Bellingcat @bellingcat Award-winning open source investigation. Want to donate? See here: Aug. 01, 2019 1 min read

Today, Facebook announced that it removed accounts, pages and groups associated with two covert influence operations -- one originating in the UAE and Egypt and the other in Saudi Arabia. 

Facebook benefited from our recent report (written by @al_b33lz3bub) on Saud al-Qahtani, MBS's right hand man and Saudi Arabia's cybersecurity chief. 

In its press release, Facebook didn't tell us how @b33lz3bub's report tipped them off, but our report did identify a fake Facebook account used by al-Qahtani.

al-Qahtani has been actively, and publicly (under pseudonyms), sought to produce waves of inauthentic interactions on Facebook since at least 2011.

al-Qahtani is also a very, very petty man with way too much money to spend. On a message board, he was asking around how he could kick players from a Facebook game called "War Commander". He was offering $500 to boot people he didn't like from the game. He's MBS's right-hand man!

In his report, @al_b33lz3bub identified more than two dozen domains registered by al-Qahtani. One of them, saudqq[.]com, was used for malware and other malicious activity. It also had subdomains referencing Facebook and other social media platforms.

You can follow @bellingcat.


Tip: mention @threader_app on a Twitter thread with the keyword “compile” to get a link to it.

Enjoy Threader? Sign up.

Threader is an independent project created by only two developers. The site gets 500,000+ visits a month and our iOS Twitter client was featured as an App of the Day by Apple. Running this space is expensive and time consuming. If you find Threader useful, please consider supporting us to make it a sustainable project.