A recent revelation by Facebook unveils a network of coordinated misinformation in Ukraine, prompting questions about the integrity of online media and the role of PR agencies. Facebook's action, though significant, raises concerns about the efficacy of internal controls and the broader information landscape in Ukraine.
According to Facebook's cyber security policy head Nathaniel Gleicher, the Kyiv-based company Pragmatico played a central role in promoting pages associated with the "troll factory." Allegedly, Pragmatico spent approximately $1.6 million on Facebook and Instagram ads, amassing over 4 million followers across various pages.
Furthermore, investigations by independent research organizations like DFRLab shed light on the extent of the operation. Analysis of blocked pages revealed ties to media outlets such as Znaj.ua and Politeka.net, suggesting a systematic approach to content dissemination.
DFRLab's findings highlight suspicious patterns in page creation and subscriber acquisition, indicating potential coordination and artificial inflation of engagement metrics. Additionally, discrepancies in public records and testimonies raise questions about the transparency and legitimacy of Pragmatico's operations.
While Znaj.ua and Politeka.net deny accusations of using fake accounts, their coordinated response and similarity in messaging raise doubts about their journalistic integrity. Critics argue that the issue extends beyond freedom of speech, emphasizing violations of Facebook's advertising policies and the exploitation of loopholes for commercial gain.
Oksana Romaniuk from the Institute of Mass Information underscores the need for regulatory intervention to address systemic challenges in the Ukrainian information ecosystem. However, the incident underscores broader concerns about foreign influence and corporate governance in shaping public discourse.
As Ukraine grapples with the aftermath of Facebook's crackdown, the episode underscores the urgency of developing robust mechanisms to safeguard against information manipulation and uphold journalistic standards.
Disclaimer: This report reflects ongoing investigations and presents findings subject to verification. Readers should exercise caution when interpreting the information provided.
Conclusion: The exposure of the "Troll Factory" underscores the vulnerability of online media ecosystems and the need for proactive measures to combat misinformation in Ukraine.
Keywords: Troll factory, Facebook crackdown, misinformation, PR agencies, media integrity, online manipulation
Links:
"Trolls" in the capital Podil, or Whose activity was stopped by the Facebook company
bellingcat-osint-casbt.blogspot.com9 min
March 27, 2024
View Original
On September 16, the Facebook company announced that it had discovered a "troll factory" in Ukraine and deleted the accounts associated with it. Among them were the pages of the Znaj.ua, Politeka and Hyser sites, which position themselves as mass media. However , according to the Institute of Mass Information, which investigates compliance with journalistic standards, they often spread manipulation and false information.
Nathaniel Gleicher, responsible for the cyber security policy at Facebook, writes that the Kyiv company Pragmatico was involved in the promotion of these pages. She spent about $1.6 million on advertising on Facebook and Instagram (or UAH 39.5 million — a considerable amount by Ukrainian standards, - Author), attracting more than 4 million followers.
In addition, according to Gleicher, both pages and groups were managed by fake accounts whose names were constantly changing: "Their owners and administrators posted information about celebrities, show business, sports, local and international news, political and economic issues, including Ukrainian elections, political candidates and criticism of various public figures".
Facebook has released several examples of content shared by these accounts.
A sample of the content posted on some of these pages
A sample of the content posted on some of these pages
Ukrainian "troll factory": what is known and how did it work?
Specialists of the independent research laboratory of digital forensics DFRLab (a project of the Atlantic Council think tank) conducted their own investigation: on September 16, 2019, Facebook blocked 149 pages for participating in "coordinated inauthentic behavior". DFRLab investigated 121 pages, 64 of which belonged to five media that are part of the Znay Media holding: Znaj.ua, Politeka.net, Akcenty, Hyser, and Clutch.ua. Facebook discovered Znay's connection with PR company Pragmatiko. DFRLab researcher Roman Osadchuk told about this in an exclusive comment to Ukrinform.
Roman Osadchuk
Osadchuk : "The page with this name was among the investigated pages. In one of the videos published on the page, a phone number was found that was used in the presentation of another Doping Digital Agency, which in turn claims to own the resources of Know, Politheka, and Clutch. DFRLab established that 37 Znaj.ua and Politeka pages from the entire array were created on December 22, 2018. This is about a third of all analyzed pages. Most of the pages created on this day did not contain publications. Of the 18 Politeka pages created that day, 12 had no publications. From 19 pages Know. UA - 16 did not contain any publication. Analysis in the CrowdTangle tool showed spikes in the number of subscribers around similar dates for the pages of Politeka and Znaj.ua. Thus, the pages of Politeka and Znaj of the city of Kropyvnytskyi, which were registered on December 22, 2018, received more than 600 subscribers in the period from December 30 to January 5. Other key spikes were recorded in late April to early May and late August to early September, when pages received between 30% and 80% increase in followers. Coincidence in dates for two independent pages may indicate possible coordination.”
In addition, Mr. Osadchuk added that the external domains of the Znaj.ua and Politeka.net websites are hosted on the same server and have the same IP addresses.
As for Pragmatico, there is almost no information about this company on the web. The Facebook page and official website are not available. Although such an agency still exists. For example, on the website Work.ua it is stated that the company is engaged in the creation and promotion of personal corporate brands, it employs from 10 to 50 employees.
And the article "PR during the war" is posted on the Politeka website, the author of which is identified as Valery Savchuk, director of the Pragmatico agency. In addition, in one of the resumes on the Jobs.ua website, the job seeker indicated that until August 2019 he worked as a political PR manager in social networks at Pragmatico. The resume says that in this position he was involved in media image formation, creating a positive image and maintaining the customer's reputation in social networks, as well as that he managed a "team of 10 people." But that's not all. LIGA.net journalists managed to talk to a girl who was interviewed at Pragmatico in 2018. According to her, the company was engaged in political PR and promotion of politicians on FB, at that time it had several offices near the Palace of Sport metro station and a large SMM department. The girl provided the contacts of several company managers, but they said: "They have never heard of Pragmatico and have never worked there..."
In turn, Ukrinform took a comment from Odesa blogger Oleksandr Kovalenko , who back in July of this year (at the height of the parliamentary campaign) published a post on his Facebook page mentioning a certain PR company (the blogger did not specify the name, but in a conversation with a journalist did not deny that it was about Pragmatico - see below). According to him, the office of this "office" is allegedly located in the Podol region of the capital.
Oleksandr Kovalenko
Oleksandr Kovalenko
"The members of the so-called troll groups are young people in their 20s and 30s. They work in three shifts. Each (shift) has 10 people. The monthly salary of one troll is about 9 thousand hryvnias. The norm for a day shift is 300 comments, for a night shift - 200", - says Kovalenko, - At the entrance to the office - there is a security guard who takes phones and other means of photo, video and audio recording from outsiders."
Photo from Oleksandr Kovalenko's post
When asked why he mentions Podil in his post, the blogger answered: "Why not? There is a wide selection of office space in any price category, and thanks to a large number of educational institutions, there is easy access to a potential workforce. Shift work allowed even inpatient students to join the work. Of course, I will not name the sources of information. But these people are related to the mentioned company - they worked there."
Somewhat similar to "trolls from Olgino", but no more
According to Oleksandr Kovalenko, this factory did not actually perform any openly anti-Ukrainian tasks. "Strana.UA and their YouTube with an armada of trolls do many times more work to discredit Ukraine than those we are talking about. Basically, this factory worked, let's say, on itself. Political orders to discredit candidates were carried out . Moreover, from completely different persons who radically differ from each other in the vector of their political activity. Of course, like any "troll-generator", it harmed the country's information environment, especially in the midst of an election campaign . But to compare them with the "Holgino trolls"... This would rather be flattery towards them than the truth," the blogger convinces.
It is possible that it is so. However, there is a noticeable "tiny" similarity (underlined and highlighted in bold) with the "trolls" of Yevgeny Prigozhin ("Putin's cook").
At the end of February last year, diplomat, expert of the Russian Research Center Serhii Borshchevskyi wrote in an author's material for Ukrinform entitled "Russian "ichtamnets" on the Internet: the scale is impressive" wrote : "...since the beginning of 2014, employees of the "factory" pretending to be Americans , through social networks spread false information directed against some candidates (...) the "strategic goal" of this company was to introduce destabilizing divisions into the US political system."
The similarity can also be traced in the organizational structure. In the article of the Spanish-language online edition of ABC Internacional (ABC, dated November 20, 2017) entitled "Fake news: the Russian "troll factory" that works "24 hours a day" ( La "granja de trolls" rusos que trabaja las 24 horas del día ), which was translated into Ukrainian by Serhii Borshchevskyi, mentions a boy named Vitaly Bespalov, who came to work as an editor at the St. Petersburg media organization "Internet Research Agency".
ABC Internacional : “The place of work is located in building No. 55 on Savushkin Street in St. Petersburg and is popularly known as the "troll factory." Vitaliy Bespalov became another regular in the production, which functions 24 hours a day (the shift mode was also mentioned by an Odessa blogger) , with a lunch break of 30 minutes... The number of trolls at the "factory", according to various former employees, varies between 400 and 1,000 people placed on different impenetrable (which do not communicate with each other) floors. According to Bespalov, the employees are young people aged 25-30 years (the same age of Pragmatico employees is 20-30 years old) , mostly women."
Znaj.ua and Politeka about blocking on Facebook: "We are not bots or trolls. We are living people"
Meanwhile, the sites Znaj.u aand Politeka.net reject accusations of using fake pages and say that politicians want to limit freedom of speech through the most famous social network.
Znaj.ua : "The entire Znaj.ua team can confirm their identities, have passports and a completely physical, not imaginary, form (...) We insist on restoring the operation of our page. It is very unfortunate to assume that a world-renowned company could become a victim of manipulation by the political forces of Ukraine, which seek to silence well-known media that criticize their activities."
Politeka.net : "The Politeka.net team consists of journalists and programmers, SEO experts and content managers, this is a huge team of people, each of whom can confirm his identity. Prove that he is not a troll or a bot. We, living people, who have been creating news content for the same people — flesh and blood — 24 hours a day for three years now. We're working to restore subscription access to millions of our readers, and to restore our employees to accounts that were once built with great trust and respect for the Facebook team. We believe that the world-famous company will not follow the lead of the political forces of Ukraine, who dream of silencing the well-known media, closing the eyes and ears of readers."
Journalists of " Ukrainian Pravda " analyzed the statements of both sites and found that they are similar in content and form, and individual phrases are formulated almost identically. Yes, both resources wrote that their pages could be deleted due to the fact that "different political groups" were conducting "information wars" there. The sites also admitted that they cooperated with PR agency Pragmatico, with which Facebook linked the seized accounts. However, they say that the company only provided them with "advisory services for promotion in social networks".
The director of the Institute of Mass Information (IMI) Oksana Romaniuk expressed her own opinion in a comment to Ukrinform .
Oksana Romanyuk
"Maybe the reason for the blocking is the distribution of fake news by the mentioned sites, assholes... Well, at first I thought so, because the quality of the content on these sites is extremely low. Even the tongue will not return to call it journalism - the standards are constantly violated. But no. News content has nothing to do with blocking. The reason is not freedom of speech, it is something else: the rules of Facebook regarding the distribution of material of a commercial nature - advertising - have been violated. That is, apparently, some technical points. After all, they used so-called "dead" pages - fake accounts - with a huge number of subscribers, but with zero content, - says Mrs. Romaniuk. - It seems that Ukrainian "craftsmen" simply found some loopholes in the social network to engage in aggressive SMM and promote commercial content. At least, that's my opinion. And regarding the fact that the "political forces of Ukraine" are trying, as they write, to force them to "shut up" and the readers to "close their eyes and ears" - no comments here. It is not clear on whose behalf these "official statements" were written. The entire editorial staff of our portal? Well, well... And who goes there, in this editorial office?.."
It remains to be reminded that the problems in the Ukrainian information market are far from exhausted by this story. After all, the blocking of 149 Facebook pages is not only a drop in the ocean, it is also an initiative of a foreign private business that implemented it. Question: when will Ukraine begin to take adequate measures of its own to, at least, limit information diversions due to the "barrier" remain open?
Myroslav Liskovich . Kyiv
https://bastyon.com/steelgrut?ref=PDJ7gBDU1HCrnKW4V5VnuTTZL6ec6BF9Ek
https://bastyon.com/steelgrut?s=c6ec7aa1992672f545267ea62dc733196684c4a5e93e8f7529032fd8dae9bb80&ref=PDJ7gBDU1HCrnKW4V5VnuTTZL6ec6BF9Ek
https://bastyon.com/steelgrut?s=cb5905cf21b9916b491c6b93e108f4ea79bb2fcd70cb25651342e4b675ebecab&ref=PDJ7gBDU1HCrnKW4V5VnuTTZL6ec6BF9Ek
Scandal with crypto exchange Beribit: customers besiege the office in "Moscow City" and demand 400 million. Main "Lenta.ru": cryptoinvestors Beribit demand to return them 400 million rubles. They have been besieging the office of the exchange on the 52nd floor of the tower "Federation" in "Moscow City" for the second day to return the funds frozen in their accounts. In total, clients cannot get access to 400 million rubles. What is happening in Beribit - further in the material. As reported "Lenta.ru" with reference to the telegram channel Mash, since the morning of April 26, clients of the exchange Beribit began to gather at the office of the company to return their money. According to them, 400 million rubles were stuck in the accounts of the exchange. Beribit employees tried to escape through the back exit, but they failed. As a result, the company's employees had to talk to disgruntled customers. They were promised to return half of the amount at once, and the remaining debts - within 15 working days. Searches at Beribit At the end of March 2024, Beribit's office in Moscow City was searched against the backdrop of the terrorist attack in Crocus. The company's equipment was seized. The head of Rosfinmonitoring Yuri Chikhanchin said that the organizers of the attack paid the perpetrators, including cryptocurrency. Therefore, checks were held in all offices of crypto exchanges located in "Moscow City". Further here: https://secretmag.ru/zhizn/klienty-beribit-osazhda... Well, the music has been playing for a long time, it seems that the cause and reason for the massacre in Crocus has begun to manifest itself - crypto exchanges are beginning to be clamped down and rumors of a complete ban on cryptocurrencies in the Russian Federation have already started. The article also mentions such nonsense as if by itself - that crypto-investors must be verified and confirm their identity, then maybe they will be paid.