interference2020-Data/DFRLab_interference2020.csv
Digital Forensic Research Lab f130d09000
Add files via upload
2020-09-29 16:36:04 -04:00

69 KiB
Исходник Ответственный История

1timestampcase_hashcase_idsource_subcategorysourcesource_for_displaysource_for_querysource_nationsource_categorydisinformantdisinformant_for_querydisinformant_nationdisinformant_nation_for_querydisinformant_attributionadd_query_termsshort_titleshort_descriptionattribution_urlarchived_attribution_urlimage_urlimage_creditopen_websocial_mediamessaging_platformsotherstart_dateend_dateattribution_datemethodsfacebook_engagementtwitter_engagementreddit_engagementtotal_engagementarticle_countattribution_financial_incentiveattribution_financial_transparencyattribution_endorse_politicalattribution_campaign_affiliationattribution_published_mis_disinfoattribution_credibility_scoreattribution_languageattribution_convey_contentattribution_factual_argumentattribution_objectivity_scoreattribution_clarityattribution_contextattribution_identified_responsibilityattribution_strategic_rationaleattribution_privileged_evidenceattribution_evidence_scoreattribution_open_accessattribution_methodologyattribution_open_sourceattribution_acknowledge_limitationsattribution_corroborationattribution_transparency_scorecredibility_scoreattribution_total_score
26/15/2020 18:38:27IAE7CREQRussia >> United States 2016NBC NewsUnited StatesMediaInternet Research AgencyUSAIRA.ru RussiaDirect AttributionNBC: Russia Responsible for Fake Disinformation CampaignNBC examined a website linked to Russia's Internet Research Agency, which announced that it had undertaken a massive operation against the 2018 U.S. midterm election. "Whether you vote or not, there is no difference as we control the voting and counting systems," the website declared. NBC could find no evidence that the operation existed.https://www.nbcnews.com/tech/tech-news/russian-troll-farm-set-elaborate-social-media-trap-midterms-no-n933781https://web.archive.org/web/20200615223555/https://www.nbcnews.com/tech/tech-news/russian-troll-farm-set-elaborate-social-media-trap-midterms-no-n933781https://media2.s-nbcnews.com/j/newscms/2018_15/2228976/171116-google-street-view-internet-research-agency-russia-ew-1114a_1baabf71c3a69e02c66a474b203cc7ce.fit-560w.jpgGoogle Street View/NBC"Junk News" WebsiteFacebook, Instagram, Twitter, YouTube11/1/201611/6/201811/7/2018Sockpuppets1078357319175471111151113111104000112814
36/17/2020 20:32:22QHVF6C7VRussia >> United States Senior U.S. Official Defense Secretary James MattisUnited StatesGovernmentRussiaDirect AttributionMattis: Russia Attempted to Interfere in 2018 ElectionThen-Secretary of Defense James Mattis confirmed in a Fox News interview that Russia had attempted to interfere in the 2018 U.S. midterm election. He did not specify further details.https://foreignpolicy.com/2018/12/01/mattis-confirms-russia-interfered-in-us-midterm-elections-putin-trump/https://web.archive.org/web/20200618002957/https://foreignpolicy.com/2018/12/01/mattis-confirms-russia-interfered-in-us-midterm-elections-putin-trump/https://upload.wikimedia.org/wikipedia/commons/thumb/3/39/James_Mattis_official_Transition_portrait.jpg/480px-James_Mattis_official_Transition_portrait.jpgWikimedia12/1/2018369077514408658528613111115111300001100000089
44/28/2020 14:28:04XBVGVN5VIran >> United States 2010FacebookUnited StatesTechnology CompanyIranIranDirect Attribution783Facebook: Assets Linked to IranFacebook removed 783 pages, groups and accounts for coordinated inauthentic behavior tied to Iran. The accounts posted commentary on Israeli-Palestinian relations and the conflicts in Syria and Yemen, targeting audiences in the Middle East, Europe, and the United States and falsely portraying themselves as locals. Some pages had been active since 2010.https://about.fb.com/news/2019/01/removing-cib-iran/http://web.archive.org/web/20200425191628/https://about.fb.com/news/2019/01/removing-cib-iran/https://about.fb.com/wp-content/uploads/2019/01/irancontentexample5-1.png?resize=506%2C434FacebookFacebookFALSE1/1/20101/31/20191/31/2019Sockpuppets1938574181023278261150111141113111115010113715
55/4/2020 15:04:18UCMQQ4SUIran >> United States 2016TwitterUnited States Technology CompanyIran, Internet Research Agency, VenezuelaIran, Russia, VenezuelaDirect Attribution, Proxy/Inferred AttributionTwitter: Assets Linked to Iran, Russia, VenezuelaTwitter removed 2,617 malicious accounts that it believes may have originated in Iran, as well as 418 accounts from Russia that exhibited behavior similar to the Internet Research Agency. Twitter also removed 764 accounts located in Venezuela for a "foreign campaign of spammy content focused on divisive political themes."https://blog.twitter.com/en_us/topics/company/2019/further_research_information_operations.htmlhttp://web.archive.org/web/20200427201733/https://blog.twitter.com/en_us/topics/company/2019/further_research_information_operations.htmlhttps://pixabay.com/get/57e2d1464c54af14f1dc8460da29317e153cdfed565271_640.jpgFree-Photos/PixabayTwitter8/1/20181/31/20191/31/2019Sockpuppets, Botnets9183347278813443170111141113011013101103713
65/4/2020 15:17:094TVIMK7YMacedonia, Kosovo >> United States 2017FacebookUnited States Technology CompanyindividualsMacedonia, KosovoNon-Aligned Commercial ActivityFacebook: Assets Linked to Kosovo/MacedoniaFacebook removed 212 pages, groups and accounts originating in Macedonia and Kosovo for engaging in coordinated inauthentic behavior. The accounts ran pages claiming to represent political communities in Australia, the U.K. and the U.S., where they posted about topics like nationalism, Islam, and political figures. They also shared content on astrology, celebrities, and beauty.https://about.fb.com/news/2019/03/cib-iran-russia-macedonia-kosovo/http://web.archive.org/web/20200420063703/https://about.fb.com/news/2019/03/cib-iran-russia-macedonia-kosovo/https://pixabay.com/get/57e7dc4b4a53ad14f1dc8460da29317e153cdfed545476_640.jpgD1_TheOne/PixabayFacebook1/1/20171/1/20173/26/2019Sockpuppets148721426064307240111141113111115010113715
75/4/2020 15:21:52WI5CM5LFIran >> United States 2017FacebookUnited States Technology CompanyIranIranDirect AttributionFireEyeFacebook: Assets Linked to IranBased on a tip from FireEye, Facebook removed 51 Facebook accounts, 36 pages, seven groups and three Instagram accounts involved in coordinated inauthentic behavior. The accounts originated in Iran and discussed topics like U.S. and British politics, U.S. secessionist movements, Islam, Arab minorities in Iran, and the influence of Saudi Arabia in the Middle East. The accounts also impersonated legitimate news organizations and attempted to contact authentic Instagram accounts.https://about.fb.com/news/2019/05/removing-more-cib-from-iran/http://web.archive.org/web/20200504192049/https://about.fb.com/news/2019/05/removing-more-cib-from-iran/https://about.fb.com/wp-content/uploads/2019/05/5.28.19-samples.002.jpegFacebookFacebook, Instagram12/9/20155/28/20195/28/2019Brigading, Sockpuppets374811381685054240111141113111014010113714
85/4/2020 15:26:52B3RT49PVIran >> United States 2018TwitterUnited States Technology CompanyIranIranDirect AttributionaccountsTwitter: Assets Linked to IranTwitter removed more than 4,700 accounts associated with or directly backed by the Iranian government. The accounts tweeted news content with a pro-Iran perspective and engaged in conversations on Iran and Israel. In some cases, they appeared to engage with U.S. Twitter users.https://blog.twitter.com/en_us/topics/company/2019/information-ops-on-twitter.htmlhttp://web.archive.org/web/20200502004018/https://blog.twitter.com/en_us/topics/company/2019/information-ops-on-twitter.htmlhttps://pixabay.com/get/54e6dc404853ac14f1dc8460da29317e153cdfec505473_640.jpgjorono/PixabayTwitter10/1/20186/13/20196/13/2019Sockpuppets, Botnets7311423836311912950111141012011114111104614
96/16/2020 18:00:24G7LNVVQFIran >> United States 2019MicrosoftUnited StatesTechnology CompanyHolmium, Mercury, Thallium, Yttrium, StrontiumHolmium Mercury, Thallium, Yttrium StrontiumIran, North Korea, RussiaProxy/Inferred AttributionMicrosoft: Foreign Cyberattacks Target Election SecurityBetween August 2018 and July 2019, Microsoft notified 781 political campaigns, parties, and democracy-focused NGOs that their accounts were targeted by nation-state actors. The majority of these attacks originated in Iran, North Korea, and Russia, and 95% of them targeted U.S.-based organizations.https://blogs.microsoft.com/on-the-issues/2019/07/17/new-cyberthreats-require-new-ways-to-protect-democracy/https://web.archive.org/web/20200616215909/https://blogs.microsoft.com/on-the-issues/2019/07/17/new-cyberthreats-require-new-ways-to-protect-democracy/https://upload.wikimedia.org/wikipedia/commons/e/ef/Voting_United_States.jpgTom Arthur/WikimediaEmail7/16/20197/17/2019Hacking - Data Exfiltration1155544931459175071520111141113001012010001710
105/6/2020 11:40:57NNFS2A1QRussia >> United States 2018RedditUnited States Technology CompanySecondary InfektionDELETERussiaDirect Attributionleaks, BritainReddit: Assets Linked to RussiaReddit banned 1 subreddit and 61 accounts for vote manipulation and misuse of the platform. These accounts were linked to “Secondary Infektion,” a global Russian disinformation campaign analyzed by Graphika, which built on an earlier report by the DFRLab.https://www.reddit.com/r/redditsecurity/comments/e74nml/suspected_campaign_from_russia_on_reddit/https://web.archive.org/web/20200503114319/https://www.reddit.com/r/redditsecurity/comments/e74nml/suspected_campaign_from_russia_on_reddit/https://miro.medium.com/max/1900/1*YeUqtIshY8RSS1Trtlpdsw.jpeg@KaranKanishk/DFRLabReddit1/1/20187/22/201912/6/2019Sockpuppets, Botnets8194426466604621688721930111141113111014111104715
115/6/2020 15:40:2372SHQDJ4Thailand, Russia >> United States 2020FacebookUnited States Technology CompanyNew Eastern Outlook Thailand, RussiaDirect AttributionFacebook: Assets Linked to Russia/ThailandFacebook removed 12 accounts and 10 pages for coordinated inauthentic behavior. The accounts originated in Thailand and targeted Thailand and the U.S. The network used sockpuppet accounts to run pages, increase engagement, disseminate content, drive people to off-platform blogs posing as news outlets, and push divisive narratives on topics like Thai politics, U.S.-China relations, and protests in Hong Kong. This activity was linked to New Eastern Outlook, a Russian government-funded journal.https://about.fb.com/news/2019/07/removing-cib-thailand-russia-ukraine-honduras/http://web.archive.org/web/20200506193859/https://about.fb.com/news/2019/07/removing-cib-thailand-russia-ukraine-honduras/https://about.fb.com/wp-content/uploads/2019/07/cib-2.png?resize=553%2C592FacebookFacebook7/25/20207/25/2019Sockpuppets607174122903330111141113111014010113714
126/23/2020 16:18:08E8YL4KIJIran >> United States 2019MicrosoftUnited StatesTechnology CompanyPhosphorusIranProxy/Inferred AttributionMicrosoft: Cyberattacks Linked to Iran Target 2020 ElectionAn Iranian hacker group made more than 2,700 attempts to identify the email accounts of current and former U.S. government officials, journalists covering political campaigns, and accounts associated with a presidential campaign during a 30-day period. The group then attacked 241 of these accounts.https://blogs.microsoft.com/on-the-issues/2019/10/04/recent-cyberattacks-require-us-all-to-be-vigilant/https://web.archive.org/web/20200623201118/https://blogs.microsoft.com/on-the-issues/2019/10/04/recent-cyberattacks-require-us-all-to-be-vigilant/https://pixabay.com/get/55e3d1414c5baa14f1dc8460da29317e153cdfec555773_640.jpgB_A/PixabayEmail9/30/201910/4/2019Hacking - Data Exfiltration8431125884225051327003240111141113111014010102713
134/28/2020 14:39:53QVQ936DMIran >> United States 2020FacebookUnited States Technology CompanyBLMNews, Liberty Front Press, Internet Research AgencyBLMNews AND Liberty Front Press, Internet Research AgencyIran, RussiaDirect AttributionFacebook: Assets Linked to Iran, RussiaFacebook removed 93 accounts, 17 pages and four Instagram accounts for coordinated inauthentic behavior. The activity was mainly targeted at the U.S. Fake and compromised accounts were used to masquerade as locals, join groups, and drive people to off-platform sites associated with the Iran-linked “Liberty Front Press.” The accounts typically posted about U.S. and Israeli politics, support for Palestine, and the conflict in Yemen.https://about.fb.com/news/2019/10/removing-more-coordinated-inauthentic-behavior-from-iran-and-russia/http://web.archive.org/web/20200425035551/https://about.fb.com/news/2019/10/removing-more-coordinated-inauthentic-behavior-from-iran-and-russia/https://about.fb.com/wp-content/uploads/2019/10/hands-in.png?w=960&resize=656%2C311Facebook"Junk News" WebsiteFacebook, Instagram2/5/201710/21/201910/21/2019Sockpuppets36701732029954701690111141113111115010113715
145/6/2020 13:41:13EWEDMP63Saudi Arabia >>> United States 2018TwitterUnited States Technology CompanySmaat Saudi Arabia Direct AttributionTwitter: Assets Linked to Saudi ArabiaTwitter blocked 88,000 accounts engaged in spammy behavior and attributed them to a significant state-backed information operation originating in Saudi Arabia. The accounts were managed by Smaat, a social media marketing company that ran Twitter accounts for high-profile individuals and Saudi government departments. The accounts pushed messages favorable to the Saudi authorities, amplifying discussion about sanctions in Iran and appearances by Saudi government officials in Western media.https://blog.twitter.com/en_us/topics/company/2019/new-disclosures-to-our-archive-of-state-backed-information-operations.htmlhttp://web.archive.org/web/20200506173908/https://blog.twitter.com/en_us/topics/company/2019/new-disclosures-to-our-archive-of-state-backed-information-operations.htmlhttps://pixabay.com/get/54e6dc444950ac14f1dc8460da29317e153cdfec545777_640.jpgKaufdex/PixabayTwitter1/1/201812/20/201912/20/2019Brigading, Sockpuppets, Botnets12060817160324481702162080111141113111115111115717
154/28/2020 14:33:06B2K8L2QMUnited States,Vietnam >> United States 2020FacebookUnited States Technology CompanyEpoch Media Group, The BL United States,Vietnam VietnamDirect AttributionFacebook: Assets Linked to Anti-China Media OrganizationFacebook removed 610 accounts, 89 pages, 156 groups and 72 Instagram accounts for coordinated inauthentic behavior on behalf of a government or foreign actor. The activity was primarily targeted at the U.S. and linked to The BL and Epoch Media Group, both U.S.-based media companies. The network was run by individuals in Vietnam and the U.S. It used fake accounts (some of which had profile photos generated by deep learning processes) and automated posting to direct traffic to off-platform sites. The accounts also masqueraded as Americans and posted on U.S. political issues.https://about.fb.com/news/2019/12/removing-coordinated-inauthentic-behavior-from-georgia-vietnam-and-the-us/http://web.archive.org/web/20200427035411/https://about.fb.com/news/2019/12/removing-coordinated-inauthentic-behavior-from-georgia-vietnam-and-the-us/https://media-exp1.licdn.com/dms/image/C4E0BAQEt6S9z7QLAWg/company-logo_200_200/0?e=2159024400&v=beta&t=JbZ1bwIYPtksYzUzDU4I2fpF5rWnHoD_H7Psf_TieI4LinkedinFacebook10/5/201912/20/201912/20/2019Sockpuppets53785218838334745901643200111141113111115011114716
166/16/2020 17:51:102VHOY7ICNorth Korea >> United States 2019MicrosoftUnited StatesTechnology CompanyThalliumNorth KoreaProxy/Inferred AttributionMicrosoft: Cyberattacks Linked to North KoreaA U.S. district court unsealed Microsoft documents describing cyberattacks by a hacking group called Thallium, which is believed to operate from North Korea. Targets included government employees, think tanks, university staff members, members of organizations focused on world peace and human rights, and individuals that work on nuclear proliferation issues. Most of the targets were based in the U.S.https://blogs.microsoft.com/on-the-issues/2019/12/30/microsoft-court-action-against-nation-state-cybercrime/ https://web.archive.org/web/20200616204428/https://blogs.microsoft.com/on-the-issues/2019/12/30/microsoft-court-action-against-nation-state-cybercrime/https://pixabay.com/get/57e1d0424b51ab14f1dc8460da29317e153cdfec5b5779_640.jpgChickenonline/PixabayEmail7/16/201912/30/2019Hacking - Data Exfiltration1178137631097166412571011141113111115010102714
174/28/2020 14:21:31CU6V8230Iran >> United States 2020FacebookUnited States Technology CompanyIranIranDirect AttributionFacebook: Assets Linked to IranFacebook removed 6 Facebook accounts and 5 Instagram accounts involved in foreign interference originating in Iran and targeted at the U.S. The network used fake accounts to attempt to contact public figures as well as to share posts on the U.S. elections, Christianity, U.S.-Iran relations, U.S. immigration policy, and U.S. foreign policy in the Middle East. Facebook found links between this network and the network that it had removed in January 2019.https://about.fb.com/news/2020/02/removing-coordinated-inauthentic-behavior/http://archive.ph/6WdYnhttps://pixabay.com/get/51e6d040484faa0df7c5997cc128377d1436d7e35a_640.pngSimon Steinberger/PixabayFacebook, Instagram1/1/20202/1/20202/12/2020Sockpuppets5145034701195561151710111141113111115110103715
186/23/2020 15:51:02Y8YL4NQHRussia >> United States U.S. IntelligenceIntelligence OfficialsUnited StatesGovernmentRussiaDirect AttributionSandersU.S. Intelligence: Russia Targets Sanders CampaignThe Washington Post published information about a confidential briefing given by U.S. officials to Senator Bernie Sanders (D-VT) warning him that Russia was attempting to help his campaign as part of an effort to interfere with the Democratic primary. Sanders said that “[his] understanding” was that Russia was “us[ing] Internet propaganda to sow division.”https://www.washingtonpost.com/national-security/bernie-sanders-briefed-by-us-officials-that-russia-is-trying-to-help-his-presidential-campaign/2020/02/21/5ad396a6-54bd-11ea-929a-64efa7482a77_story.htmlhttps://web.archive.org/save/https://www.washingtonpost.com/national-security/bernie-sanders-briefed-by-us-officials-that-russia-is-trying-to-help-his-presidential-campaign/2020/02/21/5ad396a6-54bd-11ea-929a-64efa7482a77_story.htmlhttps://upload.wikimedia.org/wikipedia/commons/e/ee/Bernie_Sanders_%2848647153227%29.jpgGage Skidmore/Wikimedia2/21/2020217644624311634424827638109171111151113001113000000811
194/28/2020 15:07:28TCAVVVR4India >> United States 2020FacebookUnited States Technology CompanyaRep GlobalIndia Non-Aligned Commercial ActivityFacebook: Assets Linked to Indian CompanyFacebook removed a network of 37 accounts, 32 pages, 11 groups and 42 Instagram accounts. This activity originated in India and focused on the Gulf region, United States, United Kingdom, and Canada. Facebooks investigation found links to aRep Global, a digital marketing firm in India.https://about.fb.com/news/2020/03/february-cib-report/http://web.archive.org/web/20200420062152/https://about.fb.com/wp-content/uploads/2020/03/February-2020-CIB-Report.pdfhttps://pixabay.com/get/54e0dc4a4852a914f1dc8460da29317e153cdce5515773_640.pngGordon Johnson/PixabayFacebook, Instagram1/1/20203/2/20203/2/2020Sockpuppets170310791048013262580111141113111115010113715
204/27/2020 13:10:57EWV49KEXRussia >> United States 2020Facebook, CNN, Twitter, Graphika, Clemson UniversityFacebookUnited States Technology Company, Media, Private Consultancy, Civil Society OrganizationEBLA Russia, Ghana, NigeriaRussiaDirect AttributionVarious: Assets Operating Out of Ghana/Nigeria Linked to RussiaFacebook, CNN, Twitter, Graphika, and Clemson University uncovered a cross-platform influence operation run from Ghana. The operation targeted black communities in the U.S. but was still in the early stages of building its audience. The operation was linked to individuals associated with the Internet Research Agency as well as a Ghanaian NGO traceable to Russia.https://graphika.com/reports/ira-in-ghana-double-deceit/http://web.archive.org/web/20200424053336/https://graphika.com/reports/ira-in-ghana-double-deceit/https://pixabay.com/get/54e9d74a4356b10ff3d89960c62e377e163ddded5759_640.jpgThomas Ulrich/Pixabay"Junk News" WebsiteFacebook, Instagram, Twitter1/1/20203/12/20203/12/2020Sockpuppets, Botnets, Deceptive Content Manipulation214002323876132484620111141113111115110114716
215/11/2020 13:27:051JRQ977CRussia >> United States 2019Barack ObamaPresident Barack ObamaUnited States Influential IndividualSenate Republicans Russia Proxy/Inferred AttributionUkraineObama: Senate Republicans Amplifying Russian DisinformationFormer President Barack Obama's office claimed in a letter that Senate Republicans were supporting "a Russian disinformation campaign" by pushing the narrative that Ukraine was responsible for interference in the 2016 election instead of Russia.https://www.documentcloud.org/documents/6882587-Letter-From-Obama-Office-to-NARA-03-13-20.htmlhttps://web.archive.org/web/20200511171341/https://www.documentcloud.org/documents/6882587-Letter-From-Obama-Office-to-NARA-03-13-20.htmlhttps://upload.wikimedia.org/wikipedia/commons/4/48/Barack_Obama_2016.jpgWDKrause/Wikimedia11/21/20193/13/20205/5/2020155074459011534171198371101141113001012000101710
226/15/2020 13:02:05U4GQKN35United States >> United States 2020White HouseUnited StatesGovernmentVoice of America ChinaDirect AttributionWhite House: Voice of America Tool for Chinese PropagandaThe White House published an article claiming that Voice of America had “amplified Beijings propaganda,” pointing to Voice of America tweets about the COVID-19 epidemic in China.https://www.whitehouse.gov/articles/amid-a-pandemic-voice-of-america-spends-your-money-to-promote-foreign-propaganda/https://web.archive.org/web/20200615165424/https://www.insidevoa.com/a/voa-director-s-statement-on-cdc-s-media-interview-policy-excluding-voa-journalists/5462335.htmlhttps://upload.wikimedia.org/wikipedia/commons/d/d0/Voice_of_America_Reporter_at_March_for_Science%2C_Washington%2C_DC_%2834078320141%29.jpgscattered1/WikimediaState Media4/1/20204/10/20204/10/20207816649726788381672110002001110000100000034
235/11/2020 14:09:528PPYXGVDChina >> US 2020U.S. IntelligenceIntelligence Officials Intelligence Officials United StatesGovernmentChinafake messagesChina Direct AttributionU.S. Intelligence: China Amplified COVID-19 DisinformationAccording to New York Times reporting, American officials claimed Chinese operatives amplified fake text messages and social media posts about President Trump locking down the country.https://www.nytimes.com/2020/04/22/us/politics/coronavirus-china-disinformation.html?action=click&module=Top%20Stories&pgtype=Homepage&mkt_tok=eyJpIjoiWWpoa1pHTXpNMlU0TjJWbCIsInQiOiJ0NGhaUzJTMGU1OEZLNkdvRzRleWJ0NEp1Z3JuT1hnNEFaUW9tSSs1aGU1TkRkV1hkM2pGcWFuUGp2eVRObEZYWHR4dFlRVnlOdWM5b2MxQzc5V3gyS1d2OHJXM3grNDNCcmxjK3drM2hvRmJ5OTZOayt5Y25YdUs2ZGIzcjg4OCJ9https://pixabay.com/get/52e9dd444c53a414f1dc8460da29317e1538dee7565374_640.jpgsandeep darji/PixabayFacebook, Instagram, TwitterWhatsApp, SMS3/10/20204/22/20204/22/2020Sockpuppets, Botnets5459516577302474196121111151113001113000112813
244/29/2020 11:20:540UG7TPJ6China, Russia >> NATO 2020NATOJens StoltenbergNATO AND Jens StoltenbergForeign Government BodyChina, RussiaChina, RussiaDirect AttributionStoltenberg: China/Russia Using COVID-19 to Target NATONATO Secretary-General Jens Stoltenberg accused China and Russia of spreading disinformation about NATOs response to the COVID-19 pandemic in order to “undermine the cohesion of NATO allies.”https://www.rferl.org/a/nato-s-stoltenberg-blasts-chinese-russian-disinformation-about-coronavirus/30579874.htmlhttp://web.archive.org/web/20200428004630/https://www.rferl.org/a/nato-s-stoltenberg-blasts-chinese-russian-disinformation-about-coronavirus/30579874.htmlhttps://upload.wikimedia.org/wikipedia/commons/7/7b/Jens_Stoltenberg_%284682429800%29.jpgHakan Dahlstrom/Wikimedia1/15/20204/27/20204/27/202011111012251111151113001102000000810
255/6/2020 13:13:55TUVODB5CIran >> United States 2011FacebookUnited States Technology CompanyIslamic Republic of Iran BroadcastingIranDirect AttributionFacebook: Assets Linked to IranFacebook removed 118 pages, 389 Facebook accounts, 27 groups, and 6 Instagram accounts linked to the Islamic Republic of Iran Broadcasting Corporation. The network engaged in coordinated inauthentic behavior targeted at the U.S. and other countries.https://about.fb.com/news/2020/05/april-cib-report/http://web.archive.org/web/20200506171135/https://about.fb.com/wp-content/uploads/2020/05/April-2020-CIB-Report.pdfhttps://upload.wikimedia.org/wikipedia/en/9/97/IRIB_Logo.svgWikimediaFacebook, Twitter1/1/20114/30/20205/5/2020Brigading, Sockpuppets186335590637751960163340111141113111115000101713
265/27/2020 14:27:073WTUPUK1Russia and/or China >> United States 2020Carnegie Mellon UniversityUnited StatesCivil Society OrganizationRussia, ChinaTwitter Russia, ChinaProxy/Inferred AttributionCarnegie Mellon: COVID-19 "Propaganda Machine" Emulates Russia and ChinaCMU researchers analyzed tweets discussing COVID-19 in the U.S. and found that a large portion of influential accounts are likely bots. The researchers concluded that this "propaganda machine...definitely [matched] the Russian and Chinese playbooks," but could not substantiate the connection.https://www.cs.cmu.edu/news/nearly-half-twitter-accounts-discussing-%E2%80%98reopening-america%E2%80%99-may-be-botshttp://archive.ph/YvkNahttps://pixabay.com/get/53e1d2474c55ad14f1dc8460da29317e153cdce55a5172_640.jpgGerd Altmann/PixabayTwitter1/20/20205/20/2020Botnets163287234706869301754508146011114101210000100000067
276/2/2020 12:15:394L5N3407United States >> United States 2020U.S. IntelligenceUS officialsUnited States GovernmentBoogaloo Boys, Proud Boys, ANTIFA, Foreign Actors foreign actorsDELETEProxy/Inferred AttributionFloydU.S. Officials: Foreign Actors Targeting George Floyd ProtestsU.S. officials warned that "foreign agents" could be orchestrating a social media disinformation campaign regarding the George Floyd protests.https://apnews.com/32bc90566697388645f01675359dcad1https://web.archive.org/web/20200602161336/https://apnews.com/32bc90566697388645f01675359dcad1https://upload.wikimedia.org/wikipedia/commons/6/66/George_Floyd_protests_in_Philadelphia_04.jpg.RGB./WikimediaFacebook, Instagram, Twitter, YouTube, RedditTelegram5/1/20205/31/20205/31/2020Sockpuppets, Botnets, Hacking - DDoS17599871039194412719080332471111151113101114000101813
286/4/2020 17:18:07VO553UH8Multiple, unlisted >> United States 2020Senior U.S. Official Attorney General William Barr United States GovernmentForeign Actors Proxy/Inferred AttributionBarr: Foreign Actors Targeting George Floyd ProtestsIn a press conference, Attorney General William Barr said, "We have evidence that antifa and other similar extremist groups, as well as actors of a variety of different political persuasions have been involved in instigating and participating in the violent activity.” Barr added, "We are also seeing foreign actors playing all sides to exacerbate the violence."https://abcnews.go.com/Politics/ag-barr-evidence-antifa-foreign-actors-involved-sowing/story?id=71066996https://web.archive.org/web/20200604211727/https://abcnews.go.com/Politics/ag-barr-evidence-antifa-foreign-actors-involved-sowing/story?id=71066996https://upload.wikimedia.org/wikipedia/commons/0/03/Candlelight_Vigil_2019-184_%2832905730027%29.jpgShane T. McCoy/WikimediaFacebook, Instagram, Twitter, YouTube, Reddit6/2/20206/4/20206/4/2020Sockpuppets, Botnets283088736769629115174110013010100001100000045
296/17/2020 16:47:27HJXZK59KChina >> United States 2020GoogleUnited StatesTechnology CompanyAPTChina, IranProxy/Inferred AttributionGoogle: Cyberattacks Linked to China/Iran Target 2020 ElectionGoogle announced that state-backed hackers from China targeted staffers working on Joe Bidens campaign. Separately, Iranian hackers targeted email accounts belonging to President Donald Trump's campaign staff, Google claimed.https://www.voanews.com/usa/us-politics/google-chinese-iranian-hackers-targeted-biden-trump-campaignshttps://web.archive.org/web/20200617210456/https://www.voanews.com/usa/us-politics/google-chinese-iranian-hackers-targeted-biden-trump-campaignshttps://pixabay.com/get/57e9d1474c5aa414f1dc8460da29317e153cdce4525977_640.jpgDarwin Laganzon/PixabayEmail6/4/20206/4/2020Hacking - Data Exfiltration15796549881622110420111141012111014000000610
306/17/2020 18:52:31UIWBCVSMRussia >> United States 2020New York TimesUnited StatesMedia@DanWals83975326, @DanRadov@DanWals83975326RussiaProxy/Inferred AttributionMookNYT: Russia Linked to Iowa Caucus MisinformationThe New York Times found that online personas with ties to Russia amplified a Twitter conspiracy theory about technical failures during the contested Iowa Democratic caucus.https://www.nytimes.com/2020/06/15/technology/coronavirus-disinformation-russia-iowa-caucus.htmlhttps://web.archive.org/web/20200617225128/https://www.nytimes.com/2020/06/15/technology/coronavirus-disinformation-russia-iowa-caucus.htmlhttps://upload.wikimedia.org/wikipedia/commons/9/98/Sanders_supporters_in_Iowa%2C_January_31%2C_2016.jpgMax Goldberg/WikimediaTwitter1/27/20206/15/20206/15/2020Sockpuppets, Botnets133604416102818804501111151113101103111003816
316/17/2020 17:43:04A1O7CILSRussia >> United States 2014GraphikaUnited StatesCivil Society OrganizationOperation Secondary InfektionRussiaProxy/Inferred AttributionGraphika: Russia Spreading DisinformationBuilding off of a DFRLab report, Graphika found over 2,500 pieces of content related to Secondary Infektion, a Russian information operation. The operation targeted the U.S. and other Western countries with fake stories and forged documents intended to provoke tensions between Russias perceived enemies.https://secondaryinfektion.org/report/secondary-infektion-at-a-glance/https://web.archive.org/web/20200617212215/https://secondaryinfektion.org/downloads/secondary-infektion-report.pdfhttps://pixabay.com/get/57e1dc414c51a914f1dc8460da29317e153cdce4505872_640.jpgChickenonline/Pixabay"Junk News" WebsiteFacebook, Twitter, YouTube, Reddit, Quora1/1/20146/16/2020Sockpuppets, Botnets, Deceptive Content Manipulation61932807053180123182640011131113111104111115615
326/24/2020 14:51:31L98UBEZRFOREIGN COUNTRIES >> United States Donald TrumpPresident Donald TrumpUnited StatesGovernmentForeign countriesunspecifiedTrump: Foreign Actors Will Cast Millions of Ballots in ElectionPresident Donald Trump tweeted, "RIGGED 2020 ELECTION: MILLIONS OF MAIL-IN BALLOTS WILL BE PRINTED BY FOREIGN COUNTRIES, AND OTHERS. IT WILL BE THE SCANDAL OF OUR TIMES!"https://twitter.com/realDonaldTrump/status/1275024974579982336https://upload.wikimedia.org/wikipedia/commons/4/4b/Donald_Trump_%2829496131773%29.jpgGage Skidmore/Wikimedia6/22/2020216763693864359432974391110002000000000000000022
337/23/2020 15:04:49K7AZA3CEN/A >> United States Congressional DemocratsSpeaker of the House Nancy Pelosi, Senate Democratic Leader Chuck Schumer, House Intelligence Committee Chairman Adam Schiff, and Senate Intelligence Committee Vice Chairman Mark WarnerPelosi Schumer Schiff WarnerUnited StatesGovernmentRussiaDELETECongressional Democrats: Information About Russian Interference SuppressedProminent Democrats in Congress wrote a public letter to FBI Director Christopher Wray stating that they were, “gravely concerned...that Congress appears to be the target of a concerted foreign interference campaign, which seeks to launder and amplify disinformation in order to influence congressional activity, public debate, and the presidential election in November.”https://intelligence.house.gov/news/documentsingle.aspx?DocumentID=1029https://upload.wikimedia.org/wikipedia/commons/f/fb/United_States_House_Permanent_Select_Committee_on_Intelligence.jpgWikimedia7/20/2020478142662913573521017829010113111300001100010168
347/24/2020 11:12:537OREGDIVRussia, China, Iran >> United States U.S. IntelligenceNCSC Director William EvaninaUnited States GovernmentRussia, China, Iran Russia China IranRussia, China, Iran DELETEDirect AttributionU.S. Intelligence: China, Iran, Russia Target 2020 ElectionDirector of the U.S. National Counterintelligence and Security Center William Evanina wrote in a press release that U.S. adversaries (primarily China, Russia, and Iran) were attempting to “compromise the private communications of U.S. political campaigns, candidates and other political targets” as well as election infrastructure. He also warned, “Foreign nations continue to use influence measures in social and traditional media in an effort to sway U.S. voters preferences and perspectives, to shift U.S. policies, to increase discord and to undermine confidence in our democratic process.”https://www.dni.gov/index.php/newsroom/press-releases/item/2135-statement-by-ncsc-director-william-evanina-100-days-until-election-2020https://web.archive.org/web/20200724151120/https://www.dni.gov/index.php/newsroom/press-releases/item/2135-statement-by-ncsc-director-william-evanina-100-days-until-election-2020https://pbs.twimg.com/profile_images/671742150288105472/Vl7Ww3_j_400x400.pngFacebook, Instagram, Twitter, YouTube, Reddit7/24/2020Sockpuppets, Botnets, Deceptive Content Manipulation7217773301446593972831111151102001113000000710
357/29/2020 14:44:56T6FALRDORussia >> United States 2020U.S. IntelligenceIntelligence OfficialsUnited StatesGovernmentGRU, InfoRos, SVRRussian intelligenceRussiaDirect AttributionU.S. Intelligence: Russia Amplified COVID-19 DisinformationDeclassified U.S. intelligence material describes how Russian intelligence agencies have used websites InfoRos and OneWorld.Press to spread disinformation about the COVID-19 pandemic.https://www.nytimes.com/2020/07/28/us/politics/russia-disinformation-coronavirus.htmlhttp://web.archive.org/web/20200729183812/https://www.nytimes.com/2020/07/28/us/politics/russia-disinformation-coronavirus.htmlhttps://pixabay.com/get/54e8d2444f56ac14f1dc8460da29317e153cdce4555774_640.jpgIGORN/Pixabay State Media, "Junk News" Website5/15/20207/15/20207/28/2020Deceptive Content Manipulation5777376231188665841151111151113101114000000812
368/14/2020 10:45:19619P6SZ6Russia >> United States U.S. IntelligenceNCSC Director William EvaninaUnited StatesGovernmentRussia, China, Iran Russia China IranRussia, China, Iran Direct AttributionU.S. Intelligence: China, Russia, Iran Each Targeting U.S. ElectionFollowing up on his July 24 press release, Director of the U.S. National Counterintelligence and Security Center William Evanina warned that “foreign states will continue to use covert and overt influence measures in their attempts to sway U.S. voters preferences and perspectives, shift U.S. policies, increase discord in the United States, and undermine the American peoples confidence in our democratic process.” He also information about recent propaganda efforts by China, Russia, and Iran. Only the information about Russia implicated specific actors.https://www.dni.gov/index.php/newsroom/press-releases/item/2139-statement-by-ncsc-director-william-evanina-election-threat-update-for-the-american-publichttps://upload.wikimedia.org/wikipedia/commons/f/f3/William_Evanina_official_photo.jpgWikimediaFacebook, Twitter, YouTube8/7/202016906838225710321439691111115010100111300000069
378/13/2020 11:30:49XFSW02FXChina >> United States 2020GraphikaUnited StatesPrivate ConsultancyChinavideoGraphika: China Using Spam Video PropagandaGraphika reported that social media accounts from a pro-Chinese political spam network posted English-language videos attacking American policy and the administration of President Donald Trump, in particular its handling of the COVID-19 outbreak and racial inequality as well as its moves against TikTok. The videos were poorly made and had language errors, automated voiceovers, and profile pictures generated by deep learning processes.https://public-assets.graphika.com/reports/graphika_report_spamouflage_dragon_goes_to_america.pdfhttps://web.archive.org/web/20200813152654/https://public-assets.graphika.com/reports/graphika_report_spamouflage_dragon_goes_to_america.pdfhttps://pixabay.com/get/54e6d4444f53ac14f1dc8460da29317e153cdce4545876_640.jpgStockSnap/Pixabay YouTube6/13/20208/7/20208/12/2020Botnets, Deep Learning Processes1597940441289632919290011131113111104011103613
386/12/2020 14:35:04TJ82BE1RRussia, China, Iran >> United States 2020U.S. IntelligenceDepartment of Homeland Security, ABCHomeland SecurityUnited StatesGovernmentRussia, China, IranRussia China IranRussia, China, IranDELETEDirect AttributionFloydDHS: China, Iran, Russia Target George Floyd ProtestsABC News obtained an intelligence bulletin sent to law enforcement by the Department of Homeland Security. The bulletin accuses Russia, China and Iran of "employing state media, proxy outlets, and social media accounts to amplify criticism of the United States related to the death of George Floyd and subsequent events."https://abcnews.go.com/US/intel-bulletin-warns-malign-actors-targeting-us-george/story?id=71184163http://archive.ph/F8INVhttps://pixabay.com/get/53e3dc454352a414f1dc8460da29317e153cdce6555870_640.jpgAna Carolina Mantelli/PixabayState MediaFacebook, Twitter, YouTube6/11/20209612212928512026300111141113101114000000812
399/17/2020 17:16:56508A8K4XRussia, Iran, China >>> United States 2019Department of Homeland Security, ABCABC, DHSUnited StatesMediaRussia, Iran, ChinaRussia, Iran, ChinaDirect AttributionDHS Analyst: Russian Narratives Spread About Biden Mental HealthABC leaked a draft of a Department of Homeland Security intelligence bulletin on Russian efforts to promote “allegations about the poor mental health” of former Vice President Joe Biden. The memo also mentioned Iranian and Chinese propaganda about President Donald Trumps mental health. Although the memo was submitted on July 7, it was never released because it “failed to meet the agencys standards.”https://abcnews.go.com/Politics/dhs-withheld-july-intelligence-bulletin-calling-russian-attack/story?id=72747130https://web.archive.org/web/20200914112820/https://abcnews.go.com/Politics/dhs-withheld-july-intelligence-bulletin-calling-russian-attack/story?id=72747130https://upload.wikimedia.org/wikipedia/commons/e/e5/Joe_Biden_%2848554137807%29.jpgGage Skidmore/Wikimedia9/1/20195/31/20209/2/202036450551197333454490471671111151113101114010102814
409/18/2020 0:30:3720W6K0PZRussia >>> United States 2020Kamala HarrisSenator Kamala HarrisUnited StatesInfluential IndividualRussiaRussiaDirect AttributionHarris: Foreign Interference Could Cost Her the ElectionSenator Kamala Harris (D-CA) said foreign interference could potentially cost her and former Vice President Joe Biden the White House in November. “I do believe that there will be foreign interference in the 2020 election and that Russia will be at the front of the line,” she said.https://apnews.com/79be8d5f69b1bfbcc55dbaec3ca001e4https://web.archive.org/web/20200918042650/https://apnews.com/79be8d5f69b1bfbcc55dbaec3ca001e4https://upload.wikimedia.org/wikipedia/commons/9/9a/Kamala_Harris_by_Gage_Skidmore.jpgGage Skidmore/Wikimedia9/6/20202159276664356822615926110013110200100100000056
419/18/2020 0:42:0724DYHJXIRussia >>> United States 2020U.S. IntelligenceDepartment of Homeland SecurityUnited StatesGovernmentRussiaRussiaDirect AttributionvoteDHS: Russia Targeting Confidence in Mail-In VotingIn an internal bulletin, the Department of Homeland Security warned that Russia was trying to undermine U.S. confidence in mail-in voting. Since March, Russian state media outlets have published criticism of widespread mail-in voting, the bulletin reported.https://abcnews.go.com/Politics/russia-amplifying-claims-mail-voter-fraud-intel-bulletin/story?id=72799959https://web.archive.org/save/https://abcnews.go.com/Politics/russia-amplifying-claims-mail-voter-fraud-intel-bulletin/story?id=72799959https://upload.wikimedia.org/wikipedia/commons/3/34/USPS_Mailbox.jpgIain Laurence/WikimediaState Media3/1/20209/3/20201496632837878931256972641111151113101114000000812
429/18/2020 13:27:58B67Q8PAAVenezuela >>> United States 2020White House, Rick ScottUnited StatesGovernmentNicolas MaduroVenezuelaDirect AttributionWhite House: Maduro Inciting Violence at ProtestsThe White House said that individuals linked to Venezuelan leader Nicolás Maduro have incited violence at the George Floyd protests, but refused to discuss the “non-open source information” supporting that assessment. Senator Rick Scott (R-FL) had previously highlighted a similar claim.https://www.miamiherald.com/news/politics-government/article243266536.htmlhttps://web.archive.org/save/https://www.miamiherald.com/news/politics-government/article243266536.htmlhttps://upload.wikimedia.org/wikipedia/commons/3/33/George_Floyd_Miami_Protest%2C_June_7%2C_2020_17.jpgMike Shaheen/WikimediaIndividuals at protests6/5/20208197848401409610091434110002011200111300000047
439/18/2020 17:10:58TZ3OU1FURussia >>> United States 2014DFRLabUnited StatesCivil Society OrganizationOperation Secondary InfektionRussiaDirect AttributionDFRLab: Broad Russian Influence Operation UncoveredDFRLab uncovered a broad influence operation originating in Russia. The scale of the operation, its tradecraft, and its obsession with secrecy indicate that it was run by a persistent, sophisticated, and well-resourced organization, possibly an intelligence agency. The activity took place not only on Facebook and Twitter, but also on Medium, Reddit, and other online platforms. In all, more than 30 online services were employed across 9 languages.https://www.atlanticcouncil.org/in-depth-research-reports/report/operation-secondary-infektion/https://web.archive.org/web/20200918210426/https://www.atlanticcouncil.org/in-depth-research-reports/report/operation-secondary-infektion/ScreenshotDFRLabFacebook, Instagram, Twitter, Reddit, Forum Board1/1/20146/22/2019Sockpuppets, Deceptive Content Manipulation5271436973961111151113111115101114817
449/23/2020 12:33:58W1U1SUQ9Russia, China, Iran >>> United States 2020Microsoft United States Technology CompanyStrontium, Zirconium, PhosphorusRussia, China, Iran Direct AttributionMicrosoft: Cyberattacks on Election CampaignsMicrosoft detected cyberattacks targeting people and organizations involved in the upcoming presidential election, including unsuccessful attacks on both the Trump and Biden campaigns. A Russian group has attempted to hack more than 200 political organizations. Chinese hackers have attacked high-profile individuals associated with the election, particularly the Biden campaign, and has compromised almost 150 accounts. An Iranian hacker group has targeted the accounts of people associated with the Trump campaign, as well as organizations interested in Middle Eastern politics.https://blogs.microsoft.com/on-the-issues/2020/09/10/cyberattacks-us-elections-trump-biden/https://web.archive.org/web/20200923162921/https://blogs.microsoft.com/on-the-issues/2020/09/10/cyberattacks-us-elections-trump-biden/https://upload.wikimedia.org/wikipedia/commons/thumb/9/96/Microsoft_logo_%282012%29.svg/512px-Microsoft_logo_%282012%29.svg.pngWikimediaIndependent MediaEmail, Domains 3/1/20209/10/20209/10/2020Hacking - Data Exfiltration00111141113111115010102714
459/23/2020 13:28:305SP5O2PKRussia >>> United States 2013Yahoo News YahooUnited States MediaAntifa.comRussia Proxy/Inferred AttributionYahoo News: Antifa.com Connected to RussiaAfter an OAN correspondent noted that the website URL antifa.com redirected to Joe Bidens campaign website, Yahoo News investigated the website and found that it was registered in Russia from 2013 until July 2019. Although any number of entities could have registered the URL, Yahoo's headline appeared to implicate Russia directly.https://news.yahoo.com/atifa-website-one-america-chanel-rion-russia-004727528.htmlhttps://web.archive.org/web/20200923172220/https://news.yahoo.com/atifa-website-one-america-chanel-rion-russia-004727528.htmlhttps://upload.wikimedia.org/wikipedia/commons/1/14/Antifa_logo.jpgWikimedia/Enix150Independent MediaDomain 1/1/20138/12/20208/12/2020Deceptive Content Manipulation16190583355225122249119111115001100010100000089
469/23/2020 14:11:49T81C4QVKRussia >>> United States 2020Facebook, TwitterDELETEUnited States Technology CompanyPeace Data Russia Direct AttributionFacebook: Assets and False News Organization Linked to RussiaBased on a tip from the FBI, Facebook removed 8 accounts and two pages linked to the Internet Research Agency. Twitter also removed five accounts associated with the network. The operation, centered around a fake media organization called Peace Data, used unsuspecting American freelancers to write left-leaning content. Peace Data had also tried unsuccessfully to place content in progressive magazines.https://about.fb.com/news/2020/09/august-2020-cib-report/https://web.archive.org/web/20200923174823/https://about.fb.com/news/2020/09/august-2020-cib-report/https://upload.wikimedia.org/wikipedia/commons/thumb/8/89/Facebook_Logo_%282019%29.svg/800px-Facebook_Logo_%282019%29.svg.pngWikimediaIndependent MediaFacebook12/20/20209/1/20209/1/2020Sockpuppets, Deceptive Content Manipulation, Deep Learning Processes19521517360201142326891200111141113111115011103715
479/23/2020 14:54:20BGIP9QT3Russia >>> United States CIA, Washington Post United States GovernmentDerkachRussia Direct AttributionCIA: Report on Russian Election InterferenceAccording to the Washington Post, the CIA published an assessment of Russian efforts to interfere in the November election in an internal, highly classified report. The report was prepared with input from the NSA and FBI and includes a description of Andriy Derkachs efforts to disseminate disparaging information about former Vice President Joe Biden.https://www.washingtonpost.com/opinions/2020/09/22/secret-cia-assessment-putin-probably-directing-influence-operation-denigrate-biden/https://web.archive.org/save/https://www.washingtonpost.com/opinions/2020/09/22/secret-cia-assessment-putin-probably-directing-influence-operation-denigrate-biden/https://upload.wikimedia.org/wikipedia/commons/9/95/CIA_Original_Headquarters_Building.jpgWikimediaIndependent MediaPersonal communications 8/31/20209/22/2020Lobbying 01111151113001113000101812
489/23/2020 15:03:48ELWQ0IFJChina >>> United States 2016FacebookUnited States Technology CompanyChina China Direct AttributionFacebook: Assets Linked to ChinaFacebook removed 155 accounts, 11 pages, 9 groups, and 6 Instagram accounts for coordinated inauthentic behavior. The activity originated in China and focused on the U.S. and Southeast Asia, although the network gained almost no following in the U.S. It posted content both in support of and against presidential candidates Pete Buttigieg, former Vice President Joe Biden and President Donald Trump, as well as commentary on naval activity in the South China Sea and regional politics.https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-china-philippines/https://web.archive.org/web/20200923185920/https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-china-philippines/https://upload.wikimedia.org/wikipedia/commons/6/6f/Flag_map_of_China_with_disputed.pngWikimedia/DrRandomFactorIndependent MediaFacebook, Instagram9/1/20169/22/20209/22/2020Sockpuppets, Botnets, Deceptive Content Manipulation00111141113111115010113715
499/23/2020 16:54:3244PI58XERussia >>> United States FBI United States GovernmentRussia Russia Direct AttributionFBI Director: Russia Undermining Joe BidenIn testimony to the House Committee on Homeland Security, FBI Director Christopher Wray said that Russia continues to undermine former Vice President Joe Biden in an attempt to influence the presidential election. Russia uses social media, online proxies, state media, and online journals to “to denigrate [Biden] and what the Russians see as an anti-Russian establishment,” Wray said.https://thehill.com/policy/cybersecurity/516912-fbi-director-wray-warns-russia-is-interfering-in-election-to-underminehttps://web.archive.org/web/20200923204839/https://thehill.com/policy/cybersecurity/516912-fbi-director-wray-warns-russia-is-interfering-in-election-to-underminehttps://upload.wikimedia.org/wikipedia/commons/3/31/FBI_Headquarters_at_night.jpgWikimediaState MediaFacebook, Instagram, Twitter, YouTube, Reddit11/3/20209/17/2020Sockpuppets, Botnets, Deceptive Content Manipulation, Deep Learning Processes01111151113101114000000812
509/24/2020 9:50:4032NQ6NQWRussia,China, Iran >>> United States Mike Pompeo United States GovernmentRussia,China, Iran Russia,China, Iran Direct AttributioncoronavirusMike Pompeo: Disinformation on COVID-19Secretary of State Mike Pompeo accused China, Russia, and Iran of “coordinated efforts to disparage” the U.S. response to COVID-19. He attributed the disinformation to both governments and individuals. He also mentioned false rumors about lockdowns in the U.S. and the origin of the virus.https://www.whitehouse.gov/briefings-statements/remarks-president-trump-vice-president-pence-members-c-oronavirus-task-force-press-briefing/https://web.archive.org/web/20200924134441/https://www.whitehouse.gov/briefings-statements/remarks-president-trump-vice-president-pence-members-c-oronavirus-task-force-press-briefing/https://upload.wikimedia.org/wikipedia/commons/c/c8/White_House_Press_Briefing_%2849679776593%29.jpgWikimediaIndependent MediaFacebook, Twitter3/20/2020Sockpuppets, Deceptive Content Manipulation, Unspecified 6330899355557379895110002010100111300000036
519/24/2020 11:48:14DHK75NESChina >>> United States Department of State DELETEUnited States GovernmentZhao Lijian, Foreign MinistryZhao LijianChina Direct AttributioncoronavirusState Department: Chinese Ambassador Zhao Lijian Spread ConspiracyZhao Lijian, the Chinese Ambassador to the U.S., implied in a Tweet that the U.S. might be responsible for COVID-19: “It might be US army who brought the epidemic to Wuhan. Be transparent! Make public your data! US owe us an explanation!” Hours later, he was summoned to the State Department by Assistant Secretary of State David Stilwell.https://www.cnn.com/2020/03/13/politics/state-department-chinese-ambassador-coronavirus/index.htmlhttps://web.archive.org/save/https://www.cnn.com/2020/03/13/politics/state-department-chinese-ambassador-coronavirus/index.htmlhttps://upload.wikimedia.org/wikipedia/commons/2/2f/MOFAChinaChaoyang.JPGWikimedia/WhisperToMeState MediaTwitter3/12/20203/12/2020Deceptive Content Manipulation685081295122300716893401111151113111115011002815
529/24/2020 12:03:03YW777IWIRussia, China, Iran >>> United States State Department, GEC, Lea Gabrielle State Department, GECUnited States GovernmentRussia, China, Iran Russia, China, Iran Direct AttributionState Department: Russia, China, Iran Increase DisinformationLea Gabrielle, Special Envoy and Coordinator of the State Departments Global Engagement Center, said that Russia, China, and Iran have sharply increased their disinformation about the coronavirus since January, sometimes repeating and amplifying each others propaganda.https://www.state.gov/briefing-with-special-envoy-lea-gabrielle-global-engagement-center-on-disinformation-and-propaganda-related-to-covid-19/https://web.archive.org/web/20200924155426/https://www.state.gov/briefing-with-special-envoy-lea-gabrielle-global-engagement-center-on-disinformation-and-propaganda-related-to-covid-19/https://upload.wikimedia.org/wikipedia/commons/e/e9/Truman_building.jpgWikimedia/CtacIndependent MediaFacebook, Instagram, Twitter, YouTube, Reddit3/27/20203/27/2020Sockpuppets536225756498586221111151113011114000000812
539/24/2020 12:35:21XVMM45G3China >>> United States German Marshall Fund Alliance for Securing DemocracyUnited States Civil Society OrganizationChina China Direct AttributionTwitterGMF: Twitter Output from Chinese Accounts Rises SharplyAn analysis by the German Marshall Fund found that Twitter output from official Chinese accounts around the world has almost doubled since January, reaching 90,000 tweets in April and May. Since the COVID-19 outbreak, Chinese accounts "have become more aggressive [and] more conspiratorial.”https://www.nbcnews.com/news/world/china-launches-new-twitter-accounts-90-000-tweets-covid-19-n1207991https://web.archive.org/web/20200924163219/https://www.nbcnews.com/news/world/china-launches-new-twitter-accounts-90-000-tweets-covid-19-n1207991https://upload.wikimedia.org/wikipedia/commons/f/f6/Coronavirus_SARS-CoV-2.jpgWikimedia/Felipe Esquivel ReedState MediaTwitter5/20/20205/20/2020Brigading, Deceptive Content Manipulation10660110590312668271111151113111104111014816
549/24/2020 12:48:284B02962ZChina >>> United Kingdom BBC United Kingdom MediaChina China Proxy/Inferred AttributionFacebookBBC: Fake Accounts Pushing Chinese PropagandaA BBC investigation found that more than 1,200 fake or hijacked social media accounts have been pushing pro-Chinese government messages about the coronavirus pandemic on Facebook, Twitter and YouTube. Although the BBC could not definitively link the accounts to the Chinese government, it noted similarities to Chinese networks discovered by Twitter in August 2019 and Graphika in April 2020.https://www.bbc.com/news/blogs-trending-52657434https://web.archive.org/web/20200924163841/https://www.bbc.com/news/blogs-trending-52657434https://upload.wikimedia.org/wikipedia/commons/6/62/BBC_News_2019.svgWikimedia/BBC NewsIndependent MediaFacebook, Twitter, YouTube5/28/20205/28/2020Sockpuppets, Botnets, Deceptive Content Manipulation3799577137839144141111151113111104111115817
559/24/2020 13:15:32EPRR4RESChina >>> United States GEC, Department of State GECUnited States GovernmentChina China Direct AttributionTwitterState Department: Inauthentic Twitter Accounts Tied to ChinaThe State Departments Global Engagement Center announced that it had uncovered a network of inauthentic Twitter accounts designed to amplify Chinese propaganda. When it sent a sample of 5,000 accounts to Twitter, however, Twitter found that many of the accounts belonged to government entities, NGOs, and journalists.https://www.state.gov/briefing-with-special-envoy-lea-gabrielle-global-engagement-center-update-on-prc-efforts-to-push-disinformation-and-propaganda-around-covid/https://web.archive.org/web/20200924171128/https://www.state.gov/briefing-with-special-envoy-lea-gabrielle-global-engagement-center-update-on-prc-efforts-to-push-disinformation-and-propaganda-around-covid/https://upload.wikimedia.org/wikipedia/commons/0/0b/Flag_of_the_United_States_Department_of_State.svgWikimediaState MediaFacebook, Twitter5/8/20205/8/2020Brigading, Sockpuppets, Botnets, Deceptive Content Manipulation7064214393210139241111151113111115010102815
569/24/2020 13:36:305Q5D6SZOChina >>> United States Robert O'BrienUnited States GovernmentChina China Direct AttributionU.S. Official: China Has the Largest Program to Influence ElectionNational Security Advisor Robert OBrien said that China “had the most massive program to influence the United States politically,” followed by Iran and then Russia. He did not provide any additional details.https://www.reuters.com/article/us-usa-election-china/trump-security-adviser-says-china-has-biggest-election-interference-program-idUSKBN25V2NYhttps://web.archive.org/web/20200924173401/https://www.reuters.com/article/us-usa-election-china/trump-security-adviser-says-china-has-biggest-election-interference-program-idUSKBN25V2NYhttps://upload.wikimedia.org/wikipedia/commons/thumb/8/8d/Seal_of_the_U.S._National_Security_Agency.svg/600px-Seal_of_the_U.S._National_Security_Agency.svg.pngWikimediaIndependent Media9/4/20209/4/2020Hacking - DDoS, Hacking - Data Exfiltration0111115010100101200000068
579/24/2020 13:47:090R5N2DK5Russia >>> United States Kamala Harris United States Influential IndividualRussian Bots Russia Direct AttributionHarris: Campaign Targeted by Russian BotsSenator Kamala Harris (D-VA) claimed her presidential campaign was targeted by Russian bots. A Twitter spokesperson said that the company had no evidence that Harris was the target of state-backed bots, however.https://www.cnn.com/2019/07/16/politics/kamala-harris-twitter-bots/index.htmlhttps://web.archive.org/web/20200924174300/https://www.cnn.com/2019/07/16/politics/kamala-harris-twitter-bots/index.htmlhttps://upload.wikimedia.org/wikipedia/commons/2/29/Kamala_Harris_with_LACC_reps.jpgWikimediaIndependent MediaTwitter7/16/20197/16/2019Botnets31608321540076110013000010100200000035
589/24/2020 13:55:02AT5BWCEZRussia >>> United States Pentagon, Department of Defense United States GovernmentRussia Russia Direct AttributionU.S. Officials: Russian Influence Operation Aimed at MilitaryA survey of armed services households found that 46% viewed Russia as an ally. This result concerned defense officials, who worried that Russia intended to seed U.S. military personnel with the right type of disinformation so that they would be predisposed to view Russia favorably. Defense officials noted that a Russian influence campaign has been targeting U.S. military personnel since 2017.https://www.voanews.com/usa/pentagon-concerned-russia-cultivating-sympathy-among-us-troopshttps://web.archive.org/web/20200924175211/https://www.voanews.com/usa/pentagon-concerned-russia-cultivating-sympathy-among-us-troopshttps://upload.wikimedia.org/wikipedia/commons/0/01/Pentagon_satellite_image.jpgWikimediaIndependent MediaFacebook, Instagram, Twitter, YouTube, Reddit12/8/201912/8/2019Sockpuppets, Botnets, Deceptive Content Manipulation53157671356217441111151102011114000000711
599/24/2020 14:59:33QGYY2XPERussia >>> United States 2020Bloomberg News U.S. intelligenceUnited States MediaRussia Russia Direct AttributionJoe BidenBloomberg News: U.S. Officials Assess Russian Attacks on BidenBloomberg News reported that U.S. intelligence and law enforcement officials were assessing whether Russia was trying to undermine Joe Biden. The inquiry explored whether Russia may be promoting controversy over Biden's involvement in U.S. policy toward Ukraine at the same time as his son worked for an energy company there.https://www.bloomberg.com/news/articles/2020-01-10/u-s-probes-if-russia-targeting-biden-in-2020-election-meddlinghttps://web.archive.org/web/20200908062851/https://www.bloomberg.com/news/articles/2020-01-10/u-s-probes-if-russia-targeting-biden-in-2020-election-meddlinghttps://upload.wikimedia.org/wikipedia/commons/f/f8/Joe_Biden_%2849404623708%29.jpgWikimedia/Gage SkidmoreIndependent MediaFacebook, Instagram, Twitter, YouTube, Reddit9/1/202011/3/20201/10/2020Deceptive Content Manipulation140973517160716206860331110141113001113000000710
609/24/2020 16:11:24M5L3A3M0Russia >>> United States Intelligence OfficialsUnited States GovernmentRussia Russia Direct AttributionU.S. Intelligence: Russia Interfering in Support of TrumpIntelligence officials briefed the House Intelligence Committee that Russia was interfering in the 2020 election in support of President Donald Trump. They also disclosed that Russia intended to interfere with the 2020 Democratic primaries. The briefing angered Trump, and his allies challenged the conclusions reached by the intelligence officials.https://www.nytimes.com/2020/02/20/us/politics/russian-interference-trump-democrats.htmlhttps://web.archive.org/web/20200924200912/https://www.nytimes.com/2020/02/20/us/politics/russian-interference-trump-democrats.htmlhttps://upload.wikimedia.org/wikipedia/commons/1/10/United_States_House_Committee_on_Intelligence_hearing_on_Emerging_Technologies_and_National_Security_-_Posturing_the_U.S._Intelligence_Community_for_Success.jpgWikimedia/Adam SchiffIndependent MediaFacebook, Instagram, Twitter, YouTube, Reddit2/13/20202/20/2020Sockpuppets, Deceptive Content Manipulation213729218139414355824622448411111151113001113000101812
619/24/2020 16:17:45QOTUZHN6Russia >>> United States 2020Chad Wolf, DHS United States GovernmentRussia Russia Direct AttributionDHSU.S. Official: COVID-19 Lockdown Rumors Tied to RussiaActing Homeland Security Secretary Chad Wolf discussed text messages claiming that the U.S. was about to impose a COVID-19 lockdown, describing them as a “disinformation campaign” that might have originated in Russia.https://thehill.com/homenews/administration/488894-dhs-chief-false-reports-of-national-shutdown-may-be-part-of-russianhttps://web.archive.org/web/20200924201525/https://thehill.com/homenews/administration/488894-dhs-chief-false-reports-of-national-shutdown-may-be-part-of-russianhttps://upload.wikimedia.org/wikipedia/commons/2/22/Chad_F._Wolf_2019.jpgWikimedia/Inter-American DialogueIndependent MediaWhatsApp, SMS3/1/20203/22/20203/22/2020Deceptive Content Manipulation3358126152363616111115000000100100000057
629/24/2020 16:32:14V5TT6RXMRussia >>> United States Yahoo News United States MediaRussia Russia Direct AttributionDHS: Russia Likely to Target ElectionYahoo News obtained a DHS intelligence assessment that concluded, “Russian influence actors almost certainly will continue to target U.S. audiences with influence activities that seek to advance Russian interests, and probably view the 2020 presidential election as a key opportunity to do so.” The assessment, which was coordinated with the FBI, CIA, and NSA, examined a small number of social media accounts likely controlled by Russian influence actors and found that they attempted to aggravate social and racial tensions, undermine trust in US officials, and criticize anti-Russian politicians.https://news.yahoo.com/dhs-warns-russia-influence-2020-elections-170005501.htmlhttps://web.archive.org/web/20200924202820/https://news.yahoo.com/dhs-warns-russia-influence-2020-elections-170005501.htmlhttps://www.gao.gov/extracts/81ab3b0a5e06d5402a59d642d5ee5e98/rId17_image5.pngGAOIndependent MediaFacebook, Instagram, Twitter, YouTube, Reddit1/1/201910/24/2019Sockpuppets, Deceptive Content Manipulation73716805805671111151113001113000000811
639/24/2020 16:42:4953QRMVHSRussia >>> United States 2017Graphika United States Private ConsultancyRussiaRussiaProxy/Inferred AttributionUK tradeGraphika: UK-US Trade Documents Leaked by RussiaGraphika assessed that unredacted UK-US trade documents leaked before Britains December 2019 general election were posted and amplified in a way that closely resembled the Russian information operation known as Secondary Infektion. Graphika could not definitively attribute the documents to the unknown actors behind that operation, however.https://public-assets.graphika.com/reports/graphika_report_uk_trade_leaks_updated_12.12.pdfhttps://web.archive.org/web/20200924203710/https://public-assets.graphika.com/reports/graphika_report_uk_trade_leaks_updated_12.12.pdfhttps://upload.wikimedia.org/wikipedia/commons/d/d6/Lenin_museum%2C_Moscow_center.jpgWikimedia/AndreyIndependent MediaFacebook, Instagram, Twitter, YouTube, Reddit5/4/201712/2/2019Sockpuppets, Botnets, Hacking - Data Exfiltration7378912891417420271011141012111104111104513
649/24/2020 16:52:04025KQA5PIran >>> United States The Daily Beast, TwitterDELETEUnited States MediaIran Iran Proxy/Inferred AttributionreporterTwitter: Fake, Pro-Iran Accounts Impersonate ReportersTwitter suspended fake accounts impersonating New York Post and Haaretz reporters. The accounts promoted false stories that contained pro-Iranian government propaganda as well as attacks on Iranian opposition groups and Israel.https://www.thedailybeast.com/new-york-post-reporters-identity-stolen-to-spread-iran-propagandahttps://web.archive.org/web/20200925043527/https://www.thedailybeast.com/new-york-post-reporters-identity-stolen-to-spread-iran-propagandahttps://upload.wikimedia.org/wikipedia/commons/2/26/New_York_Post.svgWikimediaIndependent MediaTwitter1/8/2020Sockpuppets, Deceptive Content Manipulation87218041702846181111151113111104000112814
659/24/2020 17:04:53NGORFHPJAlbania >>> United States The Intercept DELETEUnited States MediaMojahedin-e-KhalqHeshmet AlaviAlbaniaDELETEDirect AttributionThe Intercept: Articles Written by MEK PersonaThe Intercept reported that a fictitious persona going by the name Heshmat Alavi, which had published articles in Forbes, The Hill, the Daily Caller, and The Federalist, was actually a group account run by Iranian opposition group Mojahedin-e-Khalq (MEK). One of the those articles was cited by the White House in an exchange with a reporter.https://theintercept.com/2019/06/09/heshmat-alavi-fake-iran-mek/https://web.archive.org/web/20200924210145/https://theintercept.com/2019/06/09/heshmat-alavi-fake-iran-mek/https://upload.wikimedia.org/wikipedia/commons/3/32/Logo_of_the_People%27s_Mujahedin_of_Iran.pngWikimediaIndependent MediaMainstream media 4/1/20186/9/2019Sockpuppets1358512441337263631211111151113111104011103815
669/24/2020 17:19:47Z6BKMSE3Russia >>> United States 2019Facebook United States Technology CompanyRussia Russia Direct AttributionFacebook: Assets Linked to RussiaFacebook removed three separate networks originating in Russia for coordinated inauthentic behavior. Together, these networks totaled 242 accounts, 42 pages, 19 groups, and 45 Instagram accounts. They were all targeted in part at the U.S. and engaged in activities like impersonating locals in order to contact news organizations, driving viewers to off-platform sites, soliciting written content, and criticizing U.S. policy in the Middle East. These networks had connections to the Internet Research Agency and likely connections to Russian intelligence and military intelligence.https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-russia/https://web.archive.org/web/20200924211455/https://about.fb.com/news/2020/09/removing-coordinated-inauthentic-behavior-russia/https://upload.wikimedia.org/wikipedia/commons/6/60/%D0%94%D0%BE%D0%BC_%D0%BF%D1%80%D0%B0%D0%B2%D0%B8%D1%82%D0%B5%D0%BB%D1%8C%D1%81%D1%82%D0%B2%D0%B0_%D0%A0%D0%A4.jpgWikimedia/Krylov IvanIndependent MediaFacebook, Instagram7/1/20199/24/20209/24/2020Sockpuppets, Deceptive Content Manipulation00111141113111115010113715