Cyabra Launches Deepfake Detection

The Bot Network Collapse That Exposed Iran’s Influence Operation

As social media conversations around Scottish independence and Brexit spiked this summer, Cyabra found that the heated discourse suspiciously synchronized. On June 13, proof of those findings emerged: For 16 days, hundreds of fake accounts went completely dark.

Cyabra’s latest investigation revealed a state-run Iranian influence campaign, exposed mid-operation, attempting to manipulate public discourse in the UK.

A Disinformation Campaign Hidden in Plain Sight

Between May and June 2025, Cyabra scanned thousands of profiles discussing Scottish independence and Brexit on X, uncovering a coordinated and inauthentic influence operation driven by fake accounts linked to Iran.

The dominant narrative promoted by these fake profiles championed Scottish independence, framing the United Kingdom as a force of oppression from which Scotland must break free. This messaging strategically tapped into themes of democratic rights, national identity, and historical grievances. A parallel narrative portrayed Brexit as a decision imposed on Scotland against its will, emphasizing the economic, social, and political fallout – particularly its disproportionate impact on Scottish communities. A third narrative accused the BBC and the Labour Party of deliberately spreading dis- and misinformation and maintaining an institutional bias against Scottish interests.

In the picture: Fake profiles spreading Scottish independence narratives

This fake campaign was remarkably sophisticated in its tactics:

  • Mimicking local slang and expressions
  • Using AI-generated profile images
  • Repeating emotionally charged slogans like “Another very good reason for #ScottishIndependence” and “Brexit betrayal”
  • Amplifying coordinated hashtags such as #ScottishIndependence, #FreeScotland, #ScottishIndependenceASAP, #BrexitBetrayal, #Brexit, #BetterTogetherLied, #BBCLies, #BoycottTheBBC, and #LabourLies,
  • Disseminating identical or near-identical posts across multiple fake accounts
  • Mutual retweeting to manufacture consensus.
  • Fake accounts engaging with each other to boost credibility.

The coordinated campaign’s success was striking: content from fake profiles generated over 224 million potential views and more than 126,000 user engagements.

Circular network chart showing clusters of social media accounts linked to an Iranian influence operation, with large red circles of suspected bots at the center and smaller green circles of authentic users around the perimeter, all connected by faint blue edges
In the picture: Fake profiles (red) interacted with one another, but also integrated into authentic communities and engaged with authentic profiles (green) to spread and amplify their messages.

The 16-Day Silence That Blew the Cover

On June 13, following an attack that knocked out Iran’s power grid, the coordinated bot networks abruptly went silent. All at once, the fake profiles stopped posting. For more than two weeks, they vanished – no posts, no noise, just digital silence. When power returned, the same fake network came back online, using the same personas and behaviors, but with a new mission: promoting pro-Iran messaging and mocking the West.

This coordinated blackout – followed by a synchronized return and sudden messaging shift – left little room for doubt. It was clear: this was a state-controlled operation caught mid-glitch.

The Pivot: Iran vs. the West

After the power outage, the bot network’s new objective – amplifying pro-Iranian narratives – was immediately deployed. Fake profiles portrayed Iran as a strong, moral actor standing up to the United States, emphasizing its resistance to Western hegemony and support for regional liberation movements. The narratives painted U.S. foreign policy as hypocritical, contrasting it with Iran’s supposed moral clarity and historical victimhood. Posts leaned heavily on both historical grievances and current events to legitimize Iran’s actions and accuse the West of double standards.

Mock social media post urging Scottish independence, referencing Iran’s struggle, with hashtags and a photo of a crowd waving blue-and-white Scottish flags, stamped red with the word FAKE
In the picture: Fake profiles comparing the Scottish nation with Iran, presenting Iran as a winner in this conflict.

Multiple Narratives, One Goal: Destabilize the West

Cyabra’s findings serve as a strong reminder of the role disinformation plays in shaping public opinion. This campaign marks a shift: where fake profiles were once just amplifiers of outrage – now they are the architects of the narratives. They seed division, amplify existing tensions, and hijack political discourse – and they do all of this while maintaining a credible, authentic-looking image. In this case, the minor goal was to legitimize Iran’s geopolitical stance. But the major goal in those long-game influence operations is always the same – to divide Western societies, discredit democratic institutions, and manipulate public perception by creating a distorted reality.

Download and read Cyabra’s full report

____________

Cyabra’s AI platform exposes coordinated bot activity, identifies fake profiles in real time, detects GenAI content and deepfakes, and gives democratic institutions and companies the tools to fight disinformation and counter its spread. Contact us to learn more.

Related posts

Bots Promoting Violent Threats Against Healthcare CEOs

Weeks after the tragic murder of UnitedHealthcare’s CEO, social media discourse continues to rage with misinformation, fake news, and conspiracy theories about the murder, alongside...

Rows of robot-like figures at computer stations spread conspiracy messages toward faceless healthcare executives amid neon social-media icons

Rotem Baruchin

December 20, 2024

Misinformation Monthly – July 2023

Each month, our experts at Cyabra list some of the interesting articles, items, essays and stories they’ve read this month. Come back every month for...

Person holding a tablet, surrounded by floating social media icons, chat bubbles and an info symbol on a purple gradient background with the text 'Misinformation Monthly' and 'Cyabra reading list'

Rotem Baruchin

July 23, 2023

165 Profiles and the Bank Ain’t One: BNI Impersonation 

Bank Negara (BNI) might be “just” the fourth-largest bank in Indonesia, but it has 1,000 branches all over the world, including Tokyo, London, and New...

Futuristic humanoid robot typing at a computer in a room lined with gold bars, illustrating automated impersonation of a bank

Rotem Baruchin

March 13, 2023