Meta

September 2021 Coordinated Inauthentic Behavior Report

We’re constantly working to find and stop coordinated campaigns that seek to manipulate public debate across our apps.

Purpose of This Report

Over the past four years, we’ve shared our findings about coordinated inauthentic behavior (CIB) we detect and remove from our platforms. As part of our regular CIB reports, we’re sharing information about all the networks we take down over the course of a month to make it easier for people to see the progress we’re making in one place.

Summary of September 2021 Findings

Our teams continue to focus on finding and removing deceptive campaigns around the world — whether they are foreign or domestic. In September, we removed two networks from Sudan and Iran. We have shared information about our findings with industry partners, researchers and policymakers.

In our previous threat reporting, we called out the rise of domestic influence operations, which are particularly concerning when they combine deceptive techniques with the real-world power of a state. Both networks we removed in September continued this trend and were in some way linked to the military organizations in their respective countries. Each targeted domestic populations to praise the military and criticize opposing factions. This is the first covert influence operation we’ve disrupted in Iran that focused almost entirely inside the country and was run by individuals linked to the Islamic Revolutionary Guard Corps.

The tactics both of these operations used to promote their campaigns were not particularly novel or sophisticated. In each case, we observed them posing as local news entities to lend credibility to their efforts. It appears that the network in Iran purchased fake followers to appear more popular and trustworthy. However, as we’ve seen in the past, gaining inauthentic followers does not necessarily translate into successful authentic engagement. In fact, some people who came across this content on our platform called out these accounts as fake.

We know that influence operations will keep evolving in response to our enforcement, and new deceptive behaviors will emerge. We will continue to refine our enforcement and share our findings publicly. We are making progress rooting out this abuse, but as we’ve said before – it’s an ongoing effort. We’re committed to continually improving to stay ahead. That means building better technology, hiring more people and working closely with law enforcement, security experts and other companies.

Here are the numbers related to the new CIB networks we removed in September:

Networks removed in September 2021:

  1. Sudan: We removed 116 Pages, 666 Facebook accounts, 69 Groups and 92 Instagram accounts in Sudan that targeted domestic audiences in that country. We found this activity as part of our internal investigation into suspected coordinated inauthentic behavior in the region and linked it to the Sudanese Rapid Support Forces, a paramilitary group operated by the Sudanese Government.
  2. Iran: We removed 93 Facebook accounts, 14 Pages, 15 Groups and 194 Instagram accounts in Iran that targeted primarily domestic audiences in that country, particularly in the Lorestan province. We found this activity as part of our internal investigation into suspected coordinated inauthentic behavior in the region and linked it to individuals associated with the Islamic Revolutionary Guard Corps.

See the full report for more information.

Learn More About Coordinated Inauthentic Behavior

We view CIB as coordinated efforts to manipulate public debate for a strategic goal where fake accounts are central to the operation. There are two tiers of these activities that we work to stop: 1) coordinated inauthentic behavior in the context of domestic, non-government campaigns and 2) coordinated inauthentic behavior on behalf of a foreign or government actor.

Coordinated Inauthentic Behavior (CIB)
When we find domestic, non-government campaigns that include groups of accounts and Pages seeking to mislead people about who they are and what they are doing while relying on fake accounts, we remove both inauthentic and authentic accounts, Pages and Groups directly involved in this activity.

Foreign or Government Interference (FGI)
If we find any instances of CIB conducted on behalf of a government entity or by a foreign actor, we apply the broadest enforcement measures including the removal of every on-platform property connected to the operation itself and the people and organizations behind it.

Continuous Enforcement
We monitor for efforts to re-establish a presence on Facebook by networks we previously removed. Using both automated and manual detection, we continuously remove accounts and Pages connected to networks we took down in the past.