The Justice Department today announced the seizure of two domain names and the search of 968 social media accounts used by Russian actors to create an AI-enhanced social media bot farm that spread disinformation in the United States and abroad. The social media bot farm used elements of AI to create fictitious social media profiles, often purporting to belong to individuals in the United States, which the operators then used to promote messages supporting Russian government objectives, according to affidavits unsealed today.
In conjunction with the domain seizures and search warrant announced today, the FBI and the Cyber National Mission Force (CNMF), in partnership with Canadian Centre for Cyber Security (CCCS), Netherlands General Intelligence and Security Service (AIVD), Netherlands Military Intelligence and Security Service (MIVD), and Netherlands Police released a joint cybersecurity advisory detailing the technology behind the social media bot farm. The advisory will allow social media platforms and researchers to identify and prevent further use of this technology by the Russian government. Additionally, X Corp. (formerly Twitter) voluntarily suspended remaining bot accounts identified in court documents for terms of service violations.
"With these actions, the Justice Department has disrupted a Russian-government backed, AI-enabled propaganda campaign," said Attorney General Merrick B. Garland. "As the Russian government continues its brutal war in Ukraine and threatens democracies around the world, we will continue deploying all our legal authorities to counter Russian aggression."
"Today’s action demonstrates that we will not tolerate Russian government actors using AI to sow disinformation," said Deputy Attorney General Lisa Monaco. "As malign actors accelerate their criminal misuse of AI, we will respond with disruptive actions alongside our international partners."
"Today’s actions represent a first in disrupting a Generative AI-enhanced social media bot farm sponsored by Russia," said FBI Director Christopher Wray. "Russia intended to use this bot farm to disseminate AI-generated foreign disinformation."
"We support civic engagement and civil dialogue generated by Americans," said U.S. Attorney Gary Restaino for Arizona. "The disruption announced today protects us from those who seek to mislead our citizens through unlawful means."
"The disruption is a result of combined efforts with international partners addressing a serious threat," said Acting U.S. Attorney Morris Pasqual for Northern Illinois.
According to court documents, a bot farm is software that allows for creating false personas on social media platforms enhanced by integrating artificial intelligence components such as image production or text generation.
Development was organized by an individual identified as Individual A from Russia who worked at RT, a state-run news organization based in Moscow since early 2022. With approval from Russia's Presidential Administration, FSB Officer 1 created and led a private intelligence organization comprising employees at RT including Individual A.
Examples posted on X include:
- A purported U.S. constituent replying with President Putin justifying Russia’s actions in Ukraine.
- A purported Minneapolis resident posting about Putin's views on certain geographic areas.
- Another post claiming fewer foreign fighters embedded with Ukrainian forces than estimated.
- The same individual posting about Putin's views on New World Order principles.
To register fictitious accounts, they relied on private email servers using domains seized by FBI: “mlrtr.com” and “otanmail.com.” These actions violate International Emergency Economic Powers Act and federal money laundering laws.
The Justice Department commends private sector coordination including X Corp.'s voluntary suspension of identified accounts prior to governmental action.
The investigation is ongoing with prosecution led by National Security Division’s National Security Cyber Section along with U.S Attorneys' Offices for Arizona and Northern Illinois.