Facebook says it was able to uncover the Iranian network thanks to information from Twitter and that the two have been sharing notes sooner than previously
Hannah Murphy / Financial Times :
Context & Ripple Effects
Facebook's Iran takedowns have a paper trail: in August 2018, FireEye's analysis of Iran-linked fake accounts gave the company its lead, and that October it removed 82 Pages, groups, and accounts for coordinated inauthentic behavior originating in Iran. The new disclosure changes the sourcing picture — the intelligence now flows directly from a direct rival, Twitter, and the two platforms were exchanging notes earlier than either had acknowledged.
First-order effects
- Facebook can attribute and remove Iranian influence networks faster, because Twitter's own threat findings now feed directly into its enforcement rather than arriving via third-party security researchers.
- Twitter's internal investigations become shared artifacts: what it uncovers about Iranian operations on its own platform is now usable evidence in Facebook's takedowns.
Second-order effects
- The intermediary role that FireEye occupied in the 2018 Iran-linked discovery — selling platform-to-platform intelligence — comes under pressure as the platforms exchange notes directly for free.
- Other platforms facing the same Iranian operations face implicit pressure to join the information-sharing loop or risk being the weak link where a network migrates after a takedown on Facebook and Twitter.
Third-order effects
- If the pattern holds, attribution of state-backed influence campaigns becomes a shared industry function among rival platforms, with coordinated takedowns as the norm and security vendors repositioning around the edges.
- Cross-platform intelligence sharing also raises the stakes for regulators assessing whether voluntary cooperation among platforms is adequate, or whether state-backed influence operations warrant a formalized reporting regime.
The trend: Platform rivals are quietly building a shared threat-intelligence layer against state-backed influence operations, with Iran's persistent campaigns — documented from 2012 onward — acting as the forcing function.