In August 2018, Spanish authorities uncovered a plot by remainers to assassinate leading Brexiteer and possibly Britain’s next prime minister, Boris Johnson… Or did they?
That story and others like it were created by a network of social media accounts operating from Russia which have attempted to seed fake news across 30 different online platforms, a study has revealed.
The research by the Atlantic Council’s Digital Forensic Research Lab has revealed the digital trail and forgeries behind stories designed to appeal to conspiracy theory fans, right wingers and Brexit supporters.
A tweet by Republican politican Marco Rubio was forged then turned into this meme before being spread over social media to inflame American conservatives vulnerable to conspiracy theories with the fake news that the British secret services (GCHQ) intended to interfere in the US Mid-term elections on behalf of the Democrats.
Other stories included a narrative blaming the Salisbury poisoning of former Russian spy Sergei Skripal and his daughter Yulia on the IRA.
The fake news appears designed to spread virally by conspiracy theorists and those sceptical of the mainstream media and would add to divisions within Western countries and between them.
The aim was to “divide, discredit, and distract” Western countries by planting false information about topics ranging from alleged British meddling in the 2018 U.S. midterm elections to Irish paramilitary involvement in the Salisbury poisoning of five people including Russian defector Skripal last year.
The effort employed scores of accounts posting conspiracy theories and fake news in at least six languages on platforms including Facebook and Twitter, as well as multiple other blogging sites and forums.
The network was traced by following connections to a group of 16 accounts suspended in May by Facebook, which said they were “part of a small network emanating from Russia.”
Western officials have warned that countries such as Russia, as well as domestic political groups, are increasingly spreading false or misleading information online in order to disrupt politics and public opinion.
Moscow has repeatedly denied the allegations, most recently after the European Union said it had evidence of “sustained disinformation activity by Russian sources aiming to suppress turnout and influence voter preferences” in May’s European Parliament elections.
The Kremlin have not yet responded to a request for comment.
Ben Nimmo, a senior fellow at the Atlantic Council’s DFR Lab, said the accounts failed to attract a large following – likely due to efforts not to get caught – but the operation is notable for its audacity and sophistication.
“This operation was trying to provoke divisions between Western countries,” he said. “It faked everything, from the documents it based its stories on, up to the accounts that boosted them.”
Nathaniel Gleicher, head of cybersecurity policy at Facebook, told Reuters the accounts and pages removed by Facebook in May had been a small part of “a broader operation that was primarily active on other internet platforms.”
“We know that these threats are not limited to a specific type of technology or service. The better we can be at working together, the better we’ll do by our community,” he said.
A Twitter spokesman said the company welcomed the findings and had a team “dedicated to identifying and investigating suspected platform manipulation on Twitter, including potential state-backed activity.”
The plot to murder Boris Johnson over Brexit
The alleged plot to kill Boris Johnson began on August 8 last year when a fake account on Facebook posted a letter purportedly sent by Spanish Foreign Minister Josep Borrell to a fellow lawmaker.
The letter, written in informal Spanish and with Borrell’s own name spelled wrong, says the minister has been informed of a “possible attack on Boris Johnson by radical Brexit opponents who want to stop him being nominated prime minister” and would alert British authorities.
The forgery was then turned into an article on Medium by a ‘Mark Porter’ who only appears to have written one article, then further disseminated in memes, on social media and into political forums.
Asked about the authenticity of the letter, a spokesman for Borrell said the document was “FAKE, FAKE.” Boris Johnson, who is expected to be confirmed as British prime minister next month, did not respond to requests for comment.
DFR Lab said the operation’s focus on narratives supporting the Kremlin and linguistic errors typical of native Russian-speakers supported Facebook’s assessment that the accounts were operated from Russia.
“The scale of the operation, its tradecraft, and its obsession with secrecy, indicate that it was run by a persistent, sophisticated, and well-resourced organization, possibly an intelligence agency,” DFR Lab said in its report.
The disinformation network also sought to sow doubt over the Russians wanted over the Salisbury poisoning and fan divisions in Ireland by faking a screenshot of a tweet allegedly posted and then deleted by former British Defence Minister Gavin Williamson.
On March 22, 2018, an account that Facebook identified as belonging to the Russian operation posted a Medium article to at least 15 different news groups. The Medium article was written by an account with a profile picture of actor Hugh Laurie and had not posted any other articles.
Pictures of the tweet included in blog posts online show Williamson saying people connected to the Real Irish Republican Army had supplied “a component of the nerve agent” used to poison a former Russian military intelligence officer in the English city of Salisbury last year.
There is no record of the tweet being sent from Williamson’s account. A spokeswoman for Williamson did not respond to requests for comment.
(Read more about the research uncovering the disinfo campaign at : https://medium.com/dfrlab/russian-op-1-fantasy-assassins-84b7af77c83a Aditional reporting by Reuters/Jack Stubbs, also Belen Carreno and Isla Binnie in Madrid)