Secrets investigate origin of disinformation on blackout
The Information and Security Service (SIS) is trying to investigate the origin of the message that circulated through WhatsApp and by social networks less than an hour after the start of the blackout that hit Portugal and Spain and, simulating news from CNN International, attributed responsibility for breaking energy to groups of Russian hackers supported by Moscow. According to the sources contacted by the sunrise, the fact that the text was elaborated, with statements by protagonists who gave it great credibility, and the detail of being placed to circulate so quickly can indicate some preparation. The clarification of the origin may be relevant to ascertain whether the message will be part of any wider disinformation campaign in the context of war in Ukraine.
«The text began to be shared quickly on WhatsApp and social networks. From Brussels there were no nominations of anything, ”he recalls the Sol Source of the Secrets that asked for anonymity. «Now we have to do the historical reconstitution to see if we discover the origin. On social networks, like X, it is possible to do the reverse route. In WhatsApp it is more difficult, but we are trying, ”he says.
With the war in Ukraine as a background, it is known that both sides of the conflict have tried to flood the media universe with misinformation campaigns to influence public opinions.
The clarification of the origin of the message gains importance in this context. And it is up to the secrets for integrating into what is classified as a « hybrid threat. » “The investigation is from those who analyze the threat, the services. At supranational level it can also be done by Europol, for example, as it involves the president of the European Commission. Always at the level of the threat against the state, ”says a source of security services.
The fake news text, which in a first version circulated in English and later in Brazil, simulated news from CNN International reporting a wave of unrecorded cyber attacks on infrastructures to over 15 European countries, reporting that the main suspects would be Russian hackers. In this false news, the president of the European Commission was quoted saying that it was « a direct attack on European sovereignty » that would have response. Kremlin was also quoted as denying the accusations. Finally, the text reported Russian military movements in the North Atlantic.
At a time when there was no information on what was going on, the message circulated by a countless number of accounts and groups on WhatsApp and social networks. He arrived at the Prime Minister’s own office that tried to clarify the origin with those responsible for CNN Portugal. «I received calls from the government to try to realize what that was. Then, although the communications were becoming increasingly difficult, I realized that it was being much shared and thought it should go to the antenna to clarify that it was false, ”says CNN Portugal director Nuno Santos.
If the secretary analysis reaches any conclusion, it may later give rise to a crime inquiry. “In this context it will then have a formal request to the goal, owner of WhatsApp, to track the origin of the message. Manually it is not impossible, but it is impractical, ”says a researcher with extensive experience in combating cybercriminality.
«We currently have two large conflict blocks. The Western, with democratic countries, and the other. Cooperation for misinformation by elements living in the western block with the other exists. There are supporters who act in the name of state actors. It is important to clarify the theme », assumes.