Uncovering Iran’s Online Manipulation Network

Following a nationwide blackout in Iran, Cyabra uncovered a coordinated bot network spreading pro-Scottish and pro-Iran narratives on X.

Cyabra analyzed conversations on X between May and June 2025, and revealed an Iranian bot network targeting social discourse around Scottish independence.

26% of the profiles analyzed were fake, responsible for over 3,000 posts amplifying hashtags like #ScottishIndependence, #BrexitBetrayal, and #BBCLies - blending pro-separatist messaging with anti-British and pro-Iranian narratives to simulate grassroots sentiment.

Following Iran’s nationwide blackout on June 13, the fake accounts went silent for 16 days, then reactivated with a coordinated shift toward anti-Israel and pro-Iranian content - ultimately generating over 126,000 engagements and reaching 224 million potential views.

#National Security, Threat Actors

Share this report
Circular network graph with clusters of red and green nodes illustrating coordinated Iranian online influence accounts and their connections
Share this report

Fill up the form below and receive the full report directly to your inbox

Related reports

Shell Social Media Analysis

August 2, 2022

Competitor analysis for Shell and its main rivals, and analysis of results.

Table showing Shell scoring 8 overall, outperforming BP 2, Chevron 5 and Exxon Mobil 2 in price, service and online presence ratings

#Brand Reputation

Boycott Similac

May 2, 2022

Authenticity analysis of the profiles spreading negative Twitter conversation on Similac.

Tweet from Robert Reich stating that 89% of the U.S. baby formula market is dominated by four companies, warning that high concentration magnifies supply shocks like the Similac recall and urging stronger antitrust enforcement against Abbott

#National Security

Phishing – Activision

May 11, 2023

Cyabra discovered fake accounts advertising hacking services in relation to Activision.

Tweet by a verified user named Christopher promising 24/7 help to recover hacked or locked Activision, Snapchat, Instagram, Facebook and Bitcoin accounts, urging people to inbox him and using hashtags such as #hacked and #snapchatsupport

#Threat Actors