inauthentic pages target independent news platform – will Facebook take notice [part 2, the case of Mikroskop Media]

This month, a series of articles published by The Guardian newspaper revealed how leaders across the world, used Facebook loopholes to harass their critics at home. And how despite having information about these violations, the platform lets these cases sit sometimes for months on end if not more, instead choosing to deal with more high profile cases. “The investigation shows how Facebook has allowed major abuses of its platform in poor, small and non-western countries in order to prioritize addressing abuses that attract media attention or affect the US and other wealthy countries. The company acted quickly to address political manipulation affecting countries such as the US, Taiwan, South Korea, and Poland, while moving slowly or not at all on cases in Afghanistan, Iraq, Mongolia, Mexico and much of Latin America.”

The Guardian investigations show that Azerbaijan was on the list of neglected countries. If it wasn’t for Facebook’s former employee Sophie Zhang memo published in September of last year, those inauthentic pages that Facebook removed 14 months later (once the memo was out) likely would have stayed. 

But even though those pages have been reportedly removed, hundreds if not thousands more continue to target independent media in Azerbaijan. AIW covered the story of Meydan TV here and The Guardian uncovered a similar pattern of targeting in the case of Azad Soz. AIW now presents its findings on targeting Mikroskop Media, a Riga-based online news platform that covers Azerbaijan. 

Mikroskop Media shared with AIW the list of Facebook posts where the platform received a high volume of comments. The preliminary investigation indicates that the Facebook page of Mikroskop Media was also targeted by hundreds of inauthentic Facebook pages set up to look like personal accounts flooding the posts with comments supportive of the ruling government and its relevant decisions. 

On March 24, Mikroskop Media shared the following post on its Facebook page. The post looks at the total number of citizens who have received vaccination so far in Azerbaijan as well as the total number of vaccines on March 23. This post received over 1.6k comments. AIW looked at 550 comments and almost all of these comments were posted by owners of pages that posed as users on the platform. 

Another post investigated by AIW was one posted on March 11, indicating the total number of businesses who have applied to the authorities to launch their businesses in Karabakh. The post receives over 400 comments. Having analyzed 200 of them, AIW was again, discovered that all of them were pages. 

On April 5, Mikroskop Media shared a link to a story they published about this investigation that was first originally published by VICE on March 29, exposing how little known Berlin-based television channel was part of a “lobbying strategy to polish Azerbaijan’s image in Germany” thanks to large sums of money paid through bribery of certain politicians. The story shared by Mikroskop Media on its Facebook page received almost 400 comments. AIW analyzed these comments, and once again, with an exception of a few profiles (although these too were suspicious given the lack of any recent activity on their profiles) that almost all of the comments were posted by inauthentic Facebook pages. 

At other times, Mikroskop Media’s Facebook page was targeted by troll accounts. This was especially the case in this example – on November 12, 2020, Mikroskop Media shared an infographic, about the number of times, Azerbaijan’s national constitution was amended. Among the 385 comments that were analyzed, a relatively high number of these comments were posted by Facebook profiles. A closer look at these profiles showed while some of the owners were employees at the state universities and government institutions, some were not authentic accounts at all. The majority of the comments once again were in favor of these changes, expressed pride in the country and the president’s decisions as well as accused the media platform of bias and unfair reporting. 

AIW would be happy to assist Facebook’s threat intelligence team in investigating the “coordinated inauthentic behavior” that AIW has observed and has shared in its reporting so far, but the main question still lingers, will it take notice? 

targeted harassment via telegram channels and hacked Facebook accounts [updated March 15]

[Updated] The targeting of women on telegram channels continues. On March 15, AIW was informed that the new target is the girlfriend of student activist Rustam Ismayilbeyli. Ismayilbeyli was targeted in September 2020 when a fake profile that belonged to the state security services informed Ismayilbeyli that personal information including intimate photos of Ismayilbeyli and his girlfriend will be sent to his friends and acquaintances unless he steps down from being an organizer of an upcoming rally and starts collaborating with them. Ismayilbeyli told AIW that those photos are now being circulated on the same telegram channels that earlier targeted journalist Fatima Movlamli, activists Gulnara Mehdiyeva and Narmin Shahmarzade.  

On March 14, Hikmat Hajiyev, assistant to President Ilham Aliyev said the local law enforcement is investigating the complaint by the activist Narmin Shahmarzade on the invasion of her privacy.

On March 13, activist, Vafa Nagi reported about her Facebook profile being compromised. Nagi, challenged local municipal authorities when she decided to run for the election in 2019 and won. For the first time, in Azerbaijan’s history of municipal elections [first municipal elections were held in December 1999] a representative of the feminist movement (or any activist) was elected. But her victory came at a cost. After attending one of the first meetings in her new role, Nagi realized there were inaccuracies in financial reports. When she asked that the head of the local municipality shared the full report she became a problem. This problem, needed a solution and so in an attempt to humiliate Nagi in her village, someone started posting her pictures from her Instagram across the village. There she was enjoying the sun on the beach, or elsewhere, smiling, looking happy. But that is not how the village community interpreted these photos. Azerbaijan has a complicated relationship with women’s rights, as evidence suggests especially from a recent wave of attacks against feminists who organized and attended the March 8th protest in the capital Baku. When the “picture campaign” ended with a fiasco, more serious measures were taken against Nagi. She was accused of defamation by an official and an employee of the rural house of culture. The two men claimed Nagi’s Facebook posts had damaged their business reputation. Although charges were dropped, the municipality did not stop there. The long battle ended when Nagi’s status as elected municipal official was taken from her. According to OC Media Nagi was deprived of her position in a vote by the municipal council on 20 August 2020, at the time, when she was receiving medical treatment abroad. Finally, Nagi was among the women who participated in a protest organized on March 8, 2021.

In addition, journalist Aysel Umudova, wrote on her Facebook profile, that police been visiting homes of all women identified during the rally including hers, except at the wrong address.

Another women’s rights activist targeted was Rabiyya Mammadova. After her interview with VoA Azerbaijan Service aired on March 13, she became a target of trolls accusing Mammadova of lying. In her interview, Mammadova explained how plainclothed officers stopped the taxi she was in, on her way to meet other women activists. The officer grabbed her by her throat and started suffocating her. She also received several blows to her head. As a result, she lost partial hearing in her right ear and her arm broken previously by the police was also injured. Mammadova was also among independent candidates who ran for municipal elections in 2019. But due to election fraud, she did not win and in January 2020 she was accused of defamation while the evidence of fraud Mammadova documented was dismissed. On the day of the election, she spotted a group of women, who were engaged in carousel voting, a common vote-rigging tactic. Mammadova called the group of women dishonest, which angered one of the women who demanded an apology and 1000AZN [600USD] in compensation. Her complaint was rejected in a court hearing. But this did not stop Mammadova from running in the snap parliamentary election in February 2020. She did not win. Nor did many of the independent candidates who ran for the national assembly. Defiant, Mammadova stood outside the Central Election Committee protesting election fraud. Other candidates joined Mammadova outside the CEC. By the evening, the police cordoned off the protesters and used violence to disperse the crowd. During the police intervention, scores of candidates, activists, and journalists were injured. Mammadova had her arm broken. Police denied anyone was injured despite reports and evidence.       

***

In recent days, at least three telegram channels were reported for sharing profane content targeting women in Azerbaijan. One channel called “Wretched men club” shared sensitive videos of journalist Fatima Movlamli, and exiled dissident blogger Mahammad Mirzali’s sister. Another group called “Expose bad-mannered girls” has targeted other women activists. A third one, targeted specifically one woman whose Facebook account was hacked shortly after the International Women’s Day march in Baku. 

In the past, other women journalists and activists were targeted in an online harassment campaign. 

Most recently activist Gulnara Mehdiyeva was targeted in a video shared via Facebook, containing a series of leaked private audio messages, that were stolen when Mehdiyeva’s social media accounts and emails were hacked last year

On March 9, Activist Narmin Shahmarzade’s Facebook profile was hacked, her name changed alluding to her interference with people’s private lives. The hackers flooded her Facebook feed with private messages, some of which were fake, and shared nude photographs of her, including at least one edited photo and audio. Several hours later, a Telegram channel was set up, sharing Shahmarzade’s intimate photos. In an interview with VoA Azerbaijan service, Shahmarzade said, “When my account was hacked, video footage and other posts with criticism of the ruling government were deleted. Then, my personal messages on Facebook messenger were compromised. Some of them were shared after being edited and taken out of context. My personal phone number was exposed and as a result, I received numerous calls and messages of threatening nature.” Shahmarzade said, she has informed the Ministry of the Interior and the State Security Services and describes what happened to her, a crime and that she will be going to court. Shahmarzade also pointed out to AIW that the hacker who compromised her Facebook profile is likely the same person or member of the same group that targeted activist Gulnara Mehdiyeva last year because at least one of the audio that was shared via Shahmarzade’s hacked Facebook account targeting her, does not even belong to the activist and that she never had access to. Contrary, it was among material hijacked from Gulnara Mehdiyeva. 

Among the women targeted, is also dissident blogger Mahammad Mirzali’s sister. Mirzali told AIW that the intimate video of his sister was leaked to harm him. “On February 15 my family members and I received several messages from a US number threatening me to stop my work. Otherwise, they told me they would release the videos of my sister. They told me they were not joking. They leaked the video on March 5. Later they shared the video on telegram channels. The same video was also sent to our relatives,” explained Mirzali. Mirzali suspects the authorities are behind this nasty campaign against his family. On March 14, Mirzali was reportedly stabbed by a group of unknown men. Mirzali is currently at the hospital. 

In September 2020, activist Rustam Ismayilbeyli was intimidated by someone who presented himself as an employee of state security that unless Ismayilbeyli did not stop his activism, intimate pictures of his girlfriend would be leaked online. 

In 2019, journalist Sevinc Osmangizi was the target of a smear campaign that variously accused her of being a double agent and working as a spy selling government secrets. 

The same year, journalist Fatima Movlamli was once again targeted with a fake Facebook page created under her name, sharing intimate photos and videos of her in her bed

In 2012, journalist Khadija Ismayilova was targeted in a similar campaign after receiving a package containing photos and videos of intimate nature all taken at her apartment. 

In 2010, at least two male journalists were targeted with sex tapes that were leaked and aired on prime-time television.

So far, only one journalist secured legal victory – Khadija Ismayilova. In January 2019, the European Court of Human Rights ruled that the government of Azerbaijan must compensate Ismayilova for its failure to investigate attempts to blackmail her.

In all of the incidents mentioned here, the targets voiced their suspicion of the government involvement behind these attacks. Meanwhile, the authorities either refute or remain silent about these allegations.

Finally, according to the definitions of online harassment as noted in this PEN America manual on online abuse in the last few days, it is safe to say the following forms of harassment have been documented:

Cross-Platform Harassment:  coordinated and deliberately deployed across multiple social media and communications platforms, taking advantage of the fact that most platforms only moderate content on their own sites;

Dogpiling (cyber-mob attacks): When a large group of abusers collectively attacks a target through a barrage of threats, slurs, insults, and other abusive tactics.

  • Outrage/Shame Mobs: A form of mob justice focused on publicly exposing, humiliating, and punishing a target, often for expressing opinions on politically charged topics or ideas the outrage mob disagrees with and/or has taken out of context in order to promote a particular agenda. 

Cyberstalking: In a legal context, “cyberstalking” is the prolonged and repeated use of abusive behaviors online (a “course of conduct”) intended “to kill, injure, harass, intimidate, or place under surveillance with intent to kill, injure, harass, or intimidate” a target.

Dog Whistling: Using words or symbols with a double (or coded) meaning that is abusive or harmful, sometimes to signal a group of online abusers to attack a specific target.

Doxxing: The publishing of sensitive personal information online—including home address, email, phone number, social security number, photos, etc.—to harass, intimidate, extort, stalk, or steal the identity of a target.

Hacking: The unauthorized intrusion into a device or network, hacking is often carried out with the intention to attack, harm, or incriminate another individual by stealing their data, violating their privacy, or infecting their devices with viruses. When hacking is used to perform illegal activities or intimidate a target, it is a cybercrime.

Nonconsensual intimate images (aka revenge port):  Nonconsensual pornography is “the distribution of private, sexually-explicit images [or videos] of individuals without their consent”.

Online Sexual Harassment (aka, Cybersexual Abuse, Gender-Based Harassment):  

Sextortion: A form of black mail in which an abuser threatens “to expose a nude or sexually explicit image in order to get a person to do something.” 

Unsolicited Pornography: Sending sexually explicit or violent images and videos to a target.

Unwanted Sexualization: Sending “unwelcome sexual requests, comments and content” to a target.