.com/news/2020/09/august-2020-cib-report/ | https://upload.wikimedia.org/wikipedia/commons/thumb/8/89/Facebook_Logo_%282019%29.svg/800px-Facebook_Logo_%282019%29.svg.png | Wikimedia | Independent Media | 12/20/2020 | 9/1/2020 | 9/1/2020 | Sockpuppets, Deceptive Content Manipulation, Deep Learning Processes | 195215 | 17360 | 20114 | 232689 | 120 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 1 | 1 | 1 | 4 | 7 | 15 | 3 | 8 | 10 | 1 | 1 | 2145 | 140637 | 42959 | 78 | 131 | 1261 | 877 | 7 | 118292 | 10363 | 11982 | 39308 | 1900 | 1751 | 64 | 14 | 0 | 94 | 37 | 0 | ||||||||||||||||||||||
| 48 | 9/23/2020 14:54 | BGIP9QT3 | Russia >>> United States | CIA, Washington Post | United States | Government | Derkach | Russia | Direct Attribution | CIA: Report on Russian Election Interference | According to the Washington Post, the CIA published an assessment of Russian efforts to interfere in the November election in an internal, highly classified report. The report was prepared with input from the NSA and FBI and includes a description of Andriy Derkach’s efforts to disseminate disparaging information about former Vice President Joe Biden. | https://www.washingtonpost.com/opinions/2020/09/22/secret-cia-assessment-putin-probably-directing-influence-operation-denigrate-biden/ | https://web.archive.org/save/https://www.washingtonpost.com/opinions/2020/09/22/secret-cia-assessment-putin-probably-directing-influence-operation-denigrate-biden/ | https://upload.wikimedia.org/wikipedia/commons/9/95/CIA_Original_Headquarters_Building.jpg | Wikimedia | Independent Media | Personal communications | 8/31/2020 | 9/22/2020 | 287549 | 69132 | 82309 | 438990 | 238 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 11 | 12 | 17 | 28 | 3 | 1 | 37016 | 284209 | 49479 | 856 | 35 | 12314 | 4633 | 20069 | 180778 | 58359 | 45072 | 45261 | 1921 | 2297 | 716 | 135 | 5 | 17 | 18 | 0 | ||||||||||||||||||||||||
| 49 | 9/23/2020 15:03 | ELWQ0IFJ | China >>> United States 2016 | United States | Technology Company | China | China | Direct Attribution | inauthentic | Facebook: Assets Linked to China | Facebook removed 155 accounts, 11 pages, 9 groups, and 6 Instagram accounts for coordinated inauthentic behavior. The activity originated in China and focused on the U.S. and Southeast Asia, although the network gained almost no following in the U.S. It posted content both in support of and against presidential candidates Pete Buttigieg, former Vice President Joe Biden and President Donald Trump, as well as commentary on naval activity in the South China Sea and regional politics. | https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-china-philippines/ | https://web.archive.org/web/20200923185920/https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-china-philippines/ | https://upload.wikimedia.org/wikipedia/commons/2/2b/China_flag.JPG | Ecow/Wikimedia | Independent Media | Facebook, Instagram | 9/1/2016 | 9/22/2020 | 9/22/2020 | Sockpuppets, Botnets, Deceptive Content Manipulation | 157906 | 3988 | 2810 | 164704 | 263 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 1 | 1 | 3 | 7 | 14 | 4 | 11 | 15 | 3 | 0 | 1676 | 19332 | 10188 | 1070 | 0 | 1531 | 63 | 82 | 16224 | 994 | 2114 | 9427 | 571 | 190 | 912 | 154 | 4 | 0 | 0 | 0 | 11/12/2020 | 9/22/2020 | https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-china-philippines/ | 11 | 60 | 155 | 133000 | 9 | 59000 | 0 | 6 | 150 | 1 | |||||||||
| 50 | 9/23/2020 16:54 | 44PI58XE | Russia >>> United States | FBI | United States | Government | Russia | Russia | Direct Attribution | FBI Director: Russia Undermining Joe Biden | In testimony to the House Committee on Homeland Security, FBI Director Christopher Wray said that Russia continues to undermine former Vice President Joe Biden in an attempt to influence the presidential election. Russia uses social media, online proxies, state media, and online journals to “to denigrate [Biden] and what the Russians see as an anti-Russian establishment,” Wray said. | https://thehill.com/policy/cybersecurity/516912-fbi-director-wray-warns-russia-is-interfering-in-election-to-undermine | https://web.archive.org/web/20200923204839/https://thehill.com/policy/cybersecurity/516912-fbi-director-wray-warns-russia-is-interfering-in-election-to-undermine | https://upload.wikimedia.org/wikipedia/commons/3/31/FBI_Headquarters_at_night.jpg | Wikimedia | State Media | Facebook, Instagram, Twitter, YouTube, Reddit | 11/3/2020 | 9/17/2020 | Sockpuppets, Botnets, Deceptive Content Manipulation, Deep Learning Processes | 255258 | 22817 | 95676 | 373751 | 59 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 0 | 1 | 1 | 1 | 4 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 12 | 1 | 9 | 11 | 5 | 1 | 2451 | 204716 | 140730 | 2088 | 637 | 2203 | 248 | 0 | 149414 | 19092 | 36210 | 79144 | 2135 | 59451 | 1575 | 508 | 5 | 608 | 29 | 0 | |||||||||||||||||||||||
| 51 | 9/24/2020 9:50 | 32NQ6NQW | Russia,China, Iran >>> United States | Mike Pompeo | United States | Government | Russia,China, Iran | Russia,China, Iran | Direct Attribution | coronavirus | Mike Pompeo: Disinformation on COVID-19 | Secretary of State Mike Pompeo accused China, Russia, and Iran of “coordinated efforts to disparage” the U.S. response to COVID-19. He attributed the disinformation to both governments and individuals. He also mentioned false rumors about lockdowns in the U.S. and the origin of the virus. | https://www.whitehouse.gov/briefings-statements/remarks-president-trump-vice-president-pence-members-c-oronavirus-task-force-press-briefing/ | https://web.archive.org/web/20200924134441/https://www.whitehouse.gov/briefings-statements/remarks-president-trump-vice-president-pence-members-c-oronavirus-task-force-press-briefing/ | https://upload.wikimedia.org/wikipedia/commons/c/c8/White_House_Press_Briefing_%2849679776593%29.jpg | Wikimedia | Independent Media | Facebook, Twitter | 3/20/2020 | Sockpuppets, Deceptive Content Manipulation | 63308 | 9935 | 555 | 73798 | 95 | 0 | 0 | 0 | 1 | 0 | 1 | 1 | 1 | 0 | 2 | 0 | 0 | 1 | 0 | 1 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 3 | 5 | 3 | 2 | 5 | 2 | 3 | 2957 | 905 | 38043 | 7346 | 3020 | 2567 | 316 | 74 | 899 | 6 | 0 | 33481 | 4377 | 185 | 5810 | 1503 | 33 | 1984 | 1017 | 19 | |||||||||||||||||||||||
| 52 | 9/24/2020 11:48 | DHK75NES | China >>> United States | Department of State | DELETE | United States | Government | Zhao Lijian, Foreign Ministry | Zhao Lijian | China | Direct Attribution | coronavirus | State Department: Chinese Ambassador Zhao Lijian Spread Conspiracy | Zhao Lijian, the Chinese Ambassador to the U.S., implied in a Tweet that the U.S. might be responsible for COVID-19: “It might be US army who brought the epidemic to Wuhan. Be transparent! Make public your data! US owe us an explanation!” Hours later, he was summoned to the State Department by Assistant Secretary of State David Stilwell. | https://www.cnn.com/2020/03/13/politics/state-department-chinese-ambassador-coronavirus/index.html | https://web.archive.org/save/https://www.cnn.com/2020/03/13/politics/state-department-chinese-ambassador-coronavirus/index.html | https://upload.wikimedia.org/wikipedia/commons/2/2f/MOFAChinaChaoyang.JPG | Wikimedia/WhisperToMe | State Media | 3/12/2020 | 3/12/2020 | Deceptive Content Manipulation | 685081 | 29512 | 2300 | 716893 | 40 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 0 | 1 | 1 | 1 | 1 | 4 | 8 | 16 | 2 | 9 | 5 | 2 | 0 | 1868 | 393164 | 26098 | 6714 | 0 | 1388 | 408 | 72 | 373827 | 18541 | 796 | 22891 | 2071 | 1136 | 4507 | 2173 | 34 | 0 | 0 | 0 | |||||||||||||||||||||
| 53 | 9/24/2020 12:03 | YW777IWI | Russia, China, Iran >>> United States | State Department, GEC, Lea Gabrielle | State Department, GEC | United States | Government | Russia, China, Iran | Russia, China, Iran | Direct Attribution | State Department: Russia, China, Iran Increase Disinformation | Lea Gabrielle, Special Envoy and Coordinator of the State Department’s Global Engagement Center, said that Russia, China, and Iran have sharply increased their disinformation about the coronavirus since January, sometimes repeating and amplifying each other’s propaganda. | https://www.state.gov/briefing-with-special-envoy-lea-gabrielle-global-engagement-center-on-disinformation-and-propaganda-related-to-covid-19/ | https://web.archive.org/web/20200924155426/https://www.state.gov/briefing-with-special-envoy-lea-gabrielle-global-engagement-center-on-disinformation-and-propaganda-related-to-covid-19/ | https://upload.wikimedia.org/wikipedia/commons/e/e9/Truman_building.jpg | Wikimedia/Ctac | Independent Media | Facebook, Instagram, Twitter, YouTube, Reddit | 3/27/2020 | 3/27/2020 | Sockpuppets | 5323 | 2571 | 649 | 8543 | 21 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 1 | 0 | 2 | 8 | 15 | 0 | 2 | 1 | 3 | 1 | 0 | 2872 | 564 | 2144 | 43 | 0 | 0 | 0 | 1732 | 535 | 605 | 267 | 297 | 0 | 871 | 1273 | 0 | 39 | 4 | 0 | ||||||||||||||||||||||
| 54 | 9/24/2020 12:35 | XVMM45G3 | China >>> United States | German Marshall Fund | Alliance for Securing Democracy | United States | Civil Society Organization | China | China | Direct Attribution | GMF: Twitter Output from Chinese Accounts Rises Sharply | An analysis by the German Marshall Fund found that Twitter output from official Chinese accounts around the world has almost doubled since January, reaching 90,000 tweets in April and May. Since the COVID-19 outbreak, Chinese accounts "have become more aggressive [and] more conspiratorial.” | https://www.nbcnews.com/news/world/china-launches-new-twitter-accounts-90-000-tweets-covid-19-n1207991 | https://web.archive.org/web/20200924163219/https://www.nbcnews.com/news/world/china-launches-new-twitter-accounts-90-000-tweets-covid-19-n1207991 | https://upload.wikimedia.org/wikipedia/commons/f/f6/Coronavirus_SARS-CoV-2.jpg | Wikimedia/Felipe Esquivel Reed | State Media | 5/20/2020 | 5/20/2020 | Brigading, Deceptive Content Manipulation | 10660 | 1105 | 903 | 12668 | 27 | 1 | 1 | 1 | 0 | 1 | 4 | 1 | 1 | 1 | 3 | 0 | 1 | 1 | 1 | 0 | 3 | 1 | 1 | 1 | 0 | 1 | 4 | 7 | 14 | 0 | 1 | 0 | 1 | 2 | 0 | 4882 | 0 | 176 | 2999 | 0 | 0 | 0 | 3478 | 505 | 899 | 0 | 0 | 0 | 129 | 45 | 2 | 2629 | 368 | 2 | |||||||||||||||||||||||
| 55 | 9/24/2020 12:48 | 4B02962Z | China >>> United Kingdom | BBC | United Kingdom | Media | China | China | Proxy/Inferred Attribution | BBC: Fake Accounts Pushing Chinese Propaganda | A BBC investigation found that more than 1,200 fake or hijacked social media accounts have been pushing pro-Chinese government messages about the coronavirus pandemic on Facebook, Twitter and YouTube. Although the BBC could not definitively link the accounts to the Chinese government, it noted similarities to Chinese networks discovered by Twitter in August 2019 and Graphika in April 2020. | https://www.bbc.com/news/blogs-trending-52657434 | https://web.archive.org/web/20200924163841/https://www.bbc.com/news/blogs-trending-52657434 | https://upload.wikimedia.org/wikipedia/commons/6/62/BBC_News_2019.svg | Wikimedia/BBC News | Independent Media | Facebook, Twitter, YouTube | 5/28/2020 | 5/28/2020 | Sockpuppets, Botnets, Deceptive Content Manipulation | 37995 | 771 | 378 | 39144 | 14 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 0 | 1 | 1 | 1 | 0 | 3 | 8 | 15 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 24352 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 23976 | 0 | 376 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||||
| 56 | 9/24/2020 13:15 | EPRR4RES | China >>> United States | GEC, Department of State | GEC | United States | Government | China | China | Direct Attribution | State Department: Inauthentic Twitter Accounts Tied to China | The State Department’s Global Engagement Center announced that it had uncovered a network of inauthentic Twitter accounts designed to amplify Chinese propaganda. When it sent a sample of 5,000 accounts to Twitter, however, Twitter found that many of the accounts belonged to government entities, NGOs, and journalists. | https://www.state.gov/briefing-with-special-envoy-lea-gabrielle-global-engagement-center-update-on-prc-efforts-to-push-disinformation-and-propaganda-around-covid/ | https://web.archive.org/web/20200924171128/https://www.state.gov/briefing-with-special-envoy-lea-gabrielle-global-engagement-center-update-on-prc-efforts-to-push-disinformation-and-propaganda-around-covid/ | https://upload.wikimedia.org/wikipedia/commons/0/0b/Flag_of_the_United_States_Department_of_State.svg | Wikimedia | State Media | Facebook, Twitter | 5/8/2020 | 5/8/2020 | Brigading, Sockpuppets, Botnets, Deceptive Content Manipulation | 7064 | 2143 | 932 | 10139 | 24 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 0 | 0 | 1 | 8 | 14 | 1 | 2 | 2 | 2 | 0 | 1641 | 2377 | 945 | 4011 | 0 | 1057 | 449 | 135 | 2206 | 171 | 0 | 737 | 206 | 2 | 2874 | 1127 | 10 | 0 | 0 | 0 | ||||||||||||||||||||||
| 57 | 9/24/2020 13:36 | 5Q5D6SZO | China >>> United States | Robert O'Brien | United States | Government | China | China | Direct Attribution | U.S. Official: China Has the Largest Program to Influence Election | National Security Advisor Robert O’Brien said that China “had the most massive program to influence the United States politically,” followed by Iran and then Russia. He did not provide any additional details. | https://www.reuters.com/article/us-usa-election-china/trump-security-adviser-says-china-has-biggest-election-interference-program-idUSKBN25V2NY | https://web.archive.org/web/20200924173401/https://www.reuters.com/article/us-usa-election-china/trump-security-adviser-says-china-has-biggest-election-interference-program-idUSKBN25V2NY | https://upload.wikimedia.org/wikipedia/commons/thumb/8/8d/Seal_of_the_U.S._National_Security_Agency.svg/600px-Seal_of_the_U.S._National_Security_Agency.svg.png | Wikimedia | Independent Media | 9/4/2020 | 9/4/2020 | Hacking - DDoS, Hacking - Data Exfiltration | 47617 | 5359 | 773363 | 826339 | 25 | 1 | 1 | 1 | 1 | 0 | 4 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 0 | 1 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 7 | 9 | 1 | 2 | 6 | 1 | 0 | 5675 | 2430 | 806283 | 9461 | 0 | 4982 | 692 | 1 | 1122 | 1303 | 5 | 29798 | 3132 | 773353 | 9376 | 82 | 3 | 0 | 0 | 0 | ||||||||||||||||||||||||
| 58 | 9/24/2020 13:47 | 0R5N2DK5 | Russia >>> United States | Kamala Harris | United States | Influential Individual | Russian Bots | Russia | Direct Attribution | Harris: Campaign Targeted by Russian Bots | Senator Kamala Harris (D-VA) claimed her presidential campaign was targeted by Russian bots. A Twitter spokesperson said that the company had no evidence that Harris was the target of state-backed bots, however. | https://www.cnn.com/2019/07/16/politics/kamala-harris-twitter-bots/index.html | https://web.archive.org/web/20200924174300/https://www.cnn.com/2019/07/16/politics/kamala-harris-twitter-bots/index.html | https://upload.wikimedia.org/wikipedia/commons/2/29/Kamala_Harris_with_LACC_reps.jpg | Wikimedia | Independent Media | 7/16/2019 | 7/16/2019 | Botnets | 3160 | 832 | 15 | 4007 | 6 | 0 | 1 | 0 | 0 | 0 | 1 | 1 | 1 | 0 | 2 | 1 | 0 | 1 | 1 | 0 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 3 | 6 | 0 | 2 | 0 | 0 | 0 | 0 | 3900 | 0 | 0 | 0 | 0 | 0 | 0 | 3131 | 754 | 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||||
| 59 | 9/24/2020 13:55 | AT5BWCEZ | Russia >>> United States | Pentagon, Department of Defense | United States | Government | Russia | Russia | Direct Attribution | U.S. Officials: Russian Influence Operation Aimed at Military | A survey of armed services households found that 46% viewed Russia as an ally. This result concerned defense officials, who worried that Russia intended to seed U.S. military personnel with the right type of disinformation so that they would be predisposed to view Russia favorably. Defense officials noted that a Russian influence campaign has been targeting U.S. military personnel since 2017. | https://www.voanews.com/usa/pentagon-concerned-russia-cultivating-sympathy-among-us-troops | https://web.archive.org/web/20200924175211/https://www.voanews.com/usa/pentagon-concerned-russia-cultivating-sympathy-among-us-troops | https://upload.wikimedia.org/wikipedia/commons/0/01/Pentagon_satellite_image.jpg | Wikimedia | Independent Media | Facebook, Instagram, Twitter, YouTube, Reddit | 12/8/2019 | 12/8/2019 | Sockpuppets, Botnets, Deceptive Content Manipulation | 5315 | 767 | 135 | 6217 | 44 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 1 | 1 | 1 | 1 | 4 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 12 | 0 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 1302 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 615 | 577 | 110 | 0 | 0 | 0 | |||||||||||||||||||||||
| 60 | 9/24/2020 14:59 | QGYY2XPE | Russia >>> United States 2020 | Bloomberg News | U.S. intelligence | United States | Media | Russia | Russia | Direct Attribution | Joe Biden | Bloomberg News: U.S. Officials Assess Russian Attacks on Biden | Bloomberg News reported that U.S. intelligence and law enforcement officials were assessing whether Russia was trying to undermine Joe Biden. The inquiry explored whether Russia may be promoting controversy over Biden's involvement in U.S. policy toward Ukraine at the same time as his son worked for an energy company there. | https://www.bloomberg.com/news/articles/2020-01-10/u-s-probes-if-russia-targeting-biden-in-2020-election-meddling | https://web.archive.org/web/20200908062851/https://www.bloomberg.com/news/articles/2020-01-10/u-s-probes-if-russia-targeting-biden-in-2020-election-meddling | https://upload.wikimedia.org/wikipedia/commons/f/f8/Joe_Biden_%2849404623708%29.jpg | Wikimedia/Gage Skidmore | Independent Media | Facebook, Instagram, Twitter, YouTube, Reddit | 9/1/2020 | 11/3/2020 | 1/10/2020 | Deceptive Content Manipulation | 140973 | 5171 | 60716 | 206860 | 33 | 0 | 1 | 1 | 1 | 1 | 4 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 7 | 10 | 1 | 3 | 0 | 4 | 1 | 3511 | 90174 | 0 | 24332 | 118 | 1497 | 723 | 1291 | 30412 | 355 | 59407 | 0 | 0 | 0 | 21242 | 3087 | 3 | 103 | 15 | 0 | ||||||||||||||||||||
| 61 | 9/24/2020 16:11 | M5L3A3M0 | Russia >>> United States | Intelligence Officials | United States | Government | Russia | Russia | Direct Attribution | U.S. Intelligence: Russia Interfering in Support of Trump | Intelligence officials briefed the House Intelligence Committee that Russia was interfering in the 2020 election in support of President Donald Trump. They also disclosed that Russia intended to interfere with the 2020 Democratic primaries. The briefing angered Trump, and his allies challenged the conclusions reached by the intelligence officials. | https://www.nytimes.com/2020/02/20/us/politics/russian-interference-trump-democrats.html | https://web.archive.org/web/20200924200912/https://www.nytimes.com/2020/02/20/us/politics/russian-interference-trump-democrats.html | https://upload.wikimedia.org/wikipedia/commons/1/10/United_States_House_Committee_on_Intelligence_hearing_on_Emerging_Technologies_and_National_Security_-_Posturing_the_U.S._Intelligence_Community_for_Success.jpg | Wikimedia/Adam Schiff | Independent Media | Facebook, Instagram, Twitter, YouTube, Reddit | 2/13/2020 | 2/20/2020 | Sockpuppets, Deceptive Content Manipulation | 2137292 | 181394 | 143558 | 2462244 | 841 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 0 | 1 | 1 | 1 | 4 | 0 | 0 | 0 | 1 | 0 | 1 | 8 | 13 | 41 | 28 | 35 | 27 | 21 | 254251 | 1351224 | 169200 | 140884 | 75671 | 215044 | 22002 | 17205 | 1233532 | 110608 | 7084 | 129699 | 2542 | 36959 | 114349 | 25767 | 768 | 70999 | 4618 | 54 | |||||||||||||||||||||||
| 62 | 9/24/2020 16:17 | QOTUZHN6 | Russia >>> United States 2020 | Chad Wolf, DHS | United States | Government | Russia | Russia | Direct Attribution | DHS | U.S. Official: COVID-19 Lockdown Rumors Tied to Russia | Acting Homeland Security Secretary Chad Wolf discussed text messages claiming that the U.S. was about to impose a COVID-19 lockdown, describing them as a “disinformation campaign” that might have originated in Russia. | https://thehill.com/homenews/administration/488894-dhs-chief-false-reports-of-national-shutdown-may-be-part-of-russian | https://web.archive.org/web/20200924201525/https://thehill.com/homenews/administration/488894-dhs-chief-false-reports-of-national-shutdown-may-be-part-of-russian | https://upload.wikimedia.org/wikipedia/commons/2/22/Chad_F._Wolf_2019.jpg | Wikimedia/Inter-American Dialogue | Independent Media | WhatsApp, SMS | 3/1/2020 | 3/22/2020 | 3/22/2020 | Deceptive Content Manipulation | 3358 | 126 | 152 | 3636 | 16 | 1 | 1 | 0 | 1 | 0 | 3 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 6 | 7 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 2649 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 2586 | 59 | 4 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||
| 63 | 9/24/2020 16:32 | V5TT6RXM | Russia >>> United States | Department of Homeland Security | Yahoo News | United States | Government | Russia | Russia | Direct Attribution | DHS: Russia Likely to Target Election | Yahoo News obtained a DHS intelligence assessment that concluded, “Russian influence actors almost certainly will continue to target U.S. audiences with influence activities that seek to advance Russian interests, and probably view the 2020 presidential election as a key opportunity to do so.” The assessment, which was coordinated with the FBI, CIA, and NSA, examined a small number of social media accounts likely controlled by Russian influence actors and found that they attempted to aggravate social and racial tensions, undermine trust in US officials, and criticize anti-Russian politicians. | https://news.yahoo.com/dhs-warns-russia-influence-2020-elections-170005501.html | https://web.archive.org/web/20200924202820/https://news.yahoo.com/dhs-warns-russia-influence-2020-elections-170005501.html | https://www.gao.gov/extracts/81ab3b0a5e06d5402a59d642d5ee5e98/rId17_image5.png | GAO | Independent Media | Facebook, Instagram, Twitter, YouTube, Reddit | 1/1/2019 | 10/24/2019 | Sockpuppets, Deceptive Content Manipulation | 7371 | 680 | 5 | 8056 | 7 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 1 | 0 | 1 | 0 | 2 | 8 | 13 | 0 | 1 | 0 | 0 | 0 | 0 | 236 | 0 | 0 | 0 | 0 | 0 | 0 | 100 | 136 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||
| 64 | 9/24/2020 16:42 | 53QRMVHS | Russia >>> United States 2017 | Graphika | United States | Private Consultancy | Russia | Russia | Proxy/Inferred Attribution | UK trade | Graphika: UK-US Trade Documents Leaked by Russia | Graphika assessed that unredacted UK-US trade documents leaked before Britain’s December 2019 general election were posted and amplified in a way that closely resembled the Russian information operation known as Secondary Infektion. Graphika could not definitively attribute the documents to the unknown actors behind that operation, however. | https://public-assets.graphika.com/reports/graphika_report_uk_trade_leaks_updated_12.12.pdf | https://web.archive.org/web/20200924203710/https://public-assets.graphika.com/reports/graphika_report_uk_trade_leaks_updated_12.12.pdf | https://upload.wikimedia.org/wikipedia/commons/d/d6/Lenin_museum%2C_Moscow_center.jpg | Wikimedia/Andrey | Independent Media | Facebook, Instagram, Twitter, YouTube, Reddit | 5/4/2017 | 12/2/2019 | Sockpuppets, Botnets, Hacking - Data Exfiltration | 7378 | 9128 | 914 | 17420 | 27 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 0 | 1 | 2 | 1 | 1 | 1 | 1 | 0 | 4 | 1 | 1 | 1 | 1 | 1 | 5 | 7 | 16 | 1 | 3 | 3 | 2 | 1 | 257 | 2789 | 452 | 3743 | 227 | 165 | 70 | 22 | 1932 | 753 | 104 | 77 | 223 | 152 | 1344 | 2357 | 42 | 130 | 97 | 0 | ||||||||||||||||||||||
| 65 | 9/24/2020 16:52 | 025KQA5P | Iran >>> United States | The Daily Beast, Twitter | DELETE | United States | Media | Iran | Iran | Proxy/Inferred Attribution | reporter | Twitter: Fake, Pro-Iran Accounts Impersonate Reporters | Twitter suspended fake accounts impersonating New York Post and Haaretz reporters. The accounts promoted false stories that contained pro-Iranian government propaganda as well as attacks on Iranian opposition groups and Israel. | https://www.thedailybeast.com/new-york-post-reporters-identity-stolen-to-spread-iran-propaganda | https://web.archive.org/web/20200925043527/https://www.thedailybeast.com/new-york-post-reporters-identity-stolen-to-spread-iran-propaganda | https://upload.wikimedia.org/wikipedia/commons/2/26/New_York_Post.svg | Wikimedia | Independent Media | 1/8/2020 | Sockpuppets, Deceptive Content Manipulation | 872 | 1804 | 170 | 2846 | 18 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 0 | 0 | 0 | 1 | 1 | 2 | 8 | 14 | 2 | 4 | 1 | 0 | 0 | 2144 | 325 | 193 | 0 | 0 | 478 | 1513 | 153 | 177 | 134 | 14 | 123 | 67 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||||
| 66 | 9/24/2020 17:04 | NGORFHPJ | Albania >>> United States | The Intercept | DELETE | United States | Media | Mojahedin-e-Khalq | Heshmet Alavi | Albania | DELETE | Direct Attribution | The Intercept: Articles Written by MEK Persona | The Intercept reported that a fictitious persona going by the name Heshmat Alavi, which had published articles in Forbes, The Hill, the Daily Caller, and The Federalist, was actually a group account run by Iranian opposition group Mojahedin-e-Khalq (MEK). One of the those articles was cited by the White House in an exchange with a reporter. | https://theintercept.com/2019/06/09/heshmat-alavi-fake-iran-mek/ | https://web.archive.org/web/20200924210145/https://theintercept.com/2019/06/09/heshmat-alavi-fake-iran-mek/ | https://upload.wikimedia.org/wikipedia/commons/3/32/Logo_of_the_People%27s_Mujahedin_of_Iran.png | Wikimedia | Independent Media | Mainstream media | 4/1/2018 | 6/9/2019 | Sockpuppets | 13585 | 12441 | 337 | 26363 | 121 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 0 | 1 | 0 | 1 | 0 | 2 | 8 | 14 | 3 | 3 | 2 | 2 | 0 | 20261 | 2301 | 94 | 268 | 0 | 8785 | 11202 | 274 | 1653 | 590 | 58 | 49 | 45 | 0 | 185 | 78 | 5 | 0 | 0 | 0 | ||||||||||||||||||||
| 67 | 9/24/2020 17:19 | Z6BKMSE3 | Russia >>> United States 2019 | United States | Technology Company | Russia | Russia | Direct Attribution | takedown | Facebook: Assets Linked to Russia | Facebook removed three separate networks originating in Russia for coordinated inauthentic behavior. Together, these networks totaled 242 accounts, 42 pages, 19 groups, and 45 Instagram accounts. They were all targeted in part at the U.S. and engaged in activities like impersonating locals in order to contact news organizations, driving viewers to off-platform sites, soliciting written content, and criticizing U.S. policy in the Middle East. These networks had connections to the Internet Research Agency and, most likely, to Russian military intelligence. | https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-russia/ | https://web.archive.org/web/20200924211455/https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-russia/ | https://upload.wikimedia.org/wikipedia/commons/6/60/%D0%94%D0%BE%D0%BC_%D0%BF%D1%80%D0%B0%D0%B2%D0%B8%D1%82%D0%B5%D0%BB%D1%8C%D1%81%D1%82%D0%B2%D0%B0_%D0%A0%D0%A4.jpg | Wikimedia/Krylov Ivan | Independent Media | Facebook, Instagram | 7/1/2019 | 9/24/2020 | 9/24/2020 | Sockpuppets, Deceptive Content Manipulation | 66684 | 2531 | 381 | 69596 | 138 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 1 | 2 | 7 | 13 | 0 | 3 | 27 | 0 | 0 | 0 | 3219 | 50555 | 0 | 0 | 0 | 0 | 0 | 3041 | 176 | 2 | 49290 | 968 | 297 | 0 | 0 | 0 | 0 | 0 | 0 | 11/12/2020 | 9/24/2020 | https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-russia/ | 43 | 17860 | 252 | 73400 | 19 | 9501 | 0 | 40 | 15100 | 3 | ||||||||||
| 68 | 10/7/2020 14:17 | PDYLZELT | >>> United States 2020 | U.S. Intelligence | FBI, CISA | United States | Government | Foreign actors | DELETE | Proxy/Inferred Attribution | voting | FBI, CISA: Disinformation About Election Systems Vulnerability | The FBI and CISA issued a public service announcement warning that “foreign actors and cyber criminals” are spreading disinformation about cyberattacks on voter registration databases and voting systems. | https://www.ic3.gov/media/2020/200928.aspx | https://web.archive.org/web/20201004041755if_/https://www.ic3.gov/media/2020/200928.aspx | https://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Cybersecurity.png/640px-Cybersecurity.png | VIN JD/Pixabay | 9/28/2020 | 85901 | 18487 | 262 | 104650 | 105 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 1 | 0 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 11 | 0 | 3 | 6 | 3 | 0 | 0 | 90633 | 1898 | 497 | 0 | 0 | 0 | 0 | 76419 | 13969 | 245 | 1523 | 375 | 0 | 440 | 55 | 2 | 0 | 0 | 0 | |||||||||||||||||||||||||
| 69 | 10/8/2020 1:32 | HDBZ7IBP | United States, Russia >>> United States 2020 | Congressional Democrats | House Intelligence Committee Chairman Adam Schiff | Adam Schiff | United States | Government | Russia, Donald Trump | United States, Russia | DELETE | Direct Attribution | amplify | Schiff: Russia Amplifying Trump's Attacks on Vote-by-Mail | House Intelligence Committee Chairman Adam Schiff claimed that the Russians “have been amplifying Trump’s false attacks on absentee voting” after a briefing by intelligence officials on Russian disinformation about mail-in voting. The intelligence briefing did not explicitly link the increase in Russian disinformation to Trump’s comments. | https://www.nytimes.com/2020/09/29/us/politics/mail-in-voting-russian-disinformation.html | https://web.archive.org/web/20201005043418/https://www.nytimes.com/2020/09/29/us/politics/mail-in-voting-russian-disinformation.html | https://upload.wikimedia.org/wikipedia/commons/5/5e/Adam_Schiff_%2848010611813%29.jpg | Gage Skidmore/Wikimedia | 9/29/2020 | 15684 | 1107 | 39068 | 55859 | 26 | 1 | 1 | 0 | 0 | 1 | 3 | 0 | 1 | 0 | 1 | 0 | 0 | 1 | 1 | 0 | 2 | 0 | 0 | 0 | 0 | 1 | 1 | 4 | 7 | 1 | 3 | 2 | 0 | 0 | 4467 | 9994 | 13 | 0 | 0 | 3895 | 572 | 0 | 9731 | 251 | 12 | 4 | 9 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||||
| 70 | 10/8/2020 1:52 | 46PA2IGK | Iran >>> United States 2020 | United States | Technology Company | Iran | Iran | Proxy/Inferred Attribution | Twitter: Assets Linked to Iran | Based on a tip from the FBI, Twitter removed approximately 130 accounts that appeared to originate in Iran. These accounts tried to disrupt the public conversation on the presidential debate, but had very low engagement. | https://twitter.com/TwitterSafety/status/1311462538056544258?s=20 | https://web.archive.org/web/20201008054930/https://twitter.com/TwitterSafety/status/1311462538056544258?s=20 | https://pbs.twimg.com/profile_images/875170358218735617/qYyASCpq_400x400.jpg | 9/29/2020 | 9/30/2020 | Sockpuppets | 2671 | 5864 | 277 | 8812 | 27 | 0 | 1 | 1 | 1 | 1 | 4 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 0 | 0 | 0 | 0 | 1 | 7 | 13 | 0 | 0 | 8 | 1 | 0 | 0 | 0 | 1007 | 159 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 584 | 174 | 249 | 64 | 84 | 11 | 0 | 0 | 0 | |||||||||||||||||||||||||||
| 71 | 10/8/2020 2:20 | P9G8Q1JN | Israel, United States >>> United Kingdom 2019 | The Guardian | United Kingdom | Media | Right-wing Facebook groups | Israel, United States | Israel | Non-Aligned Commercial Enterprise | The Guardian: Islamophobic, For-Profit Disinformation Network Discovered | The Guardian published an article on a network of right-wing Facebook groups that shared coordinated political content, much of it Islamophobic in nature. An Israeli man attained administrator privileges on pre-existing right-wing groups and posted identical links on all of them in order to drive traffic to off-platform sites, where he earned ad revenue. | https://www.theguardian.com/australia-news/2019/dec/06/inside-the-hate-factory-how-facebook-fuels-far-right-profit | https://web.archive.org/web/20201008061122/https://www.theguardian.com/australia-news/2019/dec/06/inside-the-hate-factory-how-facebook-fuels-far-right-profit | see source url | Darwin Laganzon/Pixabay | 1/1/2016 | 12/5/2019 | Sockpuppets | 52240 | 12656 | 6045 | 70941 | 71 | 1 | 1 | 0 | 1 | 1 | 4 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 0 | 1 | 1 | 1 | 0 | 3 | 7 | 14 | 1 | 5 | 1 | 0 | 0 | 1 | 62438 | 28 | 0 | 0 | 0 | 1 | 0 | 45605 | 10897 | 5936 | 23 | 5 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||||
| 72 | 10/8/2020 2:44 | 1GDZM7XT | Russia >>> United States, United Kingdom 2020 | Graphika, Reuters | DELETE | United States, United Kingdom | Private Consultancy | NAEBC, Internet Research Agency | Russia | Proxy/Inferred Attribution | Graphika: Russia Targets U.S. Far-Right | According to Graphika, people associated with the Russian Internet Research Agency ran a site called Newsroom for American and European Based Citizens. The site solicited articles from followers and freelance journalists and was aimed at right-wing readers. | https://www.reuters.com/article/usa-election-russia-disinformation/exclusive-russian-operation-masqueraded-as-right-wing-news-site-to-target-u-s-voters-sources-idUSKBN26M5OP | https://web.archive.org/web/20201008064132/https://uk.reuters.com/article/usa-election-russia-disinformation/exclusive-russian-operation-masqueraded-as-right-wing-news-site-to-target-u-s-voters-sources-idUSKBN26M5OP | https://img.thedailybeast.com/image/upload/c_crop,d_placeholder_euli9k,h_711,w_1264,x_83,y_0/dpr_1.5/c_limit,w_1044/fl_lossy,q_auto/v1601554871/Screen_Shot_2020-10-01_at_13.20.52_u8uluk | NAEBC/The Daily Beast | "Junk News" | Parler, Gab | 10/1/2020 | Sockpuppets, Deceptive Content Manipulation | 28159 | 1765 | 105121 | 135045 | 66 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 1 | 1 | 1 | 1 | 1 | 5 | 8 | 17 | 4 | 4 | 3 | 0 | 1 | 6351 | 5143 | 18825 | 0 | 739 | 4322 | 642 | 1387 | 4469 | 366 | 308 | 14607 | 172 | 4046 | 0 | 0 | 0 | 551 | 143 | 45 | |||||||||||||||||||||||
| 73 | 10/8/2020 15:26 | MI3UBT21 | United States, Russia >>> United States, Russia 2020 | U.S. Intelligence | Director of National Intelligence John Ratcliffe, Russia | John Ratcliffe | United States, Russia | Government | Hillary Clinton, Russia | Hillary Clinton | United States, Russia | Russia | Proxy/Inferred Attribution | ODNI: Declassfiying Russian Intelligence About Foreign Interference and Clinton Campaign | Director of National Intelligence John Ratcliffe declassified information on a Russian intelligence assessment claiming that “Hillary Clinton had approved a campaign plan to stir up a scandal against U.S. Presidential candidate Donald Trump by tying him to Putin and the Russians' hacking of the Democratic National Committee.” He acknowledged that U.S. intelligence officials did not know the accuracy of this assessment. | https://www.judiciary.senate.gov/imo/media/doc/09-29-20_Letter%20to%20Sen.%20Graham_Declassification%20of%20FBI's%20Crossfire%20Hurricane%20Investigations_20-00912_U_SIGNED-FINAL.pdf | https://web.archive.org/web/20201007083018/https://www.judiciary.senate.gov/press/rep/releases/chairman-graham-releases-information-from-dni-ratcliffe-on-fbis-handling-of-crossfire-hurricane | https://upload.wikimedia.org/wikipedia/commons/6/65/Hillary_Clinton_at_Planned_Parenthood-8_%28cropped%29.jpg | Lorie Shaull/Wikimedia | 7/26/2016 | 9/29/2020 | 1882654 | 232395 | 7179 | 2122228 | 229 | 1 | 1 | 0 | 0 | 1 | 3 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 0 | 1 | 2 | 0 | 0 | 0 | 1 | 0 | 1 | 6 | 9 | 4 | 7 | 8 | 17 | 16 | 12656 | 75510 | 99944 | 983367 | 501159 | 11249 | 1078 | 329 | 38485 | 33166 | 3859 | 87172 | 12461 | 311 | 855958 | 126612 | 797 | 455215 | 44658 | 1286 | ||||||||||||||||||||||
| 74 | 10/8/2020 16:13 | 89KP7CL0 | Russia, China, Iran >>> United States 2020 | Department of Homeland Security | United States | Government | Russia, China, Iran | Russia, China, Iran | Direct Attribution | DHS: China, Russian, Iran Interfering in 2020 Election | The Department of Homeland Security released a report on current threats to the homeland that stated that China, Russia, and Iran will “try to use cyber capabilities or foreign influence to compromise or disrupt infrastructure related to the 2020 U.S. Presidential election.” The report noted that Russia has been “a persistent threat,” but that “China and Iran also pose threats in this space.” | https://www.dhs.gov/sites/default/files/publications/2020_10_06_homeland-threat-assessment.pdf | https://web.archive.org/web/20201008184004/https://www.dhs.gov/sites/default/files/publications/2020_10_06_homeland-threat-assessment.pdf | screenshot | DHS | State Media, "Junk News" | 1/1/2016 | 10/6/2020 | Brigading, Sockpuppets, Hacking - Data Exfiltration, Deceptive Content Manipulation | 297078 | 35192 | 39353 | 371623 | 217 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 0 | 0 | 1 | 1 | 1 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 11 | 2 | 11 | 9 | 7 | 3 | 4642 | 195172 | 96167 | 3275 | 3032 | 2480 | 2030 | 132 | 157209 | 26922 | 11041 | 68332 | 946 | 26889 | 2719 | 523 | 33 | 2695 | 298 | 39 | ||||||||||||||||||||||||
| 75 | 10/8/2020 17:44 | MZWSSOLA | Iran >>> United States 2020 | United States | Technology Company | Iran | Iran | Proxy/Inferred Attribution | Black Lives Matter | Twitter: Further Information on Assets Linked to Iran | Twitter removed 104 accounts operating from Iran that artificially amplified conversations on politically sensitive topics, including Black Lives Matter, the murder of George Floyd, and other issues of racial and social justice in the United States. This expanded on Twitter's September 29 announcement regarding Iranian interference. | https://blog.twitter.com/en_us/topics/company/2020/disclosing-removed-networks-to-our-archive-of-state-linked-information.html | https://web.archive.org/web/20201008214159/https://blog.twitter.com/en_us/topics/company/2020/disclosing-removed-networks-to-our-archive-of-state-linked-information.html | https://upload.wikimedia.org/wikipedia/commons/0/01/Tehran%2C_Iran%2C_15_53.jpg | Christiaan Triebert/Wikimedia | 1/1/2020 | 10/8/2020 | Sockpuppets, Botnets | 180629 | 50311 | 200 | 231140 | 96 | 0 | 1 | 1 | 1 | 1 | 4 | 1 | 1 | 1 | 3 | 1 | 0 | 1 | 1 | 1 | 4 | 1 | 0 | 1 | 0 | 1 | 3 | 7 | 14 | 0 | 1 | 1 | 0 | 0 | 0 | 68570 | 19707 | 0 | 0 | 0 | 0 | 0 | 68431 | 1 | 138 | 19621 | 86 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | |||||||||||||||||||||||||
| 76 | 10/15/2020 11:42 | 21UITERF | Russia >>> United States 2020 | Michael Carpenter | w/ quotes | United States | Influential Individual | Russia | Russia | Direct Attribution | Biden Advisor: Hacked Emails are Russian Disinfo | The New York Post published emails and images purported to be from the son of Vice President Biden and showing previously undisclosed business interests in Ukraine. Amid widespread suspicion about the veracity and origin of the leaked materials, senior Biden advisor Michael Carpenter stated: “This is a Russian disinformation operation…I’m very comfortable saying that.” | https://www.politico.com/news/2020/10/14/biden-campaign-lashes-out-new-york-post-429486 | https://web.archive.org/web/20201015153924/https://www.politico.com/news/2020/10/14/biden-campaign-lashes-out-new-york-post-429486 | https://upload.wikimedia.org/wikipedia/commons/a/a9/Joe_Biden_kickoff_rally_May_2019.jpg | Michael Stokes/Wikimedia | Independent Media | 10/14/2020 | Hacking - Data Exfiltration, Deceptive Content Manipulation | 1124222 | 13407 | 48323 | 1185952 | 225 | 1 | 1 | 0 | 0 | 1 | 3 | 0 | 1 | 0 | 1 | 1 | 0 | 1 | 1 | 0 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 4 | 7 | New York Post Leaks | 5 | 7 | 7 | 13 | 10 | 108494 | 29174 | 89728 | 45465 | 10279 | 71017 | 1201 | 36276 | 27818 | 1246 | 110 | 75701 | 3493 | 10534 | 42412 | 2896 | 157 | 9549 | 425 | 305 | |||||||||||||||||||||||
| 77 | 10/16/2020 11:42 | JQPLAH9U | Russia >>> United States 2020 | Intelligence Officials | United States | Government | Russia, Rudy Giuliani | Russia | Direct Attribution | Former U.S. Officials: Rudy Giuliani Targeted by Russian Influence Operation | The Washington Post reported that U.S. intelligence officials had raised repeated concerns that Rudy Giuliani, President Trump's personal lawyer, was being used by Russian intelligence to launder disinformation. Giuliani had taken multiple "fact-finding" trips to Ukraine since 2019 with the intent of gathering material to politically damage Vice President Biden. In the process, according to four sources, Guliani was manipulated by Russian assets. | https://www.washingtonpost.com/national-security/giuliani-biden-ukraine-russian-disinformation/2020/10/15/43158900-0ef5-11eb-b1e8-16b59b92b36d_story.html | https://web.archive.org/web/20201016154003/https://www.washingtonpost.com/national-security/giuliani-biden-ukraine-russian-disinformation/2020/10/15/43158900-0ef5-11eb-b1e8-16b59b92b36d_story.html | https://upload.wikimedia.org/wikipedia/commons/e/e3/Rudy_Giuliani_%2829299015971%29.jpg | Gage Skidmore/Wikimedia | Independent Media | 1/1/2019 | 10/15/2020 | 2176759 | 239583 | 393308 | 2809650 | 550 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 1 | 0 | 2 | 8 | 15 | New York Post Leaks | 33 | 35 | 52 | 8 | 7 | 391613 | 1336245 | 503953 | 17928 | 5520 | 299941 | 30686 | 60986 | 1123776 | 171025 | 41444 | 317457 | 20945 | 165551 | 17274 | 630 | 24 | 4570 | 928 | 22 | ||||||||||||||||||||||||
| 78 | 10/22/2020 12:24 | YQAO5J64 | Iran >>> United States 2020 | Daily Beast, FireEye | United States | Media | Iran | Iran | Proxy/Inferred Attribution | Daily Beast, FireEye: Media Hacks and Amplification Tied to Iran | In what appeared to be a coordinated operation, hackers in Iran broke into the websites and Twitter accounts of news organizations and planted false stories. Then, Iran-linked social media accounts (some of which impersonated real people) amplified the false stories. | https://www.thedailybeast.com/hackers-planted-trump-smearsand-pro-iran-trolls-spread-them?ref=scroll | https://web.archive.org/web/20201022161720/https://www.thedailybeast.com/hackers-planted-trump-smearsand-pro-iran-trolls-spread-them?ref=scroll | https://upload.wikimedia.org/wikipedia/commons/3/3d/Iranian_national_flag_%28tehran%29.jpg | Farzaaaad2000/Wikimedia | Independent Media | 5/1/2020 | 10/19/2020 | Sockpuppets, Hacking - Data Exfiltration, Deceptive Content Manipulation | 314 | 1477 | 0 | 1791 | 6 | 1 | 0 | 1 | 1 | 1 | 4 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 0 | 0 | 0 | 1 | 1 | 2 | 7 | 13 | 2 | 0 | 0 | 0 | 0 | 1496 | 0 | 0 | 0 | 0 | 252 | 1244 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ||||||||||||||||||||||||
| 79 | 10/22/2020 12:38 | 8OV2MXMQ | Russia >>> United States 2020 | Former U.S. Intelligence Officials | former intelligence officials | United States | Influential Individual | Russia | Russia | Proxy/Inferred Attribution | letter | Former U.S. Officials: Hacked Emails Resemble Russian Operation | More than 50 former U.S. intelligence officials signed a letter alleging that the release of emails purportedly belonging to Hunter Biden “has all the classic earmarks of a Russian information operation.” They stated that their experience in national security led them to be “deeply suspicious that the Russian government played a significant role in this case” and concluded that Russia was trying to influence the election. | https://www.politico.com/news/2020/10/19/hunter-biden-story-russian-disinfo-430276 | https://web.archive.org/web/20201022163549/https://www.politico.com/news/2020/10/19/hunter-biden-story-russian-disinfo-430276?mc_cid=5a64993ad7&mc_eid=81144577e6 | https://upload.wikimedia.org/wikipedia/commons/1/14/R._Hunter_Biden_at_Center_for_Strategic_%26_International_Studies_%281%29.jpg | CSIS/Wikimedia | Independent Media | 10/19/2020 | Deceptive Content Manipulation | 1413246 | 79402 | 107010 | 1599658 | 256 | 1 | 1 | 1 | 0 | 1 | 4 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 1 | 0 | 4 | 0 | 1 | 1 | 1 | 0 | 3 | 7 | 14 | New York Post Leaks | 20 | 17 | 8 | 7 | 19 | 269180 | 640723 | 144954 | 23188 | 157382 | 222610 | 4205 | 42365 | 553910 | 57462 | 29351 | 138029 | 3792 | 3133 | 21128 | 1422 | 638 | 147722 | 8223 | 1437 | ||||||||||||||||||||||
| 80 | 10/22/2020 12:51 | 2GA67JN0 | Iran, Russia >>> United States 2020 | Director of National Intelligence John Ratcliffe | John Ratcliffe | United States | Government | Iran, Russia | Iran, Russia | Direct Attribution | emails | ODNI: Iran, Russia interfering in Election | After some voters received threatening emails containing personal information, Director of National Intelligence John Ratcliffe held a press conference where he alleged that Iran and Russia were attempting to interfere with the U.S. election. He specifically accused Iran of sending the threatening emails in an attempt to denigrate President Trump. Further U.S. government clarifications and concurrent reporting confirmed the U.S. intelligence statement, although they did not corroborate Ratcliffe's claim about anti-Trump intent. | https://www.reuters.com/article/us-usa-election-security/u-s-intelligence-agencies-say-iran-russia-have-tried-to-interfere-in-2020-election-idUSKBN2763E3 | https://web.archive.org/web/20201022192616if_/https://www.reuters.com/article/us-usa-election-security/u-s-intelligence-agencies-say-iran-russia-have-tried-to-interfere-in-2020-election-idUSKBN2763E3 | https://upload.wikimedia.org/wikipedia/commons/5/53/Behesht-e_Zahra%2C_Tehran%2C_Iran_%285072246576%29.jpg | yeowatzup/Wikimedia | 10/21/2020 | Hacking - Data Exfiltration, Deceptive Content Manipulation | 409548 | 33893 | 777114 | 1220555 | 207 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 1 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 0 | 1 | 0 | 2 | 6 | 13 | 4 | 20 | 20 | 4 | 1 | 3508 | 275779 | 889662 | 1873 | 6963 | 3223 | 285 | 0 | 255511 | 19113 | 1155 | 106696 | 9458 | 773508 | 1724 | 143 | 6 | 6507 | 456 | 0 | ||||||||||||||||||||||||
| 81 | 10/22/2020 13:17 | FVDWC77A | China, Russia, Iran >>> United States 2020 | U.S. Intelligence Officials | United States | Government | China, Russia, Iran | China, Russia, Iran | Direct Attribution | Intelligence Officials: China, Russia, Iran Trying to Influence Lawmakers | The Hill reported that U.S. intelligence officials, led by Director of National Intelligence John Ratcliffe, briefed Congress on efforts by China, Russia, and Iran to influence U.S. lawmakers. The briefing emphasized the role of China, with one official telling The Hill that China has targeted “members of Congress at a rate of approximately six times that of Russia, and 12 times that of Iran.” Some sources, however, argued that this campaign had more in common with normal lobbying than election interference. | https://thehill.com/policy/national-security/520302-exclusive-intelligence-chief-briefed-lawmakers-of-foreign-influence | https://web.archive.org/web/20201022171513/https://thehill.com/policy/national-security/520302-exclusive-intelligence-chief-briefed-lawmakers-of-foreign-influence | https://upload.wikimedia.org/wikipedia/commons/0/0a/US_Congress_02.jpg | Bjoertvedt/Wikimedia | 10/9/2020 | 2959 | 1481 | 28 | 4468 | 17 | 1 | 1 | 1 | 1 | 1 | 5 | 0 | 1 | 1 | 2 | 1 | 0 | 1 | 1 | 1 | 4 | 0 | 1 | 0 | 1 | 0 | 2 | 7 | 13 | 1 | 1 | 1 | 1 | 1 | 43 | 36 | 3072 | 138 | 272 | 14 | 29 | 0 | 23 | 13 | 0 | 1724 | 1336 | 12 | 108 | 14 | 16 | 194 | 78 | 0 | |||||||||||||||||||||||||||
| 82 | 10/27/2020 13:15 | 9DDBYFA4 | >>> United States 2020 | Microsoft | United States | Technology Company | Trickbot | Non-Aligned Commercial Enterprise | election | Microsoft: Trickbot Network Could Disrupt Election | Microsoft took action against Trickbot, a botnet (network of devices infected with malware). Microsoft warned that Trickbot could spread ransomware, which might be used to disrupt the presidential election. | https://blogs.microsoft.com/on-the-issues/2020/10/12/trickbot-ransomware-cyberthreat-us-elections/ | https://web.archive.org/web/20201026101005/https://blogs.microsoft.com/on-the-issues/2020/10/12/trickbot-ransomware-cyberthreat-us-elections/ | see source url | joffi/Pixabay | 10/12/2020 | Hacking - Data Exfiltration | 76281 | 11698 | 20563 | 108542 | 413 | 0 | 1 | 1 | 1 | 1 | 4 | 1 | 1 | 1 | 3 | 1 | 1 | 0 | 0 | 1 | 3 | 0 | 1 | 0 | 1 | 0 | 2 | 7 | 12 | 2 | 8 | 17 | 5 | 2 | 6459 | 79900 | 5602 | 449 | 14 | 4690 | 1358 | 411 | 55160 | 5815 | 18925 | 4214 | 526 | 862 | 290 | 76 | 83 | 12 | 2 | 0 | ||||||||||||||||||||||||||
| 83 | 10/30/2020 12:57 | FVGS8W57 | Romania >>> United States 2020 | United States | Technology Company | individuals | DELETE | Romania | Non-Aligned Commercial Enterprise | Facebook: Inauthentic Accounts Based in Romania | Facebook removed 35 accounts, 3 pages, and 88 Instagram accounts originating in Romania. The accounts posed as Americans, amplified each other’s content, and managed pages posing as President Trump fan pages. In addition to reposting stories by American conservative news outlets, the network discussed the 2020 election, support for the Trump campaign by African Americans, conservative ideology, Christian beliefs, and QAnon. | https://about.fb.com/news/2020/08/july-2020-cib-report/ | https://web.archive.org/web/20201030165427/https://about.fb.com/wp-content/uploads/2020/08/July-2020-CIB-Report.pdf | https://miro.medium.com/max/1920/1*ScizQiv1z7rz3zsXylBF6w.png | @zkharazian/DFRLab via Gage Skidmore/Wikimedia | Facebook, Instagram | 8/6/2020 | Sockpuppets | 715851 | 19348 | 29494 | 764693 | 58 | 0 | 1 | 1 | 1 | 1 | 4 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 1 | 1 | 1 | 4 | 7 | 15 | 4 | 6 | 6 | 0 | 0 | 8515 | 708150 | 29209 | 0 | 0 | 7767 | 171 | 577 | 663177 | 17266 | 27707 | 28358 | 815 | 36 | 0 | 0 | 0 | 0 | 0 | 0 | 11/12/2020 | 8/6/2020 | https://about.fb.com/news/2020/08/july-2020-cib-report/ | 3 | 0 | 35 | 1600 | 0 | 0 | 0 | 88 | 7200 | 1 | ||||||||||||
| 84 | 11/2/2020 20:45 | 4S2OZXB9 | North Korea >>> United Kingdom 2020 | Reuters | DELETE | United Kingdom | Media | Unknown hackers | DELETE | North Korea | DELETE | Proxy/Inferred Attribution | Louisiana, cyberattack | Reuters: Louisiana Hacks Possibly Tied to North Korea | The Louisiana National Guard was called in to stop a series of ransomware attacks that have hit small government offices in recent weeks. Experts were unable to attribute the attack to any specific actor, although they did note that the hackers used a tool associated with the North Korean government. It is unclear whether the hackers were targeting election-related systems or simply trying to extort money, and the cyberattack was stopped before significant harm was done. | https://www.reuters.com/article/us-usa-election-cyber-louisiana-exclusiv/exclusive-national-guard-called-in-to-thwart-cyberattack-in-louisiana-weeks-before-election-idUSKBN27823F | https://web.archive.org/web/20201103014245/https://www.reuters.com/article/us-usa-election-cyber-louisiana-exclusiv/exclusive-national-guard-called-in-to-thwart-cyberattack-in-louisiana-weeks-before-election-idUSKBN27823F | https://upload.wikimedia.org/wikipedia/commons/1/1a/Photograph_of_flags_of_North_Korea.jpg | John Pavelka/Wikimedia | 10/23/2020 | Hacking - Data Exfiltration | 3680 | 554 | 318 | 4552 | 45 | 1 | 1 | 1 | 1 | 1 | 5 | 1 | 1 | 1 | 3 | 1 | 1 | 1 | 0 | 1 | 4 | 0 | 1 | 0 | 1 | 0 | 2 | 8 | 14 | 0 | 2 | 7 | 1 | 1 | 0 | 648 | 1986 | 61 | 501 | 0 | 0 | 0 | 425 | 141 | 82 | 1702 | 60 | 224 | 43 | 17 | 1 | 451 | 50 | 0 | ||||||||||||||||||||||
| 85 | 11/2/2020 22:39 | MMUB9A0E | India >>> United States 2020 | Zenger News | DELETE | United States | Media | Indian troll farms | troll farm | India | Non-Aligned Commercial Enterprise (attribution to apolitical commercial actor) | Harris | Zenger News: Biden, Harris Followers are Indian Sockpuppets | Zenger News, an online wire service, claimed that the Twitter accounts of Joe Biden and Kamala Harris have thousands of fake followers purchased from troll farms in rural India. | https://www.newsweek.com/joe-biden-kamala-harris-got-big-social-media-boost-indian-troll-farms-1544047 | https://web.archive.org/web/20201103033115/https://www.newsweek.com/joe-biden-kamala-harris-got-big-social-media-boost-indian-troll-farms-1544047 | https://upload.wikimedia.org/wikipedia/commons/b/b9/Kamala_Harris_%2848004610046%29.jpg | Gage Skidmore/Wikimedia | 8/1/2020 | 11/2/2020 | Sockpuppets | 16374 | 8688 | 396 | 25458 | 65 | 1 | 0 | 1 | 1 | 1 | 4 | 1 | 0 | 0 | 1 | 1 | 0 | 1 | 1 | 0 | 3 | 0 | 1 | 1 | 0 | 0 | 2 | 5 | 10 | 1 | 0 | 0 | 1 | 1 | 15020 | 0 | 0 | 963 | 356 | 7453 | 7281 | 286 | 0 | 0 | 0 | 0 | 0 | 0 | 591 | 372 | 0 | 321 | 30 | 5 |