Facebook fights Russian-linked hackers, cyber campaigns spreading disinformation on Ukraine
- Meta, the social network’s parent company, says it has taken down a misinformation network comprised of individuals and sites pushing fake news about the Russia-Ukraine war
- Tactics include using fake accounts to spread false stories about Ukrainian troops surrendering or calls for a street protest in Warsaw against the Polish government.
Facebook’s parent company Meta on Thursday said Russian state actors and others are relentlessly trying to use the social network against Ukraine with deception, hacking and coordinated bullying campaigns.
Social media networks have become one of the fronts in Russia’s invasion of Ukraine, home to sometimes misleading information but also real-time monitoring of one of the biggest geopolitical crises in decades.
“Since the start of the Russian invasion of Ukraine, our teams have been on high alert to detect and disrupt threats and platform abuse, including attempts to come back by networks we removed before,” Meta said in its latest threat report.
War has turned TikTok into top source of misinformation, say experts
A spike in activity aimed at Ukraine soon before it was invaded by Russia in February has become an entrenched battle, according to Meta influence operations threat intelligence team leader Ben Nimmo.
Tactics have included using bogus accounts to spread false stories such as Ukrainian troops surrendering or call for a street protest in Warsaw against the Polish government.
Meta said it disrupted a network of about 200 Facebook accounts in Russia that were working together to falsely accuse people of violating the social network’s policies to get posts about Ukraine removed.
Those involved tried to disguise their collaboration as a cooking-themed group, according to the social network.
“The majority of these fictitious reports focused on people in Ukraine and Russia,” Meta said in the report.
“The people behind this activity relied on fake, authentic, and duplicate accounts to submit hundreds – in some cases, thousands – of complaints against their targets.”
Such coordinated bullying campaigns are referred to as “mobbing.”
Fact checkers say YouTube allows its platform to be used as a weapon of disinformation
Meanwhile, government-linked “actors” from Russia and its ally Belarus have engaged in cyber espionage and covert influence operations online, according to Meta.
That malicious activity took aim at the Ukrainian telecom and defence sectors along with tech platforms, journalists and activists, the report indicated.
Meta executives said they have seen a “further spike” in attacks by a Russia-linked hacker-group known as Ghostwriter.
How to tell if you are reading #fakenews
Ghostwriter’s typical tactic is to target victims with “phishing” emails that trick them into clicking on deceptive links in an effort to steal login credentials.
The goal appeared to be to spread links to misinformation.
“Since our last public update, this group has attempted to hack into the Facebook accounts of dozens of Ukrainian military personnel,” Meta said in the report.
“In a handful of cases, they posted videos calling on the Army to surrender as if these posts were coming from the legitimate account owners.”
How Russian censorship law targets ‘fake news’ about war in Ukraine
Meta blocked those videos from being shared, according to head of security policy Nathaniel Gleicher.
“These threat actors are not going to give up,” Gleicher said on a telephone briefing. “They are increasingly blending their techniques.”
Facebook has restricted Russian state media’s ability to earn money on the social media platform and has refused to stop using fact-checkers and content warning labels on state media posts.
Facebook, TikTok, Twitter and the struggle to address coronavirus misinformation on social media platforms
“We are actively reviewing additional action we should take, particularly in the context of misinformation from government pages,” Gleicher said.
Meta, whose family of apps includes Instagram, has blocked the accounts of the Russian state-run media RT and Sputnik in the European Union.
Moscow responded by blocking Facebook and Instagram.