Russian Internet Research Agency Has A New Propaganda Campaign

The Mueller-indicted Russian troll farm known as the Internet Research Agency (IRA) is apparently declaring victory in the US election and warning the “citizens of the United States of America” that “your intelligence agencies are powerless.”

“Despite all their efforts, we have thousands of accounts registered on Facebook, Twitter and Reddit spreading political propaganda,” read a statement attributed to the St. Petersburg-based organisation. “These accounts work 24 hours a day, seven days a week to discredit anti-Russian candidates and support politicians more useful for us than for you.”

The statement appeared on a website titled the “Internet Research Agency American Division” that popped up over the weekend. Featuring a clip art logo of a green goblin typing on a laptop, and packed with absurd boasts about the IRA’s prowess, the site at first appeared to be a lampoon. 

But on Tuesday 6th November it posted a previously unseen list of 100 IRA Instagram accounts that Facebook confirmed as authentic.

It’s still not entirely clear if the website is intended as self-parody, a parody of US perceptions of Russian information operations, or an earnest effort to terrify the American citizenry and cast doubt on the midterm results. 

“Hundreds of your fellow citizens are our unintentional agents unaware of the fact that they actually act for the good of the Russian ‘troll farm,’” the statement declared. “We have allies and spoilers intervening the political campaigns of the candidates for both parties. The victory of the Democratic party is our top priority in these midterm elections.”

“Soon after November 6, you will realise that your vote means nothing,” the statement reads. “We decide who you vote for and what candidates will win or lose. Whether you vote or not, there is no difference as we control the voting and counting systems. Remember, your vote has zero value. We are choosing for you.”

The public saber-rattling may be a sign that the IRA is still struggling to recover from the exposure and social media bans that began last year, said Clint Watts, a research fellow at the Foreign Policy Research Institute. 

“They’re suffering because they can’t build an audience,” said Watts. “It also looks like they’re trying to claim, ‘Yeah, we won this for the Democrats’… This plays into Trump’s narrative and it promotes distrust in American institutions.”

There’s circumstantial evidence that the IRA has lately been trying to insert itself into its own fake news.

Last month an anonymous source offered news outlets including The Daily Beast a tranche of supposedly leaked legal documents about the IRA that turned out to be some old already-public material padded with corrupt ZIP files made from gigabytes of random congressional proceedings. 

Days later, a former IRA video blogger who went by “Williams Johnson” reached out to The Daily Beast and nearly two dozen other publications with a dramatic YouTube video claiming he’d mounted a desperate “escape from the troll factory” and now feared arrest. Former IRA workers have discussed their work openly in the press without being thrown in a gulag.

The IRA has trolled the Western press in the past. In October last year the troll farm blasted out emails to news outlets soliciting advance questions for an upcoming “ask me anything” session on Reddit, and even posted a video (also starring Johnson) promoting the event on two of the fraudulent websites it used in its 2016 election interference campaign. 

When the AMA unfolded two months later, the trolls packed the subreddit with their own fake accounts, and asked themselves the reporters’ questions.

Facebook also seems to be a target of the IRA’s annoyance. Acting on a tip from US officials, on Monday 5th November the company shut down 115 suspected troll accounts, 30 on Facebook and 85 on Instagram. The troll farm website mocked that effort.

“Facebook and intelligence agencies tried to stop us but they only managed to uncover 1/25 of the whole picture,” it said. The bottom of the post contained a list of about 100 Instagram accounts. Facebook security chief Nathaniel Gleicher said in a statement that most of the accounts on the list were the ones that the company had just deleted.

“We had already blocked most of these accounts yesterday, and have now blocked the rest,” Gleicher said in the statement. “This is a timely reminder that these bad actors won’t give up, and why it’s so important we work with the US government and other technology companies to stay ahead.”

Caches of the IRA Instagram accounts show they’re mostly the same mix as the IRA’s previous work. The conservative account “American Made” featured patriotic posts about guns and flags, while “Bring America Back” pushed more direct pro-Trump content. 

The Daily Beast:

You Might Also Read:

Learning About Russian Hackers:

The US Is Losing the Information War To Russia

« How Companies Can Minimise Cyber Attack Damage
China Exports Cyber Surveillance To Africa »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

CERT-UA

CERT-UA

CERT-UA is the national Computer Emergency Response Team for Ukraine.

AppViewX

AppViewX

AppViewX is a global leader in the management, automation and orchestration of network services in data centers.

SecuDrive

SecuDrive

SecuDrive, provides hardware encrypted external storage devices to protect a company’s sensitive and important data.

Zen360Consult

Zen360Consult

Zen360Consult provides Advisory and Training services in the field of Cyber Resilience, which includes Cyber Security /ISMS and Business Continuity.

RCMP National Cybercrime Coordination Unit (NC3)

RCMP National Cybercrime Coordination Unit (NC3)

As set out in the Government of Canada's National Cyber Security Strategy, the RCMP has established the National Cybercrime Coordination Unit (NC3).

Blu Venture Investors (BVI)

Blu Venture Investors (BVI)

Blu Venture Investors is a venture capital firm that supports early stage companies with a focus on technology in diverse domains including cybersecurity, IoT, defense and homeland security.

Finosec

Finosec

Finosec's mission is to change the way information security and cybersecurity are managed in banking.

Kriptos

Kriptos

Kriptos helps businesses improve their cybersecurity, risk, and compliance strategies by locating critical information through a technology that automatically classifies and labels documents using AI.

Kaesim Cybersecurity

Kaesim Cybersecurity

Kaesim are a global team of cybersecurity experts protecting businesses since 2015. We stop bad people damaging your business, your data and your reputation.

Oduma Solutions

Oduma Solutions

Oduma Solutions is a wholly owned Ghanaian Cybersecurity company that offers information security services to organisations seeking to improve their security posture.

Clarity

Clarity

Clarity is an AI cybersecurity startup that protects against deepfakes and new social engineering and phishing attack vectors accelerated by the rapid adoption of Generative AI.

Superna

Superna

Superna is the global leader in data security and cyberstorage solutions for unstructured data, both on-prem and in the hybrid multi-cloud.

RySec

RySec

RySec specialize in affordable cybersecurity solutions designed to protect your business from today’s ever-evolving threats.

Raven

Raven

Raven are on a mission to help companies protect their cloud native applications by focusing on runtime.

GrabDefence

GrabDefence

GrabDefence enables digital businesses to thrive by safeguarding their ecosystem against fraud risk, digital identity threats and compliance challenges.

Kloke

Kloke

Kloke specializes in data protection solutions, focusing on securing information over locations.