Category | Details |
---|---|
Threat Actors | GLASSBRIDGE (umbrella group), DRAGONBRIDGE (linked campaigns), Haixun, DURINBRIDGE, Shenzhen Bowen Media |
Campaign Overview | Coordinated influence campaigns leveraging networks of inauthentic news sites and newswire services to amplify pro-PRC narratives. Sites pose as independent media outlets but disseminate politically aligned content. |
Target Regions (or Victims) | Audiences globally, including Australia, Europe (e.g., Germany, France, Spain), Asia (e.g., Taiwan, Japan, Korea), the Americas, and Africa. Content tailored to local audiences in multiple languages (e.g., English, Chinese, French, Thai, German). |
Methodology | – Creation of inauthentic news sites. – Use of PR services (e.g., Times Newswire, World Newswire). – Syndication of content aligned with PRC narratives. – Mixed use of legitimate, plagiarized, and spam content. – Freelancers for social media amplification. |
Product Targeted | – Google News (blocked over 1,000 domains) – Google Discover |
Malware Reference | Not applicable |
Tools Used | Newswire services: Times Newswire, World Newswire. Freelance platforms like Fiverr for social media amplification. |
Vulnerabilities Exploited | Misrepresentation of editorial transparency, lack of disclosure regarding affiliations with PRC narratives. |
TTPs | – Bulk creation of domains. – Syndication of pro-PRC narratives alongside local and filler content. – Ephemeral smear campaigns targeting individuals. – Use of localized content to appear credible. |
Attribution | Likely directed by an undisclosed shared customer (highly aligned with PRC political interests). Firms maintain plausible deniability. |
Recommendations | – Block inauthentic sites from search results (as Google has done). – Increase editorial transparency for news platforms. – Monitor PR firms for activities supporting coordinated influence campaigns. |
Source | Google Threat Intelligence Group |
Read full article: https://cloud.google.com/blog/topics/threat-intelligence/glassbridge-pro-prc-influence-operations?linkId=11813975
Disclaimer: The above summary has been generated by an AI language model
Leave a Reply