The US Justice Department seized 92 websites it said were used by Iran’s Islamic Revolutionary Guard Corps to spread disinformation.

Four of the web domains — Newsstand7.com, usjournal.net, usjournal.us and twtoday.net — were disguised as genuine news outlets based in the US, which the Justice Department determined were controlled by the Iranian guard. The sites appeared to target Americans with Iranian propaganda about US domestic and foreign policy, according to documents released Wednesday.

“Iran cannot be allowed to hide behind fake news sites,” said David Anderson, US attorney for Northern California. “If Iran wants to be heard using US facilities, it must reveal its true colours.”

The other 88 domains targeted audiences in Europe, the Middle East and Southeast Asia, while similarly claiming to be genuine local news sites that were actually being operated to spread pro-Iranian disinformation, according to a statement from the DOJ.

Also read: US to impose sanctions to choke off Iran’s financial sector

Google, Facebook Inc. and Twitter Inc. helped with the investigation by the FBI. The seized domains were also identified by threat researchers at FireEye Inc’s Mandiant unit in 2018. At the time, the Iranian guards’ operations were peddling anti-Saudi, anti-Israeli and pro-Palestinian themes, while also promoting specific US policies deemed to be favourable to Iran, including the US-Iran nuclear deal, according to Mandiant.

In 2018, Mandiant noted that the disinformation campaign did not appear to target the US midterm elections that year. But at least one account changed its Twitter name from @libertyfrontpr to @Berniecats to align its messaging with that of US Senator and former presidential candidate Bernie Sanders.

Iran has become a prolific actor in the information operations space, said John Hultquist, senior director of analysis at Mandiant Threat Intelligence. Similar to their cyber-attack capability, they have evolved over a series of brash operations.

All the domains were owned and operated by companies in the US. The seizure occurred under the International Emergency Economic Powers Act, which gives the US president broad authority to regulate financial transactions in a national emergency. This was the same tool President Jimmy Carter used in 1979 to freeze Iran’s financial assets in the US during the hostage crisis.

Also read: ‘We will set fire to US bases in Gulf,’ warns Iran General

The IRGC’s use of these domains violated the Foreign Agents Registration Act which requires foreign operatives in the US to openly declare their status so the US government and its residents are aware of the source of information and the identity of those attempting to influence US public opinion, policy and law, the Justice Department said. The domains targeting Americans were never registered under FARA, it added.

“Fake news organisations have become a new outlet for disinformation spread by authoritarian countries as they continue to try to undermine our democracy,” said Assistant US Attorney General John Demers. “We will continue to use all of our tools to stop the Iranian Government from misusing US companies and social media to spread propaganda covertly, to attempt to influence the American public secretly, and to sow discord.”

comment COMMENT NOW