The Russian influence operation designed to tamper with the 2016 US presidential election used a combination of old-school espionage tactics and 21st-century technologies that will not be easy to stop, even now that the methods have been exposed, experts said.
Social media companies, especially Facebook and Twitter, have been under heavy pressure to find ways of stopping what is often referred to as “information warfare” on their services.
The indictment of 13 Russian nationals on Friday, announced by US Special Counsel Robert Mueller, made extensive use of records from Facebook and Instagram, according to people familiar with the matter.
Yet the combination of tactics revealed in the indictment, including the use of shell corporations and stolen IDs, deployment of virtual private networks to avoid online detection, and payments to unwitting Americans, suggests even a company as powerful as Facebook could struggle to stop such activities by itself as they happen.
US spy agencies have said Russia would try to interfere in the 2018 midterm elections, again by using social media to spread propaganda.
“They can’t out of hand stop it, because it’s very difficult for them to trace those things,” said Ann Ravel, a former member of the US Federal Election Commission. The clandestine purchase of advertising on the site through fake personas was particularly alarming, she said.
To know the identities of ad buyers, internet companies might need to duplicate the “know your customer” practices of banks and regularly share information with authorities, Ravel said.
Facebook has said it will start requiring thorough documentation from election-related advertisers to verify their identity and location, beginning with US elections this year.
Attempts To Guard Against Future Attacks
How extensive that vetting will be is unclear. “If you want to put up a theme page for a group, in the ordinary course you wouldn’t expect that a vendor like Facebook would require that sort of vetting,” said Dan Petalas, a former US federal prosecutor.
“The indictment really details an elaborate scheme that would be difficult to identify,” he said.
Facebook said on Friday it was making “significant investments” to guard against future attacks and was working with the Federal Bureau of Investigation to deter election interference.
The Russians’ alleged campaign began with three weeks of reconnaissance in 2014, when two of them traveled to nine US states, including Colorado and Michigan, according to the indictment. They were equipped with cameras, SIM cards, drop phones and, if needed, “evacuation scenarios,” the indictment says.
It describes the Kremlin-linked Internet Research Agency in St Petersburg as an organised bureaucracy. It was backed by an annual budget of millions of dollars, employed hundreds of people and boasted several departments dedicated to specific projects, like search-engine optimisation and graphics.
Even those who have demanded Facebook do more acknowledged on Friday it could do only so much. “We each bear some responsibility for exercising good judgment and a healthy amount of skepticism when it comes to the things we read and share on social media,” Senator Mark Warner, the top Democrat on the Senate Intelligence Committee, said in a statement.
The defendants are accused of stealing social security numbers of Americans to open up fraudulent accounts on digital payment system PayPal Holdings. They purchased space on computer servers located within the United States to use virtual private networks to mask their identities and pose as Americans.
Facebook could go further in monitoring its platform and adopt the process cryptocurrency firms use to verify bitcoin traders, said Jordan Lieberman, president of ad firm Audience Partners. But if Facebook raises the bar much higher, “It’s going to interrupt revenue flows and it’s absolutely going to cost them money.”
(Published in an arrangement with Reuters)
(The Quint, in association with BitGiving, has launched a crowdfunding campaign for an 8-month-old who was raped in Delhi on 28 January 2018. The baby girl, who we will refer to as 'Chhutki', was allegedly raped by her 28-year-old cousin when her parents were away. She has been discharged from AIIMS hospital after undergoing three surgeries, but needs more medical treatment in order to heal completely. Her parents hail from a low-income group and have stopped going to work so that they can take care of the baby. You can help cover Chhutki's medical expenses and secure her future. Every little bit counts. Click here to donate.)
(At The Quint, we are answerable only to our audience. Play an active role in shaping our journalism by becoming a member. Because the truth is worth it.)