Facebook shuts down pro-Russian network, Ukraine account hijacks

accreditation
0:00
play article
Subscribers can listen to this article
Facebook found and disabled a disinformation network that operated accounts, groups and pages targeting Ukraine across its social networks (Photo Illustration by Rafael Henrique/SOPA Images/LightRocket via Getty Images)
Facebook found and disabled a disinformation network that operated accounts, groups and pages targeting Ukraine across its social networks (Photo Illustration by Rafael Henrique/SOPA Images/LightRocket via Getty Images)
Rafael Henrique/SOPA Images/LightRocket via Getty

Meta Platforms found and disabled a disinformation network that operated accounts, groups and pages targeting Ukraine across its social networks, the company said late Sunday. 

The company also identified a number of Ukrainian public figures whose accounts were compromised by Ghostwriter, a known threat actor with a history of spreading Kremlin-friendly propaganda.

Meta has seen an uptick in targeting of Ukrainian users with disinformation and attempts to hijack accounts over the past few days as the nation grapples with an invasion by Russian military forces. With the conflict taking center stage in global news, Meta has “amplified” its cybersecurity team with a special operations center and is “taking rapid and proactive steps to change the situation on-platform and make things safer,” Nathaniel Gleicher, its head of security policy, said on a conference call.

The Facebook operator identified a breach of its coordinated inauthentic behavior (CIB) policy over the past 48 hours that manifested in fake personas posting links and content suggesting Western nations had betrayed Ukraine or that Ukraine was a failed state. The cross-platform operation spanned Twitter, Alphabet Inc.’s YouTube, Telegram and Russian social network VK as well as websites posing as independent news outlets. The fake accounts claimed to be based in Kyiv and included fictitious news editors and a former aviation engineer, while their profile photos appeared to have been generated with the help of artificial intelligence software, the company said.

Meta coordinated with other social networks and disrupted the campaign when its Facebook pages had fewer than 4,000 followers and its reach on Instagram was at less than 500 followers. The company isn’t attributing the action to Russia directly, but it said it identified similarities to an April 2020 CIB network that it connected with individuals in Russia and the contested Donbas region in Ukraine as well as Crimea.

The Ghostwriter attacks successfully compromised “a handful” of Ukrainian accounts, Gleicher said. The group, which previously was alleged to be involved in trying to sway voters in Germany’s election, works by targeting a small number of high-profile users and attempting to obtain their login credentials in order to use their social accounts to spread disinformation.

One of the pieces of content it sought to post was a YouTube video supposedly showing Ukrainian soldiers waving a white flag and surrendering to Russian troops. Facebook’s security team secured the affected accounts and alerted targeted users, though the company declined to identify any of the people affected.

Facebook continues to be accessible within Russia, according to its security chief, though it’s aware of reports that the country’s regulators may throttle or take its services offline after it rejected requests to block content within its borders.

We live in a world where facts and fiction get blurred
In times of uncertainty you need journalism you can trust. For 14 free days, you can have access to a world of in-depth analyses, investigative journalism, top opinions and a range of features. Journalism strengthens democracy. Invest in the future today. Thereafter you will be billed R75 per month. You can cancel anytime and if you cancel within 14 days you won't be billed. 
Subscribe to News24
Rand - Dollar
17.34
+1.2%
Rand - Pound
21.14
+0.9%
Rand - Euro
18.25
+0.3%
Rand - Aus dollar
11.70
+0.6%
Rand - Yen
0.13
+1.6%
Gold
1,774.24
-1.3%
Silver
22.41
-3.2%
Palladium
1,890.48
-0.5%
Platinum
1,003.63
-1.6%
Brent Crude
85.57
-1.5%
Top 40
68,543
+0.5%
All Share
74,693
+0.5%
Resource 10
74,781
+1.0%
Industrial 25
91,501
-0.1%
Financial 15
15,595
+1.3%
All JSE data delayed by at least 15 minutes Iress logo
Company Snapshot
Editorial feedback and complaints

Contact the public editor with feedback for our journalists, complaints, queries or suggestions about articles on News24.

LEARN MORE
Government tenders

Find public sector tender opportunities in South Africa here.

Government tenders
This portal provides access to information on all tenders made by all public sector organisations in all spheres of government.
Browse tenders