AI-Powered Tool Meliorator Fuels Russian Disinformation Campaigns on Social Media
Introduction
Russian state-sponsored media organization RT has been using AI-powered software to generate realistic social media personas and spread disinformation for the past two years. This sophisticated tool, known as Meliorator, has been employed to target multiple countries, including the US, Poland, Germany, the Netherlands, Spain, Ukraine, and Israel.
Meliorator's Capabilities
Meliorator is an AI-enabled bot farm generation and management software designed to disseminate disinformation. It creates authentic-looking social media personas en masse, known as "souls," and employs automated scenarios called "thoughts" to carry out various social media actions. These actions include generating original posts, following other users, commenting, reposting, and obtaining followers. The tool replicates disinformation from other automated accounts, spreading false narratives and increasing harmful foreign influence.
The software's features include:
- AI-driven creation of realistic social media personas
- Deployment of typical social media content
- Mirroring and perpetuating disinformation from other bots
- Formulating messages based on specific archetypes
- Operational Details and Impact
The Meliorator campaign was first observed in 2022. Although initially identified on X, it is designed to expand its functionality to other platforms like Facebook and Instagram. The software has been used to spread disinformation on various topics, notably the Russia-Ukraine conflict. This includes videos of President Putin justifying Russia’s actions in Ukraine and false claims about historical events.
Meliorator’s technical structure involves an administrator panel called 'Brigadir' and a back-end seeding tool named 'Taras.' Users connect via virtual network computing (VNC) connections, and the tool includes measures to avoid detection, such as obfuscating IP addresses and bypassing dual-factor authentication.
International Response and Recommendations
A joint advisory by US, Canadian, and Dutch government agencies has shed light on the operations of Meliorator. The US Department of Justice (DoJ) has announced the seizure of two domain names and 968 social media accounts used in these disinformation campaigns.
To combat such threats, intelligence agencies have recommended several measures for social media platforms, including:
- Validating that accounts are created and operated by real individuals
- Reviewing and upgrading authentication and verification processes
- Identifying and reviewing users with suspicious activity
- Implementing Secure by Default settings, such as multifactor authentication (MFA) and privacy-focused default settings
Conclusion
The use of AI-powered software like Meliorator by Russian media highlights the growing sophistication of disinformation campaigns. To counter these threats, robust measures such as stolen credentials detection, darknet monitoring services, dark web surveillance, and digital footprint analysis are crucial. Additionally, brand protection, brand impersonation defense, online risk evaluation, and digital threat scoring are essential components of a comprehensive cybersecurity strategy.
About Foresiet!
Foresiet is the pioneering force in digital security solutions, offering the first integrated Digital Risk Protection SaaS platform. With 24x7x365 dark web monitoring and proactive threat intelligence, Foresiet safeguards against data breaches and intellectual property theft. Our robust suite includes brand protection, takedown services, and supply chain assessment, enhancing your organization's defense mechanisms. Attack surface management is a key component of our approach, ensuring comprehensive protection across all vulnerable points. Compliance is assured through adherence to ISO27001, NIST, GDPR, PCI, SOX, HIPAA, SAMA, CITC, and Third Party regulations. Additionally, our advanced antiphishing shield provides unparalleled protection against malicious emails. Trust Foresiet to empower your organization to navigate the digital landscape securely and confidently.
Protect your brand, reputation, data, and systems with Foresiet's Integrated Digital Risk Platform. 24/7/365 threat monitoring for total peace of mind.
Dec. 11, 2024, 6:29 p.m.
Nov. 29, 2024, 5:43 p.m.