Bellingcat @bellingcat Award-winning open source investigation. Want to donate? See here: Aug. 01, 2019 1 min read

Today, Facebook announced that it removed accounts, pages and groups associated with two covert influence operations -- one originating in the UAE and Egypt and the other in Saudi Arabia. 

Facebook benefited from our recent report (written by @al_b33lz3bub) on Saud al-Qahtani, MBS's right hand man and Saudi Arabia's cybersecurity chief. 

In its press release, Facebook didn't tell us how @b33lz3bub's report tipped them off, but our report did identify a fake Facebook account used by al-Qahtani.

al-Qahtani has been actively, and publicly (under pseudonyms), sought to produce waves of inauthentic interactions on Facebook since at least 2011.

al-Qahtani is also a very, very petty man with way too much money to spend. On a message board, he was asking around how he could kick players from a Facebook game called "War Commander". He was offering $500 to boot people he didn't like from the game. He's MBS's right-hand man!

In his report, @al_b33lz3bub identified more than two dozen domains registered by al-Qahtani. One of them, saudqq[.]com, was used for malware and other malicious activity. It also had subdomains referencing Facebook and other social media platforms.

You can follow @bellingcat.


Tip: mention @threader_app on a Twitter thread with the keyword “compile” to get a link to it.

Enjoy Threader? Sign up.