Russian Internet Research Agency Has A New Propaganda Campaign

The Mueller-indicted Russian troll farm known as the Internet Research Agency (IRA) is apparently declaring victory in the US election and warning the “citizens of the United States of America” that “your intelligence agencies are powerless.”

“Despite all their efforts, we have thousands of accounts registered on Facebook, Twitter and Reddit spreading political propaganda,” read a statement attributed to the St. Petersburg-based organisation. “These accounts work 24 hours a day, seven days a week to discredit anti-Russian candidates and support politicians more useful for us than for you.”

The statement appeared on a website titled the “Internet Research Agency American Division” that popped up over the weekend. Featuring a clip art logo of a green goblin typing on a laptop, and packed with absurd boasts about the IRA’s prowess, the site at first appeared to be a lampoon. 

But on Tuesday 6th November it posted a previously unseen list of 100 IRA Instagram accounts that Facebook confirmed as authentic.

It’s still not entirely clear if the website is intended as self-parody, a parody of US perceptions of Russian information operations, or an earnest effort to terrify the American citizenry and cast doubt on the midterm results. 

“Hundreds of your fellow citizens are our unintentional agents unaware of the fact that they actually act for the good of the Russian ‘troll farm,’” the statement declared. “We have allies and spoilers intervening the political campaigns of the candidates for both parties. The victory of the Democratic party is our top priority in these midterm elections.”

“Soon after November 6, you will realise that your vote means nothing,” the statement reads. “We decide who you vote for and what candidates will win or lose. Whether you vote or not, there is no difference as we control the voting and counting systems. Remember, your vote has zero value. We are choosing for you.”

The public saber-rattling may be a sign that the IRA is still struggling to recover from the exposure and social media bans that began last year, said Clint Watts, a research fellow at the Foreign Policy Research Institute. 

“They’re suffering because they can’t build an audience,” said Watts. “It also looks like they’re trying to claim, ‘Yeah, we won this for the Democrats’… This plays into Trump’s narrative and it promotes distrust in American institutions.”

There’s circumstantial evidence that the IRA has lately been trying to insert itself into its own fake news.

Last month an anonymous source offered news outlets including The Daily Beast a tranche of supposedly leaked legal documents about the IRA that turned out to be some old already-public material padded with corrupt ZIP files made from gigabytes of random congressional proceedings. 

Days later, a former IRA video blogger who went by “Williams Johnson” reached out to The Daily Beast and nearly two dozen other publications with a dramatic YouTube video claiming he’d mounted a desperate “escape from the troll factory” and now feared arrest. Former IRA workers have discussed their work openly in the press without being thrown in a gulag.

The IRA has trolled the Western press in the past. In October last year the troll farm blasted out emails to news outlets soliciting advance questions for an upcoming “ask me anything” session on Reddit, and even posted a video (also starring Johnson) promoting the event on two of the fraudulent websites it used in its 2016 election interference campaign. 

When the AMA unfolded two months later, the trolls packed the subreddit with their own fake accounts, and asked themselves the reporters’ questions.

Facebook also seems to be a target of the IRA’s annoyance. Acting on a tip from US officials, on Monday 5th November the company shut down 115 suspected troll accounts, 30 on Facebook and 85 on Instagram. The troll farm website mocked that effort.

“Facebook and intelligence agencies tried to stop us but they only managed to uncover 1/25 of the whole picture,” it said. The bottom of the post contained a list of about 100 Instagram accounts. Facebook security chief Nathaniel Gleicher said in a statement that most of the accounts on the list were the ones that the company had just deleted.

“We had already blocked most of these accounts yesterday, and have now blocked the rest,” Gleicher said in the statement. “This is a timely reminder that these bad actors won’t give up, and why it’s so important we work with the US government and other technology companies to stay ahead.”

Caches of the IRA Instagram accounts show they’re mostly the same mix as the IRA’s previous work. The conservative account “American Made” featured patriotic posts about guns and flags, while “Bring America Back” pushed more direct pro-Trump content. 

The Daily Beast:

You Might Also Read:

Learning About Russian Hackers:

The US Is Losing the Information War To Russia

« How Companies Can Minimise Cyber Attack Damage
China Exports Cyber Surveillance To Africa »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

SSLGURU

SSLGURU

SSLGURU bring all of the major SSL certificate vendors to one market place in order to create the world's largest SSL store with the most competitive prices.

SiteLock

SiteLock

SiteLock is a global leader in website security solutions. We provide affordable, cybersecurity software solutions designed to allow small to midsize businesses to operate without fear of an attack.

SiteGuarding

SiteGuarding

SiteGuarding provide website security tools and services to protect your website against malware and hacker exploits.

PCI Pal

PCI Pal

PCI Pal’s secure cloud payment solutions are certified to the highest level of security by the leading card companies.

Alan Boswell Group

Alan Boswell Group

We are a Group of Companies providing specialist Insurance Broking and Risk Management advice and services including Cyber Risk cover.

Zix

Zix

Zix offers secure email encryption, threat protection, archiving, DLP and BYOD security for hospitals, financial services, government, and more.

Prove & Run

Prove & Run

Prove & Run provides a patented software development toolchain that is specifically forged to deal with the complex security properties of sensitive software components.

Ritz

Ritz

Ritz is the largest holistic pure-play cyber security solutions provider in Myanmar.

ECOMPLY

ECOMPLY

ECOMPLY is an all-in-one GDPR Compliance Solution. Efficient data protection management system for businesses and DPOsomply.

NanoLock Security

NanoLock Security

NanoLock delivers the industry’s only end-to-end platform for the IoT and connected devices ecosystem.

Xperien

Xperien

Xperien is a leading South African Information Technology Asset Disposition (ITAD) company.

Axur

Axur

Discover and eliminate digital fraud and risks on the web. Utilize Axur’s entire AI potential, along with thousands of bots dispersed throughout the surface web as well as the deep and dark web.

Darkscope

Darkscope

Darkscope is an award-winning personalised cyber intelligence service provider. Our cutting-edge AI and Deep Artificial Neural Networks lead the world of cyber intelligence solutions.

Cyber Security Works (CSW)

Cyber Security Works (CSW)

Cyber Security Works is your organization’s early cybersecurity warning system to help prevent attacks before they happen.

LAVAAT

LAVAAT

At LAAVAT, our goal is to make it easy for our customers to build secure IoT devices without a need to invest considerably in embedded security and cryptography expertise.

Lucidum

Lucidum

The Lucidum platform helps you assess risk and mitigate vulnerabilities by finding and correlating data from your security tech stack.