Updates from Threat Analysis Group (TAG)

Threat Analysis Group

TAG Bulletin: Q4 2024

Dec 17, 2024

[[read-time]] min read

Billy Leonard
Threat Analysis Group

This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q4 2024. It was last updated on February 19, 2024.

October

  • We terminated 11 YouTube channels as part of our investigation into coordinated influence operations linked to Moldova. The campaign was sharing content in Russian and Romanian that was supportive of a candidate in Moldova's presidential election.
  • We blocked 27 domains from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Iran. The campaign was sharing content in Arabic, English, French and Spanish about the Israel-Palestine conflict, US military engagement in the Middle East, social issues in the US, and the US election, including narratives from across the political spectrum.
  • We terminated 23 YouTube accounts, 1 AdSense account, 4 Blogger blogs, and blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Iran. The campaign was sharing content in English and Farsi that was supportive of Iran and Yemen and critical of Israel.
  • We terminated 15 YouTube channels as part of our investigation into coordinated influence operations linked to Iran. The campaign was sharing content in Arabic and Urdu that was supportive of Palestine and Iran and was critical of Israel and the US.
  • We blocked 7 domains from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to the actor publicly tracked as Doppelganger and was sharing content in English, French, German and Turkish that was supportive of Russia and was critical of Ukraine. It also shared content about European politics, US domestic and foreign policy issues, and the US presidential election.
  • We blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations. The campaign was sharing content in English about the US election.
  • We terminated 33 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in Russian that was supportive of Russia and President Vladimir Putin and was critical of Ukraine.
  • We terminated 10 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in English related to the US election.
  • We terminated 101 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to Russian state-sponsored entities and was sharing content in Russian that was supportive of Russia and was critical of Moldova.
  • We terminated 28 YouTube channels and 2 AdSense accounts as part of our investigation into coordinated influence operations linked to Ghana. The campaign was sharing content in French that was supportive of the People’s Republic of China (PRC) and Russia.
  • We terminated 191 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in English, French, German, Italian, Polish, Turkish and Russian that was supportive of Russia and was critical of Ukraine.
  • We terminated 547 YouTube channels and 1 Ads account as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in English about French political figures.
  • We terminated 4,065 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to a Russian consulting firm and was sharing content in Russian that was supportive of Russia and was critical of Ukraine and the West.
  • We terminated 2,282 YouTube channels as part of our investigation into coordinated influence operations linked to Azerbaijan. The campaign was sharing content in Azerbaijani that was supportive of Azerbaijan and was critical of Armenia and critics of the Azerbaijani government.
  • We terminated 4 YouTube channels and blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations originating from Bangladesh. The campaign was sharing content in Russian critical of the Moldovan government.
  • We blocked 206 domains from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations. The campaign was linked to a technology and marketing company and was sharing content about a variety of topics supportive of the People’s Republic of China (PRC), including content about the 2024 Taiwan election and content critical of US foreign policy.
  • We terminated 6,318 YouTube channels as part of our ongoing investigation into coordinated influence operations linked to the People’s Republic of China (PRC). The coordinated inauthentic network uploaded content in Chinese and English about China and US foreign affairs. These findings are consistent with our previous reports.

November

  • We terminated 1 Ads account and blocked 2 domains from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Ukraine. The campaign was sharing content in English about current events, politics and climate change.
  • We terminated 21 YouTube channels as part of our investigation into coordinated influence operations linked to an individual based in Germany. The campaign was sharing content in German that was supportive of a specific German political party.
  • We blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to Russian state-sponsored entities and was sharing content in Russian, English and German that was supportive of Russia and critical of Ukraine and the West. The campaign also included content related to the US election.
  • We terminated 4 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in Romanian and Russian that was supportive of Russia and critical of Moldova.
  • We terminated 25 YouTube channels as part of our investigation into coordinated influence operations linked to Russia.The campaign was sharing content in English, German and Russian that was supportive of Russia and critical of Ukraine and the West.
  • We terminated 6 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in English and German that was supportive of Russia and critical of Ukraine and the West.
  • We terminated 2 YouTube channels and 2 Ads accounts and blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in English that was supportive of Russia and critical of the US and Israel.
  • We terminated 51 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to Russian state-sponsored entities and was sharing content in Russian that was supportive of Russia and critical of Ukraine.
  • We terminated 1,903 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to a Russian consulting firm and was sharing content in Russian that was supportive of Russia and critical of Ukraine and the West.
  • We terminated 3,868 YouTube channels as part of our investigation into coordinated influence operations linked to Azerbaijan. The campaign was sharing content in Azerbaijani that was supportive of Azerbaijan and critical of Armenia and critics of the Azerbaijani government.
  • We terminated 2 YouTube channels as part of our investigation into coordinated influence operations linked to Iran. The campaign was sharing content in English and Farsi that was supportive of Iran and Yemen and critical of Israel.
  • We terminated 5,028 YouTube channels and 2 Blogger blogs as part of our ongoing investigation into coordinated influence operations linked to the People’s Republic of China (PRC). The coordinated inauthentic network uploaded content in Chinese and English about China and US foreign affairs. These findings are consistent with our previous reports.

December

  • We terminated 1 Ads account as part of our investigation into coordinated influence operations originating from Ukraine. The campaign was sharing content supportive of Russia.
  • We blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to the actor publicly tracked as Doppelganger and was sharing content in English, French and Turkish about social and political issues in the US and Europe.
  • We blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in Russian that was supportive of Russia and critical of the Moldovan government.
  • We terminated 3 YouTube channels, as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in Russian that was supportive of Russia and critical of the EU and the Moldovan government.
  • We terminated 12 YouTube channels and blocked 3 domains from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in Arabic, English, French and German that was supportive of Russia and critical of Ukraine.
  • We terminated 5 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to Russian state-sponsored entities and was sharing content in Russian that was supportive of Russia and critical of Ukraine.
  • We terminated 2,471 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to a Russian consulting firm and was sharing content in Russian that was supportive of Russia and critical of Ukraine and the West.
  • We terminated 4,167 YouTube channels as part of our investigation into coordinated influence operations linked to Azerbaijan. The campaign was sharing content in Azerbaijani that was supportive of Azerbaijan and critical of Armenia and critics of the Azerbaijani government.
  • We terminated 10,291 YouTube channels as part of our ongoing investigation into coordinated influence operations linked to the People’s Republic of China (PRC). The coordinated inauthentic network uploaded content in Chinese and English about China and US foreign affairs. These findings are consistent with our previous reports.
POSTED IN:

Related stories