Updates from Threat Analysis Group (TAG)

Threat Analysis Group

TAG Bulletin: Q4 2024

Dec 17, 2024

[[read-time]] min read

Billy Leonard
Threat Analysis Group

This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q4 2024. It was last updated on December 17, 2024.

October

  • We terminated 11 YouTube channels as part of our investigation into coordinated influence operations linked to Moldova. The campaign was sharing content in Russian and Romanian that was supportive of a candidate in Moldova's presidential election.
  • We blocked 27 domains from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Iran. The campaign was sharing content in Arabic, English, French and Spanish about the Israel-Palestine conflict, US military engagement in the Middle East, social issues in the US, and the US election, including narratives from across the political spectrum.
  • We terminated 23 YouTube accounts, 1 AdSense account, 4 Blogger blogs, and blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Iran. The campaign was sharing content in English and Farsi that was supportive of Iran and Yemen and critical of Israel.
  • We terminated 15 YouTube channels as part of our investigation into coordinated influence operations linked to Iran. The campaign was sharing content in Arabic and Urdu that was supportive of Palestine and Iran and was critical of Israel and the US.
  • We blocked 7 domains from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to the actor publicly tracked as Doppelganger and was sharing content in English, French, German and Turkish that was supportive of Russia and was critical of Ukraine. It also shared content about European politics, US domestic and foreign policy issues, and the US presidential election.
  • We blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations. The campaign was sharing content in English about the US election.
  • We terminated 33 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in Russian that was supportive of Russia and President Vladimir Putin and was critical of Ukraine.
  • We terminated 10 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in English related to the US election.
  • We terminated 101 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to Russian state-sponsored entities and was sharing content in Russian that was supportive of Russia and was critical of Moldova.
  • We terminated 28 YouTube channels and 2 AdSense accounts as part of our investigation into coordinated influence operations linked to Ghana. The campaign was sharing content in French that was supportive of the People’s Republic of China (PRC) and Russia.
  • We terminated 191 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in English, French, German, Italian, Polish, Turkish and Russian that was supportive of Russia and was critical of Ukraine.
  • We terminated 547 YouTube channels and 1 Ads account as part of our investigation into coordinated influence operations linked to Russia. The campaign was sharing content in English about French political figures.
  • We terminated 4,065 YouTube channels as part of our investigation into coordinated influence operations linked to Russia. The campaign was linked to a Russian consulting firm and was sharing content in Russian that was supportive of Russia and was critical of Ukraine and the West.
  • We terminated 2,282 YouTube channels as part of our investigation into coordinated influence operations linked to Azerbaijan. The campaign was sharing content in Azerbaijani that was supportive of Azerbaijan and was critical of Armenia and critics of the Azerbaijani government.
  • We terminated 4 YouTube channels and blocked 1 domain from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations originating from Bangladesh. The campaign was sharing content in Russian critical of the Moldovan government.
  • We blocked 206 domains from eligibility to appear on Google News surfaces and Discover as part of our investigation into coordinated influence operations. The campaign was linked to a technology and marketing company and was sharing content about a variety of topics supportive of the People’s Republic of China (PRC), including content about the 2024 Taiwan election and content critical of US foreign policy.
  • We terminated 6,318 YouTube channels as part of our ongoing investigation into coordinated influence operations linked to the People’s Republic of China (PRC). The coordinated inauthentic network uploaded content in Chinese and English about China and US foreign affairs. These findings are consistent with our previous reports.
POSTED IN:

Related stories