Iran Using Websites To Spread Fake News

Website Nile Net Online promises Egyptians "true news" from its offices in the heart of Cairo's Tahrir Square "to expand the scope of freedom of expression in the Arab world".

Its views on America do not chime with those of Egypt's state media, which celebrate Donald Trump's warm relations with Cairo. In one recent article, Nile Net On-line derided the American president as a "low-level theatre actor" who "turned America into a laughing stock" after he attacked Iran in a speech at the United Nations.

Until recently, Nile Net Online had more than 115,000 page-followers across Facebook, Twitter and Instagram. But its contact telephone numbers, including one listed as 0123456789, don't work. 

A Facebook map showing its location dropped a pin onto the middle of the street, rather than any building. And regulars at the square, including a newspaper stall holder and a policeman, say they have never heard of the website. 

The reason: Nile Net Online is part of an influence operation based in Tehran. It's one of more than 70 websites found by Reuters which push Iranian propaganda to 15 countries, in an operation that cyber security experts, social media firms and journalists are only starting to uncover. 

The sites are visited by more than half a million people a month, and have been promoted by social media accounts with more than a million followers.

"The Iranians are sophisticated cyber players," former CIA director John Brennan said of the Iranian campaign. "There are elements of the Iranian intelligence services that are rather capable in terms of operating (online)."

Traced by building on research from cyber security firms FireEye and ClearSky, the sites in the campaign have been active at different times since 2012. They look like normal news and media outlets, but only a couple disclose any Iranian ties. 

All the sites are linked to Iran in one of two ways. Some carry stories, video and cartoons supplied by an online agency called the International Union of Virtual Media (IUVM), which says on its website it is headquartered in Tehran. Some have shared online registration de-tails with IUVM, such as addresses and phone numbers. Twenty-one of the websites do both.

Emails sent to IUVM bounced back and telephone numbers the agency gave in web registration records did not work. Nile Net Online did not respond to questions sent to the email address on its website. Its operators could not be located.

‘Unspoken Truth’

Some of the sites in the Iranian operation were first exposed in August by Facebook, Twitter and Google's parent, Alphabet, after FireEye found them. The social media companies have closed hundreds of accounts that promoted the sites or pushed Iranian messaging. The sites uncovered by Reuters have a much wider scope. They have published in 16 different languages, from Azerbaijani to Urdu, targeting Internet users in less-developed countries. That they reached readers in societies such as Egypt, which has blocked hundreds of news websites since 2017, highlights the campaign's reach.

The Iranian sites include:

A news site called Another West-ern Dawn which says its focus is on "unspoken truth". It fooled the Pakistani defence minister into issuing a nuclear threat against Israel;

Ten outlets targeting readers in Yemen;

A media outlet offering news and satirical cartoons in Sudan. Reuters could not reach any of its staff;

A website called Realnie Novosti, or "Real News", for Russian readers. It offers a downloadable mobile phone app but its operator could not be traced.

The news on the sites is not all fake. 

Authentic stories sit alongside pirated cartoons, as well as speeches from Iran's supreme leader Ayatollah Ali Khamenei. The sites clearly support Iran's government and amplify antagonism to countries opposed to Tehran, particularly Israel, Saudi Arabia and the United States. Nile Net's "laughing stock" piece was copied from an Iranian state TV network article published earlier the same day.

Some of the sites are slapdash. The self-styled, misspelled "Yemen Press Agency" carries a running update of Saudi "crimes against Yemenis during the past 24 hours". Emails sent to the agency's listed contact, Arafat Shoroh, bounced back. The agency's address and phone number led to a hotel in Sanaa, whose staff said they had never heard of Shoroh.

The identity or location of the past owners of some of the websites is visible in historical Internet registration records: 17 of 71 sites have in the past listed their locations as Iran or Tehran, or given an Iranian telephone or fax number. But who owns them now is often hidden, and none of the Iranian-linked operators could be reached. 

Khaleej Times:

You Might Also Read:

Iranian Political Influence Campaign Goes Global

« Amazon Gets Into Blockchain
Microsoft Tech Support Scam Crackdown - 39 Arrests »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

SecureNow Insurance Broker

SecureNow Insurance Broker

SecureNow is a commercial insurance broker based in India. Services offered include Cyber Risk insurance.

International School of IT Security (ISITS)

International School of IT Security (ISITS)

The International School of IT Security (ISITS) is a leading provider of professional training in the field of IT Security.

Foresite

Foresite

Foresite is a global service provider, delivering a range of managed security and consulting solutions.

Mondo

Mondo

Mondo is the largest national staffing agency specializing exclusively in high-end, niche IT, Tech, and Digital Marketing talent. Areas of expertise include Cybersecurity.

SEON Technologies

SEON Technologies

At SEON we strive to help online businesses reduce the costs, time, and challenges faced due to fraud.

Zen360Consult

Zen360Consult

Zen360Consult provides Advisory and Training services in the field of Cyber Resilience, which includes Cyber Security /ISMS and Business Continuity.

WiJungle

WiJungle

WiJungle is an Indian Cyber Security Company that develops and markets a unified network security gateway solution.

Liongard

Liongard

Liongard automates the management and protection of modern IT environments at scale for IT MSPs - Managed Service Providers and Enterprise IT Operations.

Portshift

Portshift

Portshift leverages the power of Kubernetes and Service-Mesh to deliver a single source of truth for containers and cloud-native applications security.

Winbond Electronics

Winbond Electronics

Winbond is a Specialty memory IC company. Product lines include Code Storage Flash Memory, TrustME® Secure Flash, Specialty DRAM and Mobile DRAM.

Invicti Security

Invicti Security

Invicti Security is an AppSec leader transforming the way web applications are secured.

SOOS

SOOS

SOOS is the easy-to-integrate software security solution for your whole team. Build, catch, and fix vulnerabilities with SOOS Software Composition Analysis.

Valeo Networks

Valeo Networks

Valeo Networks is a full-service Managed Security Service Provider (MSSP). We partner with organizations to remove the burden of technology so that they can focus on growing their business.

Halcyon

Halcyon

Halcyon is the industry’s first dedicated, adaptive security platform focused specifically on stopping ransomware attacks.

Vana Solutions

Vana Solutions

Vana Solutions is an Information Technology Services company. We help commercial & federal organizations select, adapt, and integrate the right technology solution so you can move faster.

Rankiteo

Rankiteo

At Rankiteo, we are pioneers in cybersecurity risk management. Our mission is to empower organizations with the tools they need to assess, enhance, and safeguard their digital landscapes.