When a large-scale military operation against Iranian infrastructure launched on February 28, 2026, coordinated activity appeared almost simultaneously across multiple platforms. Networks of inauthentic accounts on TikTok, Facebook, X, and Instagram began distributing AI-generated videos depicting Iranian strikes on regional landmarks and cities, with 19% of accounts involved in amplifying the campaign.
The activity centered around three recurring narratives designed to portray Iran as the dominant and victorious actor in the conflict, amplified through synchronized posting behavior and repeated media assets distributed across large account networks.
The campaign displayed clear indicators of coordination: identical video assets, synchronized posting windows, repeated hashtag clusters, and cross-platform distribution patterns pointing to centralized content production rather than independent user activity.
Cyabra's analysis of the boycott targeting five major U.S. retailers found inauthentic accounts padding volume and hopping between brands, without manufacturing the underlying anger.
Cyabra found that fake accounts driving stock market conversations grew 4 percentage points in 2025, with coordinated networks manipulating investor sentiment through both negative and promotional narratives.
Cyabra's analysis, in collaboration with Onclusive, uncovered coordinated inauthentic activity behind several of the World Cup 2026's most viral controversies, from ticket scams to false claims about competing teams.
