⁂ Article
Coordinated Pro-Russian Propaganda Network Targeting ActivityPub and ATProto Services
Since 15 September, IFTAS has been tracking a coordinated network of accounts operating across Mastodon. These accounts are engaged in a high-volume propaganda campaign, promoting pro-Russian narratives and linking to Telegram channels associated with known state-aligned disinformation operations.
We became aware of a related investigation by the Antibot4Navalny research team that observed these accounts bridging to Bluesky, and we have since collaborated to enhance our investigations and share our findings. Their public post provides further context.
We have been contacting affected Mastodon administrators, and are now moving to a public advisory to inform the broader network.
The network includes accounts impersonating reputable news outlets such as BBC News, Euronews, and Meduza, designed to give credibility to Telegram propaganda links. We believe it may be connected to the “Pravda/Portal Kombat” pro-Russia propaganda network.
Accounts are hosted across numerous Mastodon instances and bridged into Bluesky, creating the appearance of independent sources. Activity on Bluesky helped reveal aggregate patterns, identical usernames, posting schedules, and content themes more clearly than across decentralised Mastodon services.
This campaign appears to mimic tactics observed in earlier influence operations, blending low-cost automation with impersonation and volume-based amplification.
We are sharing data with participants of the Social Web ISAC, and we issued a public advisory along with a list of observed usernames.
We are aware of accounts hosted on abandoned or unmanaged services, we may issue a Limit recommendation for those domains at a later date.
If you provide or can link to tools that may benefit administrators in identifying and/or managing these accounts, please let us know.
Further Reading: