Facebook removed multiple pages, groups and accounts that were involved in coordinated inauthentic behavior from two operations in the Middle East—one originating in the United Arab Emirates and Egypt, and the other in Saudi Arabia.
Head of cybersecurity policy Nathaniel Gleicher said in a Newsroom post that the two groups were not connected, and information about the social network’s findings was shared with law enforcement, industry partners and policymakers.
The first group consisted of 259 Facebook accounts, 102 pages, five groups, four events and 17 Instagram accounts, and its content focused on countries including Libya, Sudan, Comoros, Qatar, Turkey, Lebanon, Syria, Jordan and Morocco.
Gleicher said compromised and fake accounts were used to run pages, spread content, comment in groups and artificially boost engagement, and people in this UAE- and Egypt-based group also impersonated public figures and managed pages that posed as local news organizations.
Topics covered included non-country specific topics such as fashion, animals, humor and crafts, as well as local news, politics, elections and issues including alleged support of terrorist groups by Qatar and Turkey, Iran’s activity in Yemen, the conflict in Libya, successes of the Saudi-led coalition in Yemen and independence for Somaliland.
Facebook uncovered links to two marketing firms: New Waves, based in Egypt, and UAE-based Newave.
Gleicher said over 13.7 million accounts followed one or more of the Facebook pages, while some 9,000 joined at least one of the groups and about 65,000 followed at least one of the Instagram accounts. In addition, 270 people expressed interest in at least one of the events, but Facebook could not confirm whether the events actually occurred.
This group spent around $167,000 on Facebook ads, paid primarily in U.S. dollars and UAE dirhams. Facebook shared some sample posts:
The Saudi Arabia-based group consisted of 217 Facebook accounts, 144 pages, five groups and 31 Instagram accounts, which focused primarily on countries including Qatar, Saudi Arabia, the UAE, Bahrain, Egypt, Morocco, Palestine, Lebanon and Jordan.
Gleicher said fake accounts and fictitious personas were used to run pages and groups, share content, increase engagement and drive people to an off-Facebook domain.
The pages passed themselves off as local news organizations and shared content on regional news and political issues such as Crown Prince Mohammad bin Salman, his “Vision 2030” economic and social reform plan and successes of the Saudi Armed Forces, particularly during the conflict in Yemen.
They also shared content critical of neighboring countries such as Iran, Qatar and Turkey, and questioned the credibility of Al-Jazeera and Amnesty International.
Gleicher said Facebook’s review found links to individuals associated with the government of Saudi Arabia.
Some 1.4 million accounts followed one or more of the removed pages, while about 26,000 joined at least one of the groups and the banned Instagram accounts were followed by approximately 145,000 people. About $108,000 in Facebook and Instagram ads were paid for in Saudi riyal and U.S. dollars.
Gleicher shared samples of content from the removed pages:
He wrote, “We’re constantly working to detect and stop this type of activity because we don’t want our services to be used to manipulate people. We’re taking down these pages, groups and accounts based on their behavior, not the content they posted. In each of these cases, the people behind this activity coordinated with one another and used fake accounts to misrepresent themselves, and that was the basis for our action.”