Meta disrupted a Iran-based Coordinated Inauthentic Behavior (CIB) network targeting Azerbaijan. This file contains Indicators of Compromise (IOCs) from Meta’s Adversarial Threat Report H1 2026.
We disrupted a multi-year influence operation that targeted Azerbaijan. We actioned 367 Facebook accounts, 3 Pages, and 360 Instagram accounts for violating our policy against Coordinated Inauthentic Behavior. About 4,000 accounts followed one or more of these Pages and about 34,000 accounts followed one or more of these Instagram accounts. The network engaged in around $400 in spending for ads on Facebook and Instagram, paid for mostly in Euros. The network aimed to destabilize Azerbaijan politically, promote Iranian regional interests, and undermine Western influence. We attribute this network to Azerbaijani individuals located in Iran and Germany.
This operation, active since 2022, was characterized by high-quality persona building; fake accounts included detailed information such as relationship statuses, education, and specific professions. Some of the accounts in this network were designed to reflect the actual Azerbaijani diaspora in Russia, speaking Russian and claiming to live in Moscow. The network attempted to inject narratives into the comment sections of prominent authentic news pages like the BBC and RadioLiberty.
Note: URLs have been defanged for safety. Replace [.] with . to resolve.
| Indicator Type | Indicator Value |
|---|---|
| Domain | sizinyol[.]org |
| Domain | qafqaztimes[.]com |