Fake social media accounts spread pro-Iran messages during U.S. midterms: FireEye

FILE PHOTO: A staff member removes the Iranian flag from the stage after a group picture with foreign ministers and representatives of the U.S., Iran, China, Russia, Britain, Germany, France and the European Union during Iran nuclear talks at the Vienna International Center in Vienna, Austria, July 14, 2015. REUTERS/Carlos Barria

By Christopher Bing

(Reuters) – A network of fake social media accounts impersonated political candidates and journalists to spread messages in support of Iran and against U.S. President Donald Trump around the 2018 congressional elections, cybersecurity firm FireEye said on Tuesday.

The findings show how unidentified, possibly government-backed, groups could manipulate social media platforms to promote stories and other content that can influence the opinions of American voters, the researchers said.

This particular operation was largely focused on promoting “anti-Saudi, anti-Israeli, and pro-Palestinian themes,” according to the report by FireEye.

The campaign was organized through a series of fake personas that created various social media accounts, including on Twitter and Facebook. Most of these accounts were created last year and have since been taken down, the report said.

Spokespersons for Twitter and Facebook confirmed FireEye’s finding that the fake accounts were created on their platforms.

Lee Foster, a researcher with FireEye, said he found some of the fake personas – often masquerading as American journalists – had successfully convinced several U.S. news outlets to publish letters to the editor, guest columns and blog posts.

These writings displayed both progressive and conservative views, the report said, covering topics including the Trump administration’s designation of Iran’s Islamic Revolutionary Guard Corps (IRGC) as a terrorist organization.

“We’re assessing with low confidence that this network was organized to support Iranian political interests,” said Foster. “However, we’re not at the point where we can say who was doing it or where it’s coming from. The investigation is ongoing.”

Before the 2018 midterms election, the nameless group created Twitter accounts that also impersonated both Republican and Democratic congressional candidates. It is unclear if the fake accounts had any effect on their campaigns.

The imposter Twitter accounts often plagiarized messages from the politicians’ legitimate accounts, but also mixed in posts voicing support for policies believed to be favorable to Tehran. Affected politicians included Jineea Butler, a Republican candidate for New York’s 13th District, and Marla Livengood, a Republican candidate for California’s 9th District. Both Livengood and Butler lost in the election.

Livengood’s campaign called the situation “clearly an attempt by bad actors” to hurt her campaign, and noted that Livengood was “a strident opponent of nuclear weapons in Iran.”

Butler could not be immediately reached for comment.

Twitter said in a statement that it had “removed this network of 2,800 inauthentic accounts originating in Iran at the beginning of May,” adding that its investigation was ongoing.

Facebook said it had removed 51 Facebook accounts, 36 Pages, seven Groups and three Instagram accounts connected to the influence operation. Instagram is owned by Facebook.

The activity on Facebook was less expansive than that on Twitter and it appeared to be more narrowly focused, said Facebook head of cybersecurity policy Nathaniel Gleicher. The inauthentic Facebook accounts instead often privately messaged high profile figures, including journalists, policy-makers and Iranian dissidents, to promote certain issues.

Facebook also concluded the activity had originated in Iran.

(Reporting by Christopher Bing; editing by Rosalba O’Brien and Susan Thomas)

U.S. says foreign meddling didn’t affect 2018 election systems

People fill out their ballots during the midterm election at Philomont Fire Station, in Purcellville, Virginia, U.S., November 6, 2018. REUTERS/Al Drago

By Andy Sullivan

WASHINGTON (Reuters) – Top U.S. officials said on Tuesday that foreign actors did not have a significant impact on computer systems and other equipment underpinning the November, 2018 congressional elections, despite reports of hacking attempts.

The statement by the U.S. Department of Justice and the U.S. Department of Homeland Security contrasted with U.S. officials’ view that the 2016 presidential election was the target of a sophisticated Russian hacking and propaganda campaign to help Republican Donald Trump defeat Democrat Hilary Clinton.

The two agencies said the U.S. government has found no evidence that foreign governments or agents had an impact last November, when Democrats won control of the House of Representatives.

Neither political campaigns nor electronic voting machines or other infrastructure was significantly affected, they said in a joint statement. They declined to provide further details.

U.S. prosecutors are investigating whether President Donald Trump’s campaign worked with the Kremlin to win the 2016 election. Trump has denied any collusion, and Moscow has also denied involvement.

Security experts have warned for years that U.S. election infrastructure — voting machines, voter registries and other computer systems — could be manipulated to change vote tallies or prevent people from casting ballots.

The 2016 election also illustrated how hackers can compromise candidates by releasing internal emails and other sensitive documents, and by working to sway public opinion through social media.

Ahead of the November 2018 election, U.S. intelligence and law enforcement officials warned that foreign actors were continuing their manipulation efforts. Prosecutors charged a Russian national with participating in a Kremlin-backed plan to interfere in the election.

Some state and local governments reported attempts to access their networks ahead of the November 2018 election, but U.S. officials said they were able to prevent or limit access.

On the night of the Nov. 6 election, Homeland Security Secretary Kirstjen Nielsen said there were no signs that voting systems had been breached.

The National Republican Congressional Committee, which works to elect Republican candidates, said it was the target of a hacking attempt last year. Democratic Senator Joe Manchin, running for re-election in West Virginia, also said his social-media accounts had been hacked.

U.S. intelligence officials warned last week that Russia and China are already targeting the 2020 presidential election.

(Editing by Mohammad Zargham and David Gregorio)

Facebook fakers get better at covering tracks, security experts say

FILE PHOTO: People are silhouetted as they pose with mobile devices in front of a screen projected with a Facebook logo, in this picture illustration taken in Zenica, October 29, 2014. REUTERS/Dado Ruvic/File Photo

By Christopher Bing

WASHINGTON (Reuters) – Creators of fake accounts and news pages on Facebook are learning from their past mistakes and making themselves harder to track and identify, posing new challenges in preventing the platform from being used for political misinformation, cybersecurity experts say.

This was apparent as Facebook tried to determine who created pages it said were aimed at sowing dissension among U.S. voters ahead of congressional elections in November. The company said on Tuesday it had removed 32 fake pages and accounts from Facebook and Instagram involved in what it called “coordinated inauthentic behavior.”

While the United States improves its efforts to monitor and root out such intrusions, the intruders keep getting better at it, said cyber security experts interviewed over the past two days.

Ben Nimmo, a senior fellow at the Washington-based Digital Forensic Research Lab, said he had noticed the latest pages used less original language, rather cribbing from copy already on the internet.

“Linguistic mistakes would give them away before, between 2014 and 2017,” Nimmo told Reuters. “In some of these newer cases it seems they’ve caught on to that by writing less (original material) when posting things. With their longer posts sometimes it’s just pirated, copy and pasted from some American website. That makes them less suspicious.”

Facebook’s prior announcement on the topic of fake accounts, in April, directly connected a Russian group known as the Internet Research Agency to a myriad of posts, events and propaganda that were placed on Facebook leading up to the 2016 U.S. presidential election.

This time, Facebook did not identify the source of the misinformation.

“It’s clear that whoever set up these accounts went to much greater lengths to obscure their true identities than the Russian-based Internet Research Agency (IRA) has in the past,” the company said in a blog post on Tuesday announcing the removal of the pages. “Our technical forensics are insufficient to provide high confidence attribution at this time.”

Facebook said it had shared evidence connected to the latest flagged posts with several private sector partners, including the Digital Forensic Research Lab, an organization founded by the Atlantic Council, a Washington think tank.

Facebook also said the use of virtual private networks, internet phone services, and domestic currency to pay for advertisements helped obfuscate the source of the accounts and pages. The perpetrators also used a third party, which Facebook declined to name, to post content.

Facebook declined to comment further, referring back to its blog post.

U.S. President Donald Trump’s top national security aides said on Thursday that Russia is behind “pervasive” attempts to interfere in November’s elections and that they expect attempts by Russia, and others, will continue into the 2020 elections.

They say they are concerned that attempts will be made to foment confusion and anger among various political groups in the United States and cause a distrust of the electoral process.

Two U.S. intelligence officials who requested anonymity told Reuters this week there was insufficient evidence to conclude that Russia was behind the latest Facebook campaign. However, one said, “the similarities, aims and methodology relative to the 2016 Russian campaign are quite striking.”

‘PREVIOUS MISTAKES’

Experts who track online disinformation campaigns said the groups who launch such efforts have changed how they post content and create posts.

“These actors are learning from previous mistakes,” said John Kelly, chief executive of social media intelligence firm Graphika, adding they do not use the same internet addresses or pay in foreign currency.

“And as more players in the world learn these dark arts, it’s easier for them to hide among the multiple actors deploying the same playbook,” he said.

Philip Howard, an Oxford University professor of internet studies and director of the Oxford Internet Institute, said that suspicious social media accounts like those taken down this week were once more easily identifiable because they shared the same information from high-profile publications like RT, the Russian English-language news service, or Breitbart News Network.

But now, the content they often share is more diverse and less discernible, coming from lesser known sites, including internet forums that mix political news with other topics, he said.

“The junk news they’re sharing is using better quality images, for example, more believable domains, less-known websites, smaller blogs,” Howard added.

U.S. intelligence agencies have concluded that Russia meddled in the 2016 presidential campaign using tactics including fake Facebook accounts. The Internet Research Agency was one of three Russian companies charged in February by U.S. Special Counsel Robert Mueller with conspiracy to tamper with the 2016 election.

Moscow has denied any election interference.

(Reporting by Christopher Bing in Washington; Additional reporting by John Walcott; Editing by Damon Darlin and Frances Kerry)

House Speaker Ryan won’t seek re-election, will retire in January

FILE PHOTO: Speaker of the House Paul Ryan speaks at a news conference on Capitol Hill in Washington, U.S., March 22, 2018. REUTERS/Aaron P. Bernstein/File Photo

By Richard Cowan and Susan Cornwell

WASHINGTON (Reuters) – U.S. House Speaker Paul Ryan, the top Republican in Congress, told Republicans in the House of Representatives on Wednesday he will not seek re-election in November, his office said.

Ryan will serve his full term and retire in January, Brendan Buck, spokesperson for the Speaker, said in a statement.

“After nearly twenty years in the House, the speaker is proud of all that has been accomplished and is ready to devote more of his time to being a husband and a father,” Buck said.

The departure of 48-year-old Ryan could complicate Republican Party efforts to retain the House in November, when candidates may be dragged down by the unpopularity of President Donald Trump.

The announcement of his departure months before the election will give potential candidates for House Republican leadership positions plenty of time to campaign for support.

The House speaker has scheduled a news conference for 10 a.m. (1400 GMT).

Reports of Ryan’s departure have circulated for months. Politico reported in December that Ryan told confidants he would like to retire after the 2018 congressional elections.

Friends said Ryan, a longtime champion of tax reform, was ready to step down after passing a tax reform bill, according to the Axios news site, which first reported on Wednesday that Ryan would soon announce his retirement.

The tax bill was Trump’s first major legislative victory since he took office in January 2017 despite being helped by Republican control of Congress.

Lawmakers had expected Ryan might leave Congress if Republicans lose the House in November. The early announcement could have an impact on Ryan’s ability to raise campaign funds for Republican candidates.

More than three dozen House Republicans have said they are retiring, or running for another office, or resigning. Democrats need to win 23 seats in the November elections to retake a majority in the House, which Republicans have controlled since 2011.

Democrats believe that voter concerns over rising medical costs and Republican plans to cut Medicare and Medicaid will assist them in their fight to retake the House.

Trump said in a post on Twitter: “Speaker Paul Ryan is a truly good man, and while he will not be seeking re-election, he will leave a legacy of achievement that nobody can question. We are with you Paul!”

Ryan was elected to the U.S. House of Representatives in 1998 from Wisconsin at age 28 and was quickly pegged as a Republican rising star. He became 2012 Republican presidential candidate Mitt Romney’s vice presidential running mate, but Romney was beaten by incumbent Democratic President Barack Obama.

In Congress, Ryan earned a reputation as a fiscal policy expert, serving as chairman of the House Budget Committee from 2011 until 2015, but as speaker was a driving force behind a Republican tax overhaul passed by Congress last year that is projected to balloon the federal deficit.

(Writing by Doina Chiacu; Editing by Bernadette Baum)