For one, researchers found that the activity seemed to follow the central European workday, with posts picking up after 9 a.m., slowing down at the end of the day, and with a noticeable pause at lunch time. Facebook, however, said it did not find evidence of people being paid.
“Even trolls need to eat,” said Ben Nimmo, who works on Facebook’s global threat intelligence investigations, on a conference call with reporters Tuesday.
The National Council for Resistance in Iran, an umbrella group that includes MEK, said in a statement that that no accounts affiliated with it or MEK have been removed. The group also denied the existence of an Albanian troll farm affiliated with MEK.
MEK is a leading group opposing the Iranian government. It killed Americans before the 1979 Islamic Revolution and was labeled as a terrorist organization by the State Department until 2012. Nevertheless, U.S. politicians from both parties including Rudy Giuliani and Newt Gingrich have given paid speeches to MEK in the past.
The network of fake accounts was most active in 2017 and again in late 2020, Facebook said. In all, more than 300 accounts, pages and groups on Facebook and Instagram were removed as part of the company's action. Around 112,000 people followed one or more of the Instagram accounts.
In some cases, the fake accounts used photos of Iranian celebrities or deceased dissidents. A small number of the more recent Instagram accounts appear to have used profile pictures that were computer generated.