Meta Threat Research
Israel-Based Influence Operation Targeting France, the United Kingdom, Australia, Iran, Togo, Gabon, and Angola
Meta disrupted a Israel-based Coordinated Inauthentic Behavior (CIB) network targeting France, the United Kingdom, Australia, Iran, Togo, Gabon, and Angola. This file contains indicators of compromise and a network summary from Meta’s Adversarial Threat Report H2 2026.
Meta’s Adversarial Threat Report Network Summary
We disrupted a Coordinated Inauthentic Behavior network originating in Israel and targeting audiences in France, the United Kingdom, Australia, Iran, Togo, Gabon, Angola, and the United States. The operation maintained a cross-platform presence, including on TikTok, X, and their own websites, and we removed 215 Facebook accounts, 4 Pages, and 1,044 Instagram accounts for violating our policy against Coordinated Inauthentic Behavior. About 32,500 accounts followed one or more of these Pages, and about 248,000 accounts followed one or more of these Instagram accounts. Network operators engaged in around $100 in spending for ads. This network maintained clusters of lower-sophistication, automated fake accounts specifically designed to artificially boost engagement to its main accounts. Meta’s investigation revealed links to individuals based in Israel. We assess this is an influence-for-hire operation, likely run on behalf of a number of distinct clients.
Although the operation targeted a number of countries with targeted narratives, operators followed the same tactics in developing these distinct manipulation campaigns; the actors behind this activity established Pages and Instagram accounts posing as local, civically-engaged brands, news sources, religious organizations, and political activists. The operation then deployed clusters of fake, automated accounts that used AI to mass-produce contextually relevant comments designed to artificially boost engagement on the network’s primary assets, a tactic to boost reach that the network’s own operators referred to as ‘Mother-Child’. Ahead of France’s 2026 municipal elections, the network created brands to criticize political candidates and spread narratives about the “Islamization” of France. Network operators disseminated varied messaging tailored to different regions, including partisan content in Togo and Gabon, anti-government messaging in Iran and Angola, and anti-immigrant and anti-Muslim campaigns in France, the United Kingdom, and Australia. The network also aimed a small cluster of these bots at the NYC mayoral campaign. These accounts posted into local Groups and made comments on Facebook. We found this network as part of Meta’s investigation into suspected Coordinated Inauthentic Behavior in the region.
Image: Example of comments by inauthentic accounts on an Instagram account controlled by the network.
Indicators of Compromise
Note: URLs have been defanged for safety. Replace [.] with . to resolve.
| Indicator Type | Indicator Value |
|---|---|
| Domain | lalternative2026[.]com |
| Domain | blogdesophie[.]com |
| Domain | delogupourpalestine[.]com |
| Domain | rcn-france[.]com |
| Domain | forsane-alizza[.]eu |
| URL | https://roayahnews[.]com/فرسان-العزة-في-فرنسا-تجنيد-سري-وتمويل/ |
| Domain | sadaqahpalestine[.]com |
| Social Media Account | http://x[.]com/sadaqahpalestin |
Cross-Links
- Full ATR Report: Meta Adversarial Threat Report H2 2026
- AlienVault OTX Pulse: h2-2026-israel-cib-based-network on OTX
- IOC File (GitHub): h2-2026-israel-cib-based-network on GitHub