FRESH AIR

Revealed: A more sophisticated side of Iranian online propaganda operations

June 3, 2019 | Oved Lobel

Istock 803260700

 

On May 28, Facebook and Twitter both announced that they’d removed scores of accounts and pages for “coordinated inauthentic behaviour” originating in Iran. Twitter removed at least 2,800 accounts, while Facebook removed dozens of accounts, pages, and groups across its platforms, including Instagram.

This in and of itself is unsurprising. AIJAC has been covering the expansive Iranian disinformation campaign since it was first revealed in August 2018, when Google, Facebook, and Twitter all began mass purges against these operations.

The overarching influence operation, which had been running undetected since at least 2012, was being conducted under the umbrella of something called the International Union of Virtual Media (IUVM). The IUVM, as AIJAC wrote in December, is comprised of “over 70 websites in at least 15 countries…with an aggregated visitor rate of over 500,000 per month and promoted by some social media accounts with over a million followers.” This network launders Iranian propaganda while pretending to be local news sources with local concerns.

What differentiates the most recent bans is that some of the accounts are mimicking real people, including journalists and two Republican congressional candidates, and targeting the disinformation at specific influential individuals and Iranian dissidents in the US and Europe. This campaign was first uncovered by the cybersecurity firm FireEye, although unlike its previous report on the IUVM network, FireEye did not attribute it directly to Iran, and neither did Twitter or Facebook.

A review by the Atlantic Council’s Digital Forensics Research (DFR) Lab of some of the accounts and pages removed from Facebook does indicate that the network is pushing Iranian talking points, although it concludes that the campaign failed to garner much attention and was mostly shut down by 2017.

The only real exception was an account that mimicked and linked to Saudi Arabian broadcaster Al Arabiya. The fake account, @AlArabyi, utilised an approach referred to as “typosquatting,” or changing one or two letters in a link or account name to trick people into believing it’s genuine. This Iranian “typosquatting” was covered in a May 14 report by the University of Toronto’s Citizen Lab, which dubbed the disinformation campaign, running since at least 2016, “Endless Mayfly” and tied it to the IUVM.

Unlike the IUVM, Endless Mayfly involved websites that are made to look identical to the respectable sites they are mimicking, like Harvard’s Belfer Centre for Science and International Affairs, but with a letter or two changed in the link address and, of course, pushing fake articles. If the articles were picked up by any mainstream outlets, the fabrications would be deleted and the link changed to redirect to the genuine site to make it difficult to track down the source, even as the Endless Mayfly network amplified the disinformation.

Endless Mayfly also involved the invention of personas to target specific individuals, and even tried to get articles and bylines published under these fake names. Citizen Lab identified dozens of fake sites, over a hundred fake articles, and about a dozen fake personas comprising the campaign – which according to the New York Times had reportedly previously been believed to be tied to Russia rather than Iran.

Like DFR, Citizen Lab concluded that the campaign, while still seemingly operational, has now mostly been shut down and was never particularly successful, although a former Israeli Intelligence Official told the New York Times he was impressed by the real-time reactions of whoever was behind the campaign. In one incident, right after then-Israeli Defence Minister Avigdor Lieberman resigned in protest over a ceasefire with Hamas, a fake article on a fake version of the Belfer Center website quoted ex-Mossad chief Tamir Pardo telling the Belfer Center that Lieberman had been dismissed because he was a Russian agent. The article was then spread by the fake persona “Bina Melamed.” Pardo had in fact just spoken at the Belfer Center, and the ability to immediately create a clone website that drew on real events demonstrates much more situational awareness than previous disinformation campaigns.

Over the past year, the sophistication and scope of Iran’s propaganda network and disinformation operations have slowly been revealed to be far more sweeping than imagined in 2018. Although it’s good that the campaigns reported to date seem to have received relatively little engagement, it is unlikely we’ve seen the full extent of them, and they are already having significant real-world impacts. After all, if Iranian fabrications can spark Pakistani nuclear threats against Israel and be cited by Israeli politicians like Yair Lapid – both things that have already happened – how many likes or follows they receive may be beside the point.

Tags: , , ,

RELATED ARTICLES

Fighters and military vehicles belonging to Syrian government forces intervene in the city of Sweida to enforce a ceasefire between Druze factions and Bedouin tribes. Syria, July 20, 2025 (Image: Shutterstock)

Druze crisis tested Israel’s Syria strategy

Jul 31, 2025 | Featured, Fresh AIR
Image: Shutterstock

Media Matters: Smoke and Ire over IHRA

Jul 30, 2025 | Featured, Fresh AIR
President Bill Clinton walks Prime Minister Ehud Barak of Israel and Yasser Arafat of the Palestinian Authority at Camp David, Maryland, July 2000 (Image: Wikipedia)

The silver anniversary of the silver bullet

Jul 29, 2025 | Featured, Fresh AIR
A protest in response to the death in detention of Mahsa Amini by Iran's morality police in Tehran (Image: Tolga Ildun/ Shutterstock)

Diaspora Iranians hope for more attention to the plight of the Iranian people

Jul 24, 2025 | Featured, Fresh AIR
Image: Shutterstock

An AIJAC letter the Sydney Morning Herald refused to publish

Jul 14, 2025 | Featured, Fresh AIR
Screenshot from a video showing radical Israeli rioters torching Palestinian homes in the West Bank town of Huwara in 2023

Myths and Facts about Settler violence

Jul 10, 2025 | Featured, Fresh AIR
D11a774c 2a47 C987 F4ce 2d642e6d9c8d

Bibi in DC, the Houthi threat and the politicised ICJ opinion

Jul 26, 2024 | Update
Image: Shutterstock

Nine months after Oct. 7: Where Israel stands now

Jul 10, 2024 | Update
Palestinian Red Crescent workers from Al-Najjar Hospital in the city of Rafah, south of the Gaza Strip (Image: Shutterstock)

Hamas’ impossible casualty figures

Mar 28, 2024 | Update
455daec3 C2a8 8752 C215 B7bd062c6bbc

After the Israel-Hamas ceasefire for hostages deal

Nov 29, 2023 | Update
Screenshot of Hamas bodycam footage as terrorists approach an Israeli vehicle during the terror organisation's October 7, 2023 attack in southern Israel, released by the IDF and GPO (Screenshot)

Horror on Video / International Law and the Hamas War

Oct 31, 2023 | Update
Sderot, Israel. 7th Oct, 2023. Bodies of dead Israelis lie on the ground following the attacks of Hamas (Image: Ilia Yefimovich/dpa/Alamy Live News)

Israel’s Sept. 11, only worse

Oct 11, 2023 | Update
Screenshot 2025 08 08 At 2.05.36 pm

Israel’s latest Gaza plan: Colin Rubenstein on Sky News

Aug 8, 2025 | Featured, Video
Screenshot

‘We cannot deny Hamas’ role in this’: Joel Burnie on Sky News

Jul 25, 2025 | Featured, Video
Screenshot 2025 07 11 At 12.30.23 pm

‘Time’s up for talk’: Joel Burnie discusses Antisemitism Envoy’s report on Sky News

Jul 11, 2025 | Video
Screenshot

‘Optimism’ for Hamas to ‘exile’ their power and create a permanent ceasefire with Israel: Joel Burnie on Sky News

Jun 30, 2025 | Featured, Video
Screenshot

Australian government’s response to Iran-Israel conflict ‘disappointing’: Paul Rubenstein on Sky News

Jun 17, 2025 | Video
Screenshot

UNRWA feeds the ‘Palestinian delusion’ of no Jewish state: Dr Einat Wilf on Sky News

Jun 12, 2025 | Featured, Video

RECENT POSTS

The Hamas military wing released another video of Israeli hostage Evyatar David (Source: Reddit)

Appeasement has a price – and the hostages are paying it

Screenshot 2025 08 08 At 2.05.36 pm

Israel’s latest Gaza plan: Colin Rubenstein on Sky News

UK Prime Minister Keir Starmer with Canadian Prime Minister Mark Carney (Image: No 10 Downing Street/ Flickr)

Gullible West’s Palestinian statehood threats are peak idiocy

Aid provided by the Gaza Humanitarian Foundation (Screenshot)

How the West was lost

Protesters gather in central Tel Aviv calling on the Israeli government to sign an agreement for the release of hostages held in Gaza (Image: Shutterstock/ Vladi Konov)

Among Israelis, the view of the situation in Gaza is complex — rooted in a trust deficit

SORT BY TOPICS