Investigation: apparent global Iranian influence project bigger than previously known; Facebook says it has taken down more accounts linked to Iran
great detail here on how Iran has been doing it, and how the Internet companies as usual are a couple of steps behind. https://twitter.com/... Chris Bing / @bing_chris : One thing I came away with — through my reporting in this story — is that there is a fine grey line between deceptive content, inauthentic behavior and propaganda. And how it's all being sorted out remains a work in progress. Conversely, digitization has made propaganda scalable Chris Bing / @bing_chris : Between the time we reached out to YouTube, Facebook and Twitter yesterday and tonight, they removed additional accounts tied to IUVM. In effect, IUVM was the engine for a lot of the Iranian disinformation sites and bots, yet the organization itself was initially sparred. Chris Bing / @bing_chris : IUVM is wild. As we discovered, it effectively acted as the laundering machine for a lot of the content that was taken down last week by @facebook in partnership with @FireEye. The content came from Iranian media in most cases but was obscured and tailored for a foreign audience
Context & Ripple Effects
This investigation lands three days after FireEye unearthed an Iran-linked propaganda campaign across Facebook, Twitter, and Google — one aimed mostly at promoting Iranian interests rather than dividing US voters. The new reporting names the machinery behind it: IUVM, which the relationships describe as a laundering machine channeling Iranian media content into disinformation sites and bots tailored for foreign audiences, with Facebook and FireEye partnering on the takedown.
The scale claim is the news: the operation is bigger than previously known, and it was global rather than US-focused. The arc that follows — Facebook's removal of 82 Pages, groups, and accounts for coordinated inauthentic behavior two months later, then further Iran-origin network bans in 2019 — confirms this was the opening of a sustained enforcement cycle, not a one-off.
First-order effects
- Facebook, YouTube, and Twitter removed additional IUVM-linked accounts between reporters' outreach and publication — meaning the platforms were still discovering the network in real time while being questioned about it.
- IUVM's laundering pipeline into foreign-audience sites and bots takes a direct hit from the coordinated Facebook-FireEye takedown.
Second-order effects
- Platform-security-vendor partnerships like the Facebook-FireEye pairing harden into standard practice, since external researchers are surfacing networks the platforms' own detection missed.
- As Chris Bing's reporting notes, the fine line between deceptive content, inauthentic behavior, and propaganda forces each platform to write enforcement policy case by case — and every takedown sets precedent for the next.
Third-order effects
- Digitization makes propaganda scalable, so enforcement becomes a permanent cat-and-mouse layer of platform operations; later findings that Iran's national broadcaster trialed fake-account campaigns via Facebook posts going back to 2012 (per NBC's report) keep pushing the true start date earlier than assumed.
- If the pattern holds, state influence infrastructure gets treated less as election-cycle anomaly and more as standing adversary — with takedown cadence, not legislation, as the primary governing mechanism.
The trend: State influence operations are industrializing through content-laundering networks like IUVM, while platforms and outside researchers settle into a recurring detect-then-takedown cycle that defines online information governance.