美国国家公共电台 NPR Facebook Shuts 652 Iran-Backed Accounts Linked In Global Disinformation Campaign

AILSA CHANG, HOST:

We're learning more today about ongoing 1 cyberattacks against political targets in the United States. We've been talking a lot about how Russia has been involved in disinformation campaigns, but now they're not the only state actor that has been accused by a major U.S. tech company of these types of efforts. Facebook said tonight that it has discovered and disrupted an Iranian disinformation campaign on its network. That is in addition to a new Russian disinformation campaign.

NPR political reporter Tim Mak is on this story, and he joins us now. Welcome.

TIM MAK, BYLINE 2: Thank you.

CHANG: So can you just start us off by telling us, exactly what did Facebook discover tonight?

MAK: So Facebook says it has taken down a coordinated 3 network of pages originating in Iran and targeting users in the Middle East, in Latin America, the U.K. and the United States. And so this campaign involves some 652 pages with close to a million Facebook followers 4 and thousands of dollars of advertising 5 buys.

So these Facebook and Instagram accounts - they did a number of things. They pretended to be an independent Iranian media organization while actually linking back to Iranian state media. In other parts of the network, they falsely posed as news and civil society organizations to spread political disinformation. And this campaign also involved more traditional kind of cyberattacks. This is like attempted hacking 6 and efforts to spread what we call malware. The network of accounts also pushed narratives 7 that include anti-Saudi, anti-Israeli, pro-Palestinian themes as well as support for specific American policies favorable to Iran.

CHANG: So how did Facebook find out that these campaigns were even happening?

MAK: It's interesting. They were originally tipped off not by kind of their internal security processes but by FireEye, a third-party cybersecurity firm. And so Facebook launched an investigation 8, and they revealed hundreds of these Iranian-linked accounts. Facebook has also been emphasizing its work with American law enforcement, and it shared the information about this disinformation campaign that it has discovered with the U.K. and American governments. Also because Iran is currently subject to some pretty strict sanctions, Facebook has briefed the Treasury 9 and State Departments on what they found through the investigation that they announced this evening.

CHANG: Now, hasn't much of this kind of activity been connected to Russia usually?

MAK: Yeah, we've talked a lot about...

CHANG: Yes.

MAK: ...Russian disinformation.

CHANG: Over and over again.

MAK: And what it looks like now is that the Iranian campaign took a page out of Russia's playbook, that, you know - and we know that not - that Facebook tonight announced not just an Iranian campaign because that - I mean, that is what is new about...

CHANG: Right.

MAK: ...What we're learning today. But they also announced that it's - that Facebook has disrupted new Russian accounts. I mean, we talked three weeks ago when Facebook shut down more than 30 Russian accounts. It had a massive scope and following that seems similar to what Iranians have done in this case. Separately, Microsoft in a separate announcement - they said that they had shut down an attempted attack on conservative think tanks and the U.S. government by a Russian hacking group called Fancy Bear. So here's Senator Lindsey Graham at a cybersecurity hearing this afternoon.

(SOUNDBITE OF ARCHIVED RECORDING)

LINDSEY GRAHAM: America is under cyberattack. We're beginning to act but not quick enough and not forcefully enough.

CHANG: Does it seem like there will be more cyberattacks going forward this year? I mean, are you getting any sense of that in your reporting?

MAK: Yeah. Senator Mark Warner said that there's a lot of tech companies lining 10 up essentially 11 to disrupt some of these campaigns by state actors. We'll see that over and over again probably in the coming months as we approach the midterm elections. We're - what we're worried about is not only Russian cyber operations, not only Iranian cyber operations but possibly from North Korea and China as well.

CHANG: That's NPR's Tim Mak. Thank you.

MAK: Thanks a lot.