The social media giant has carried out a dramatic crackdown on ‘coordinated inauthentic behaviour’ originating in Tehran and targeting countries including the UK and US.
The ‘Liberty Front Press’ network of Facebook pages was publishing cartoons praising the Labour leader, mocking the Queen and lampooning Brexit among other material.
Commons Culture Committee chair Damian Collins said he feared the haul of more than 650 pages was the ‘tip of the iceberg’.
They’ve found a few hundred here or there targeting the UK and US and there were 30,000 removed close to the French election, but my concern is that this would be the tip of the iceberg,’ Mr Collins said.
The activity, some of which dates back to 2011, included spreading political messages and attempting to hack other people’s accounts or spread malware, according to Facebook’s head of cyber security policy.
Writing on the company’s blog, Nathaniel Gleischer said: We’ve removed 652 pages, groups and accounts for coordinated inauthentic behaviour that originated in Iran and targeted people across multiple internet services in the Middle East, Latin America, UK and US.
Separate activity from Russia which targeted politics in Syria and Ukraine was also removed, he said.
There’s a lot we don’t know yet, Facebook chief executive Mark Zuckerberg said on a conference call with reporters on Tuesday afternoon.
With pages in particular it should be clear to users from which country that is being operated from, said Mr Collins.
Users should also know whether the person operating the page is deliberately hiding their identity, he added.
In July, the Electoral Commission fined official Brexit campaign group Vote Leave and reported senior figures to the police for breaking electoral law with Facebook adverts targeting voters in the build-up to the EU referendum in 2016.
We’ll see more of this activity between now and the US mid-term elections (in November). But Facebook has not really been investing in looking at this activity and the problem is probably much larger than we’ve seen, said Mr Collins.
Cybersecurity firm FireEye first alerted Facebook to a network of pages operating under the name Liberty Front Press, posing as news and civil society organisations.
Mr Gleischer said website data linked 74 pages, 70 accounts and three groups which targeted UK and US politics on Facebook, as well as 76 Instagram accounts, to Iran’s state media.
These pages hosted three events and spent more than 6,000 dollars (£4,666) in advertising, he said, although he gave no details about the events and adverts or what would happen to the money paid to Facebook for promotion.
A second, smaller network linked to Liberty Front Press tried to hack into user accounts and spread malware.
The oldest network was created in 2011 and largely posted about Middle East politics in Arabic and Farsi but also shared content in the UK and US, including the page Free Scotland 2014.
The network spent more more 6,000 dollars in advertising on Facebook and Instagram, paid for in US dollars, Turkish lira and Indian rupees between July 2012 and April 2018.
Facebook said it was still investigating the networks and has shared information with the US and UK governments.
FireEye plans to release a full report into the activity but has not specified a date.
Mr Collins said the fake news inquiry will release its final report in the autumn, after the Information Commissioner completes a parallel investigation into how Facebook handles users’ personal information.