Google deletes 58 accounts with ties to Iran from YouTube and other sites
“جوجل” تحجب حسابات وقنوات على “يوتيوب” مرتبطة بإيران وروسيا
The company “identified and terminated” 39 English-language YouTube accounts, 13 Google+ accounts and six Blogger blogs that were found to be engaged in “politically motivated phishing,” Kent Walker, vice president for global affairs, said in the blog post.
The accounts were found to have ties to the Islamic Republic of Iran Broadcasting (IRIB).
“In recent months, we’ve detected and blocked attempts by state-sponsored actors in various countries to target political campaigns, journalists, activists, and academics located around the world,” he said.
The update follows similar take-downs by Facebook and Twitter, which earlier this week revealed calculated misinformation campaigns by Russian and Iranian accounts. Major tech firms have been ramping up content reviews and increasingly removing bad actors in light of widespread election meddling and abuse of social platforms.
Facebook said last month it had discovered coordinated “inauthentic behavior” surrounding the midterm elections in November.
The Iranian interference on Google began as early as January 2017, Walker said, and “was carried out as part of the overall operations of the IRIB organization.”
Here’s Google’s statement:
We’ve invested in robust systems to detect phishing and hacking attempts, identify influence operations launched by foreign governments, and protect political campaigns from digital attacks through our Protect Your Electionprogram.
Our Threat Analysis Group, working with our partners at Jigsaw and Google’s Trust & Safety team, identifies bad actors, disables their accounts, warns our users about them, and shares intelligence with other companies and law enforcement officials.
This week, there has been a lot of news about attempted state-sponsored hacking and influence campaigns. We wanted to provide an update on some of our ongoing work in this area:
– State-sponsored phishing attacks
– Technical attribution of a recently-reported influence campaign from Iran
– Detection and termination of activity on Google propertiesState-sponsored phishing attacks
Phishing—attempts to trick users into providing a password that an attacker can use to sign into an account—remains a threat to all email users. Our improving technology has enabled us to significantly decrease the volume of phishing emails that get through to our users. Automated protections, account security (like security keys), and specialized warnings give Gmail users industry-leading security. As part of our security efforts, for the past eight years, we’ve displayed prominent warnings to Gmail users who are at risk of phishing by potentially state-sponsored actors (even though in most cases the specific phishing attempt never reaches the user’s inbox).
In recent months, we’ve detected and blocked attempts by state-sponsored actors in various countries to target political campaigns, journalists, activists, and academics located around the world. When we’ve seen these types of attacks, we’ve notified users as well as law enforcement.
On Monday morning, we issued our most recent series of notifications to Gmail users who were subject to suspicious emails from a wide range of countries. We posted about these sorts of warnings here—if you received this type of warning, please read the blog post and take action immediately.
Iran and FireEye
To complement the work of our internal teams, we engage FireEye, a leading cybersecurity group, and other top security consultants, to provide us with intelligence. For the last two months, Google and Jigsaw have worked closely with FireEye on the influence operation linked to Iran that FireEye identified this week. We’re grateful to FireEye for identifying some suspicious Google accounts (three email accounts, three YouTube channels, and three Google+ accounts), which we swiftly disabled. FireEye’s full report has just been published today. It’s worth reading.
In addition to the intelligence we received from FireEye, our teams have investigated a broader range of suspicious actors linked to Iran who have engaged in this effort. We’ve updated U.S. lawmakers and law enforcement about the results of our investigation, including its relation to political content in the United States. We wanted to provide a summary of what we told them.
Connections to IRIB: forensic evidence
Our technical research has identified evidence that these actors are associated with the IRIB, the Islamic Republic of Iran Broadcasting.
We can’t go into all the technical details without giving away information that would be helpful to others seeking to abuse our platforms, but we have observed the following:
– Technical data associated with these actors is strongly linked to the official IRIB IP address space.
– Domain ownership information about these actors is strongly linked to IRIB account information.
– Account metadata and subscriber information associated with these actors is strongly linked to the corresponding information associated with the IRIB, indicating common ownership and control.These facts, taken together with other technical signals and analysis, indicate that this effort was carried out as part of the overall operations of the IRIB organization, since at least January 2017. This finding is consistent with internet activity we’ve warned about in recent years from Iran.
– We’ve regularly sent warnings to Gmail users about phishing attempts coming from Iran (including on Monday)
– We detected and warned users about a covert man-in-the-middle security attack in Iran in 2012
– We uncovered and warned users about politically-motivated phishing in Iran in 2013.Detecting and terminating activity on Google properties
Actors engaged in this type of influence operation violate our policies, and we swiftly remove such content from our services and terminate these actors’ accounts. Additionally, we use a number of robust methods, including IP blocking, to prevent individuals or entities in Iran from opening advertising accounts.
We identified and terminated a number of accounts linked to the IRIB organization that disguised their connection to this effort, including while sharing English-language political content in the U.S.:
– 39 YouTube channels that had 13,466 total US views on relevant videos;
– 6 blogs on Blogger
– 13 Google+ accountsOur investigations on these topics are ongoing and we will continue to share our findings with law enforcement and other relevant government entities in the U.S. and elsewhere, as well as with others in the industry.
The state-sponsored phishing attacks, and the actors associated with the IRIB that we’ve described above, are clearly not the only state-sponsored actors at work on the Internet. For example, last year we disclosed information about actors linked to the Internet Research Agency (IRA). Since then, we have continued to monitor our systems, and broadened the range of IRA-related actors against whom we’ve taken action. Specifically, we’ve detected and removed 42 YouTube channels, which had 58 English-language political videos (these videos had a total of fewer than 1,800 U.S. views). We’ve also identified and terminated the account associated with one blog on Blogger.
We continue to actively monitor our systems, take prompt action, share intelligence, and remain vigilant about these and other threats.
source: cnbc.com
أعلنت شركة “جوجل” الأمريكية العملاقة، اليوم الخميس، حجب عشرات الحسابات والقنوات على موقع “يوتيوب” مرتبطة بإيران وروسيا.
وقالت الشركة، في بيان، أن تلك الحسابات والقنوات تنفذ حملات “تضليلية”، يرتبط بعضها بهيئة “إذاعة جمهورية إيران الإسلامية”.
وتابع البيان أن عملية الكشف عن تلك الأعمال والارتباطات تمت بالتعاون مع شركة “فاير آي” للأمن الإلكتروني.
ونقل البيان عن “كينت ووكر”، نائب رئيس “جوجل”، قوله: “إن الفاعلين الذين يقومون بحملات التأثير ينتهكون سياساتنا، وسنقوم بإزالة المحتوى الذي ينشرونه بسرعة من خدماتنا، بالإضافة إلى حذف الحسابات”.
وأوضح “ووكر” أن الشركة أغلقت في هذه الحملة 58 حسابًا يقدم خدمات فيديو، و39 قناة على موقع يوتيوب، و13 حسابًا على موقع “جوجل بلس” للتواصل الاجتماعي، و6 مدونات.
وأضاف أن 42 قناة يوتيوب أخرى تم إغلاقها، تتبع “وكالة أبحاث الإنترنت” الروسية، المرتبطة بالكرملين.يشار أن جوجل تمتلك شركة يوتيوب، منذ عام 2006.
ويأتي تحرك “جوجل” بعد يومين من حجب 650 صفحة ومجموعة على منصتي “فيسبوك” و”انستغرام” للتواصل الاجتماعي، لارتباطها بإيران وروسيا.
ويتزامن تشديد الشركات الإلكترونية الأمريكية الرقابة على مستخدميها مع استعداد البلاد لانتخابات التجديد النصفي للكونغرس، المقرر إجراؤها في نوفمبرالمقبل.
