Fake Facebook accounts in Sudan shut


Facebook shut down two large networks targeting users in Sudan in recent months, as civilian and military leaders spar over the future of an interim power-sharing arrangement.

The battle for public opinion, much of it online, is intensifying as Sudan reels from economic crisis and a shaky transition to democracy following 30 years under President Omar al-Bashir, ousted in an uprising in 2019.

Facebook said one network’s inauthentic pages it took down was linked to the paramilitary Rapid Support Forces (RSF) and the other was populated with people who researchers, hired by the civilian government, flagged as supporters of Bashir agitating for a military takeover.

This week, hundreds of protesters set up camp outside the presidential palace demanding the military overhaul the cabinet, in what would effectively amount to a coup.

Earlier this month, Facebook shut a network of almost 1 000 accounts and pages with 1.1 million followers run by people the company said were linked to the RSF.

The network boosted RSF official media feeds and other content related to the militia, led by powerful General Mohamed Hamdan Dagalo deputy head of the ruling Sovereign Council and seen by some Sudanese as harbouring political ambitions.

Facebook’s director of threat disruption, David Agranovich, told Reuters the network was identified by the platform’s own internal investigation.

The company said it removed a second network in June, after being tipped off by Valent Projects, an independent research firm hired by Sudan’s Information Ministry to look into activity linked to Bashir loyalists.

Facebook said the network comprised more than 100 accounts and pages and had more than 1.8 million followers.

The Sudanese government efforts to fight what it describes as ex-regime loyalists working to undermine the transition has not previously been reported.

Loyalists were “working systematically to tarnish the image of the government”, the ministry said in a statement to Reuters, referring to social media posts in the network identified by Valent.

In both networks, posts mimicked news media offering skewed coverage of political events, according to Facebook and independent researchers.

Sudanese with internet access – estimated at about 30% of the 45 million population – depend heavily on social media for news.

The military-civilian partnership that replaced now-jailed Bashir in 2019 was pushed to breaking point in recent weeks in the aftermath of what authorities called a failed coup attempt.

Civilian officials accuse Bashir loyalists and the military of stirring up unrest, including in the east of the country where tribal protesters blocked shipping at Port Sudan, exacerbating shortages stemming from a long-running economic crisis.

Military leaders deny the accusations and say they are committed to the transition to democracy.


While Facebook says it uses technical signals on its platform to target groups working to mislead users about their identity, researchers like Valent Projects rely on analysis of content, noting for example when a single post is shared simultaneously by different accounts.

Valent Projects said the network it identified was three times larger than Facebook’s assessment, attracting more than six million followers and growing.

It was active this week, agitating for a military takeover as protesters gathered in central Khartoum and last month in the aftermath of the coup attempt, said Valent Projects representatives.

“It looks like they were trying to give the impression of grassroots support,” said founder and director Amil Khan.

Asked about differing assessments, Facebook’s Agranovich said the company was confident it had shut down the entire network and other accounts Valent identified were not connected.

He said Facebook would continue to monitor any revival of the network.

Some network’s posts say Prime Minister Abdalla Hamdok is not a Muslim and accuse his staff of being paid in dollars, a charge they have denied.

Contributors promote the return of Bashir, jailed on corruption and other charges and wanted by the International Criminal Court on charges of atrocities in the Darfur conflict. Bashir denies all charges.

The network amplified calls for civil disobedience in the east, said Zouhir Al Shimale, Valent Projects’ head of research.

It promoted protests ahead of the June 30 anniversary of the coup which saw Bashir take power in 1989, according to the research firm.

“People in Sudan thought there was going to be a massive demonstration because they saw so much activity,” said Khan, citing a movement called Akhtona (“Get out of the way”) in local Arabic dialect. About 3 500 people showed up.

Contacted by Reuters, three administrators of pages Facebook left running denied being part of a network.

“The ruling bodies today categorise criticism of  oppressive policies and poor economic and political management as being related to the former regime,” said one, who declined to be identified.

The information ministry said it took no legal measures against the pages or administrators. “The Sudanese government is committed to protecting freedom of expression,” it said.

Two takedowns previously announced by Facebook, in December 2020 and May 2021, targeted accounts boosting Dagalo and the RSF, according to researchers at Stanford Internet Observatory and the Atlantic Council’s Digital Forensic Research Lab.

In both networks Facebook found links to the Russian Internet Research Agency (IRA), the officially defunct group accused of meddling in the 2016 US elections.

Anna Bogacheva, who the US accuses of carrying out IRA operations to interfere with elections and political processes, declined to answer questions.

Agranovich said the most recently targeted network linked to RSF did not reveal foreign links and appeared part of a growing trend of domestic influence operations.