Facebook’s Kurdistan Takedown
On May 29, Facebook took down over 400 assets based in Iraqi Kurdistan for coordinated inauthentic behavior. The assets on Facebook and Instagram (which is owned by Facebook) posted on a range of issues, but they typically supported the Kurdish political party the Patriotic Union of Kurdistan (PUK) and its co-leader Lahur “Sheikh Jangi” Talabani and criticized the governing Kurdistan Democratic Party (KDP) and its leaders from the Barzani family.
Ben Nimmo
Head of Investigations
Ben Nimmo was Head of Investigations at Graphika, where he led an expert team of OSINT investigators in detecting, identifying and analyzing inauthentic behavior and information operations online. He specializes in analyzing patterns of online disinformation and influence operations across varying platforms and geographical regions. He is now the Principal Investigator, Intelligence & Investigations at OpenAI.
C. Shawn Eib
Analyst
Léa Ronzaud
Senior Analyst
Léa Ronzaud leads monitoring and investigations into the detection and tracking of Russian influence operations and violent extremist groups. She also researches nihilistic violent extremism and hacktivism. Léa’s work has helped disrupt efforts by extremists in multiple countries to orchestrate real-world harm and exposed the inner workings of nation-state influence operations from Russia, China, and Iran.

Thomas Lederer is Vice President of Technology at Graphika, where he leads development and optimization of the company’s software platform and analytic solutions. He previously directed Graphika’s intelligence data team and has contributed to multiple reports and investigations, bringing a background that combines technology leadership and research work.
Download the complete PDF
The full report includes the complete network graph maps, raw attribution indicators, cross-platform topology analysis, and the full takedown timeline with platform-level data.
- Full network graph visualizations
- Attribution indicators with confidence scores
- Raw behavioral modeling data
- Takedown coordination timeline
Related Reports

Ants in a Web
Chinese businessman Guo Wengui is at the center of a vast network of interrelated media entities that have disseminated online disinformation and promoted real-world harassment campaigns.
Read the Report
Los Eco-Ilógicos
Ahead of the 2022 U.S. midterm elections, reporters, researchers, and lawmakers have sought to understand the spread of false and misleading information among U.S. Spanish-speaking communities online. These efforts have focused on topics including immigration, COVID-19 vaccines, and electoral fraud, but relatively few have examined how the same dynamics impact Spanish-language conversations about climate change.
Read the Report
Spamouflage Breakout
The sprawling pro-Chinese propaganda network that Graphika has dubbed “Spamouflage” and exposed multiple times over the past two years has begun to break out of its echo chamber of fake accounts and reach real social media users, including some heavyweight influencers, with hundreds of videos that praise China, criticize the United States, and attack the Hong Kong pro-democracy movement and exiled Chinese billionaire Guo Wengui.
Read the ReportSee How Graphika Can Help Your Team Act on This Intelligence
This report is one of 600+ investigations Graphika’s team has published. Our platform gives your analysts continuous access to the same intelligence — plus the tools to apply it to your specific threat environment.