A sophisticated Iranian-backed psychological operation is targeting Israeli social media users by leveraging artificial intelligence and coordinated disinformation campaigns.
Researchers from the Foundation for Defense of Democracies (FDD) have uncovered the details of this influence operation, which aims to demoralize the Israeli public by flooding X (formerly Twitter) with posts from fake accounts posing as Israelis.
Coordinated Disinformation via Telegram
At the operation’s center is a Persian-language Telegram channel called “CAR ONLINE” (@caronline_original), which boasts over 400,000 subscribers.
The channel systematically instructs its followers on creating deceptive X accounts designed to mimic Israelis.
Subscribers are provided with detailed technical guidance, including how to use generative AI tools like ChatGPT to translate messages from Persian into Hebrew, and how to select authentic-sounding Hebrew and non-Hebrew usernames.
CAR ONLINE also supplies a curated list of 50 demoralizing phrases in Persian, with explicit directions to paraphrase them in order to evade detection by X’s automated moderation systems.
Examples of these psychological warfare messages include expressions of despair and defeat, such as “I’m tired, God save us,” and apocalyptic warnings about urban destruction.
The Telegram channel further demonstrates the operation’s sophistication by not only disseminating templates but also sharing step-by-step guides on account creation and subsequent engagement on X.
CAR ONLINE actively promotes the impact of successful coordinated efforts, highlighting posts that have achieved significant reach.
The channel claims that around 60,000 individuals have participated in the campaign, although FDD notes that this figure remains unverified.
Indicators of Iranian Involvement
Multiple technical and operational indicators point towards an Iranian origin for CAR ONLINE.
On June 20, its Telegram account shared links to EITAA, an Iranian alternative to Telegram, and referenced a website (caronlineofficial[.]com) hosted on Iranian servers.
CAR ONLINE’s presence is not limited to Telegram; the operation appears to run parallel accounts on Western social media platforms, including an X profile (@caronlineX) and Instagram.
Furthermore, both the Telegram and Instagram accounts are linked to the same Iranian telephone number, reinforcing the attribution to Iranian actors.
According to the Report, This campaign is reminiscent of previous Iranian influence operations observed by FDD.
Notably, during the 2024 U.S. elections, a Telegram account titled “Revolutionary Twitter – X” (@twtenghelabi) orchestrated similar crowdsourced disinformation strategies across X, indicating a recurring modus operandi within Iranian information operations.
The CAR ONLINE operation exemplifies the growing threat posed by malign influence networks adept at using AI and social media to sow discord and manipulate public sentiment.
Western social media companies such as X and Meta, alongside AI leaders like OpenAI, are under increasing pressure to identify and disrupt such campaigns.
Traditional automated detection systems, which rely on identifying patterns such as synchronized posting or identical content, are insufficient against adversaries who deliberately diversify their tactics and language to avoid moderation.
FDD emphasizes the necessity for deep network investigations that extend beyond algorithmic monitoring.
Unmasking the actors behind these complex, multi-platform psychological operations will require dedicated analytical resources and international collaboration.
Unless confronted, such operations threaten to undermine public morale and distort online discourse across global democracies.
Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant updates