Internet Research Agency
The Internet Research Agency, also known as Glavset and known in Russian Internet slang as the Trolls from Olgino, is a Russian company engaged in online influence operations on behalf of Russian business and political interests. It is linked to Russian oligarch Yevgeny Prigozhin and based in Saint Petersburg.
The January 2017 report issued by the United States Intelligence Community – Assessing Russian Activities and Intentions in Recent US Elections – described the Agency as a troll farm: "The likely financier of the so-called Internet Research Agency of professional trolls located in Saint Petersburg is a close ally of Putin with ties to Russian intelligence," commenting that "they previously were devoted to supporting Russian actions in Ukraine— started to advocate for President-elect Trump as early as December 2015."
The agency has employed fake accounts registered on major social networking sites, discussion boards, online newspaper sites, and video hosting services to promote the Kremlin's interests in domestic and foreign policy including Ukraine and the Middle East as well as attempting to influence the 2016 United States presidential election. More than 1,000 employees reportedly worked in a single building of the agency in 2015.
The extent to which a Russian agency has tried to influence public opinion using social media became better known after a June 2014 BuzzFeed News article greatly expanded on government documents published by hackers earlier that year. The Internet Research Agency gained more attention by June 2015, when one of its offices was reported as having data from fake accounts used for biased Internet trolling. Subsequently, there were news reports of individuals receiving monetary compensation for performing these tasks.
On 16 February 2018, a United States grand jury indicted 13 Russian nationals and 3 Russian entities, including the Internet Research Agency, on charges of violating criminal laws with the intent to interfere "with U.S. elections and political processes", according to the Justice Department. In July 2020, President Trump revealed that he approved a cyberattack against the organization in 2018 that disrupted or shut down its operations.
Origin
The company was founded in mid-2013. In 2013, Novaya Gazeta newspaper reported that Internet Research Agency Ltd's office was in Olgino, a historic district of Saint Petersburg.The terms "Trolls from Olgino" and "Olgino's trolls" have become general terms denoting trolls who spread pro-Russian propaganda, not only necessarily those based at the office in Olgino.
Organizers
Strategic
Russian newspaper Vedomosti links the approved-by-Russian-authorities strategy of public consciousness manipulation through new media to Vyacheslav Volodin, first deputy of the Vladimir Putin Presidential Administration of Russia.Tactical
Journalists have written that Alexey Soskovets, who had participated in the Russian youth political community, was directly connected to the office in Olgino, and that his company, North-Western Service Agency, won 17 or 18 contracts for organizing celebrations, forums and sport competitions for authorities of Saint Petersburg and that Soskovets' company was the only participant in half of those bids. In mid-2013 the agency won a tender for providing freight services for participants of Seliger camp.In 2014, according to Russian media, Internet Research Ltd. was founded in March 2014, joined IRA's activity. The newspaper Novaya Gazeta reported that this company is a successor of Internet Research Agency Ltd. Internet Research Ltd. is considered to be linked to Yevgeny Prigozhin, head of the holding company Concord Management and Consulting. The "Trolls of Olgino" are considered to be his project. As of October 2014, the company belonged to Mikhail Bystrov, who had been the head of the police station at Moscow district of Saint Petersburg.
Russian media point out that according to documents, published by hackers from Anonymous International, Concord Management is directly involved with trolling administration through the agency. Researchers cite e-mail correspondence, in which Concord Management gives instructions to trolls and receives reports on accomplished work. According to journalists, Concord Management organized banquets in the Kremlin and also cooperated with Voentorg and the Russian Ministry of Defence.
Despite links to Alexei Soskovets, Nadejda Orlova, deputy head of the Committee for Youth Policy in Saint Petersburg, disputed a connection between her institution and the trolling offices.
Finnish journalist Jessikka Aro, who reported extensively on the pro-Russian trolling activities in Finland, was targeted by an organized campaign of hate, disinformation and harassment.
Offices
Saint Petersburg
2013: 131 Primorskoye Shosse, Olgino, Saint Petersburg
As reported by Novaya Gazeta, in the end of August 2013, the following message appeared in social networks: "Internet operators wanted! Job at chic office in Olgino!!!, salary 25960 per month. Task: posting comments at profile sites in the Internet, writing thematic posts, blogs, social networks. Reports via screenshots. Individual schedule Payment every week, 1180 per shift. PAYMENTS EVERY WEEK AND FREE MEALS!!! Official job placement or according to contract. Tuition possible."As reported by media and former employees, the office in Olgino, Primorskiy district, St. Peterburg had existed and had been functioning since September 2013. It was situated in a white cottage, 15 minutes by an underground railway from Staraya Derevnia station, opposite Olgino railway station. Workplaces for troll-employees were placed in basement rooms.
2014: 55 Ulitsa Savushkina (Street), Saint Petersburg
According to Russian online newspaper :ru:Деловой Петербург|DP.ru, several months before October 2014 the office moved from Olgino to a four-story building at 55 Savushkina Street, Primorskiy district, St. Peterburg. As reported by journalists, the building is officially an uncompleted construction and stayed as such as of March 2015.A New York Times investigative reporter was told that the Internet Research Agency had shortened its name to "Internet Research," and as of June 2015 had been asked to leave the 55 Savushkina Street location "a couple of months ago" because "it was giving the entire building a bad reputation." A possibly related organization, FAN or Federal News Agency, was located in the building. The New York Times article describes various experiences reported by former employees of the Internet Research Agency at the Savushkina Street location. It also describes several disruptive hoaxes in the US and Europe, such as the Columbian Chemicals Plant explosion hoax, that may be attributable to the Internet Research Agency or similar Russian-based organizations.
1 February 2018: Optikov street, 4, building 3, Lakhta-2 business center, Lakhta, Saint Petersburg
Reported by the Russian online newspaper :ru:Деловой Петербург|DP.ru in December 2017, the office moved from the four-story building at 55 Savushkina Street to Lakhta on four floors at, 4 building 3 near in the Lakhta-2 business center on 1 February 2018. Beginning in February 2018, they are also known as the "Lakhta Trolls".Other cities
Novaya Gazeta reported that, according to Alexey Soskovets, head of the office in Olgino, North-Western Service Agency was hiring employees for similar projects in Moscow and other cities in 2013.Work organization
More than 1,000 paid bloggers and commenters reportedly worked only in a single building at Savushkina Street in 2015. Many other employees work remotely. According to BuzzFeed News, more than 600 people were generally employed in the trolls' office earlier, in June 2014. Each commentator has a daily quota of 100 comments.Trolls take shifts writing mainly in blogs on LiveJournal and Vkontakte, about subjects along the propaganda lines assigned. Included among the employees are artists who draw political cartoons. They work for 12 hours every other two days. A blogger's quota is ten posts per shift, each post at least 750 characters. A commenter's norm is 126 comments and two posts per account. Each blogger is in charge of three accounts.
Employees at the Olgino office earned 25,000 Russian rubles per month; those at the Savushkina Street office earned approximately 40,000 Russian rubles. In May 2014, Fontanka.ru described schemes for plundering the federal budget, intended to go toward the trolling organization. In 2017 another whistleblower said that with bonuses and long working hours the salary can reach 80,000 rubles.
An employee interviewed by The Washington Post described the work:
Trolling themes
According to the testimonies of the investigative journalists and former employees of the offices, the main topics for posts included:- Criticism of Alexei Navalny, his sponsors, and Russian opposition in general;
- Criticism of Ukraine's and the United States' foreign policies, and of the top politicians of these states;
- Praise for Vladimir Putin and the policy of the Russian Federation.
- Praise for and defense of Bashar al-Assad.
A 2015 BBC News investigation identified the Olgino factory as the most likely producer of a September 2015 "Saiga 410K review" video where an actor posing as U.S. soldier shoots at a book that turns out to be a Quran, which sparked outrage. BBC News found among other irregularities that the soldier's uniform is not used by the U.S. military and is easily purchased in Russia, and that the actor filmed was most likely a bartender from Saint Petersburg related to a troll factory employee.
The citizen-journalism site Bellingcat identified the team from Olgino as the real authors of a video attributed to the Azov Battalion in which masked soldiers threaten the Netherlands for organizing the referendum on the Ukraine–European Union Association Agreement.
Organized anti-Ukrainian campaign
In the beginning of April 2014 there began an organized online campaign to shift public opinion in the Western world in a way that would be useful for Russian authorities regarding the Russian military intervention in Ukraine in 2014. Hacked and leaked documents from that time contain instructions for commenters posting at the websites of Fox News, The Huffington Post, TheBlaze, Politico, and WorldNetDaily. The requirement for the working hours for the trolls is also mentioned: 50 comments under news articles per day. Each blogger has to manage six accounts on Facebook, post at least three posts every day, and participate twice in the group discussions. Other employees have to manage 10 accounts on Twitter, publishing 50 tweets every day. Journalists concluded that Igor Osadchiy was a probable leader of the project, and the campaign itself was run by Internet Research Agency Ltd. Osadchiy denied his connection to the agency.The company is also one of the main sponsors of an anti-Western exhibition Material Evidence.
In the beginning of 2016, Ukraine's state-owned news agency Ukrinform claimed to expose a system of bots in social networks, which called for violence against the Ukrainian government and for starting "The Third Maidan". They reported that the organizer of this system is the former anti-Ukrainian combatant Sergiy Zhuk from Donbass. He allegedly performed his Internet activity from Vnukovo District in Moscow.
Reactions
Foreign
In March 2014, the Polish edition of Newsweek expressed suspicion that Russia was employing people to "bombard" its website with pro-Russian comments on Ukraine-related articles. Poland's governmental computer emergency response team later confirmed that pro-Russia commentary had flooded Polish Internet portals at the start of the Ukrainian crisis. German-language media websites were also flooded with pro-Russia comments in the spring of 2014.In late May 2014, the hacker group Anonymous International began publishing documents received from hacked emails of Internet Research Agency managers.
In May–June 2014, Internet trolls invaded news media sites and massively posted pro-Russian comments in broken English.
In March 2015 a service enabling censorship of sources of anti-Ukrainian propaganda in social networks inside Ukraine was launched.
The United States Justice Department announced the indictment on 16 February 2018, of the Internet Research Agency while also naming more than a dozen individual suspects who allegedly worked there as part of the special counsel's investigation into criminal interference with the 2016 election.
Assessments
Russian bloggers Anton Nosik, Rustem Adagamov, and Dmitriy Aleshkovskiy have said that paid Internet-trolls don't change public opinion. Their usage is just a way to steal budget money.Leonid Volkov, a politician working for Alexei Navalny's Anti-Corruption Foundation, suggests that the point of sponsoring paid Internet trolling is to make the Internet so distasteful that ordinary people are not willing to participate.
The Columbian Chemicals Plant explosion hoax on 11 September 2014, was the work of Internet Research Agency.
Additional activities of organizers
Based on the documents published by Anonymous International, Concord Management and Consulting was linked to the funding of several media outlets in Ukraine and Russia, including Kharkiv News Agency, News of Neva, Newspaper About Newspapers, Business Dialog, and Journalist Truth.The Columbian Chemicals Plant explosion hoax of 11 September 2014, which claim an explosion at a chemical plant in Centerville, St. Mary Parish, Louisiana, has been attributed in June 2015, by The New York Times Magazine, as "a highly coordinated disinformation campaign" and that the "virtual assault" was the work of the Internet Research Agency.
Three months later, the same accounts posted false messages on Twitter about an Ebola outbreak in Atlanta under the keyword #EbolaInAtlanta, quickly relayed and picked up by users living in the city. A video was then posted on YouTube, showing a medical team treating an alleged Ebola victim at Atlanta Airport. On the same day, a different group launched a rumor on Twitter under the keyword #shockingmurderinatlanta, reporting the death of a disarmed black woman shot by police. Again, a blurry and poorly filmed video is broadcast to support the rumor.
Between July 2014 and September 2017, the IRA used bots and trolls on Twitter to sow discord about the safety of vaccines. The campaign used sophisticated Twitter bots to amplify highly polarizing pro-vaccine and anti-vaccine messages containing the hashtag #VaccinateUS.
In September 2017 Facebook said that ads had been "geographically targeted". Facebook revealed that during the 2016 United States presidential election, IRA had purchased advertisements on the website for US$100,000, 25% of which were geographically targeted to the U.S. Facebook's chief security officer said that the ads "appeared to focus on amplifying divisive social and political messages across the ideological spectrum".
According to a 17 October 2017 BuzzFeed News report, IRA duped American activists into taking real action via protests and self-defense training in what would seem to be a further attempt to exploit racial grievances.
On 16 February 2018, the Internet Research Agency, along with 13 Russian individuals and two other Russian organizations, was indicted following an investigation by Special Counsel Robert Mueller with charges stemming from "impairing, obstructing, and defeating the lawful functions of government."
On 23 March 2018, The Daily Beast revealed new details about IRA gathered from leaked internal documents, which showed that IRA used Reddit and Tumblr as part of its influence campaign. On the same day, Tumblr announced that they had banned 84 accounts linked to IRA, saying that they had spread misinformation through conventional postings rather than advertisements.
In October 2018 the US Justice Department filed charges against Russian accountant Elena Khusyaynova for working with the IRA to influence not only the 2016 elections but also the upcoming 2018 midterm elections.
Rallies and protests organized by IRA in the United States
On 4 April 2016, a rally in Buffalo, New York, protested the death of India Cummings, a black woman who had recently died in police custody. IRA's "Blacktivist" Facebook account actively promoted the event and reached out directly to local activists on Facebook Messenger asking them to circulate petitions and print. "Blacktivist" supplied the petitions and poster artwork.On 16 April 2016, a rally protesting the death of Freddie Gray attracted large crowds in Baltimore. IRA's "Blacktivist" Facebook group promoted and organized the event, including reaching out to local activists.
On 23 April 2016, a small group of white-power demonstrators held a rally they called "Rock Stone Mountain" at Stone Mountain Park near Stone Mountain, Georgia. They were confronted by a large group of anti-racist counterprotestors, and some violent clashes ensued. The protest was heavily promoted by IRA accounts on Tumblr, Twitter, and Facebook, and the IRA website blackmatters.com. The IRA used its Blacktivist Facebook account to reach out, to no avail, to activist and academic Barbara Williams Emerson, the daughter of Hosea Williams, to help promote the protests. Afterward, RT blamed anti-racists for violence and promoted two videos shot at the event.
On 2 May 2016, a second rally was held in Buffalo, New York, protesting the death of India Cummings. Like the 4 April rally, the event was heavily promoted by IRA's "Blacktivist" Facebook account, including attempted outreach to local activists.
On 21 May 2016, two competing rallies were held in Houston to alternately protest against and defend the recently opened Library of Islamic Knowledge at the Islamic Da'wah Center. The "Stop Islamization of Texas" rally was organized by the Facebook group "Heart of Texas". The posting for the event encouraged participants to bring guns. A spokesman for the group conversed with the Houston Press via email but declined to give a name. The other rally, "Save Islamic Knowledge", was organized by another Facebook group called "United Muslims of America" for the same time and location. Both Facebook groups were later revealed to be IRA accounts.
On 25 May 2016, the Westboro Baptist Church held its annual protest of Lawrence High School graduation ceremonies in Lawrence, Kansas. The "LGBT United" Facebook group organized a counter protest to confront the Westboro Baptist Church protest, including by placing an ad on Facebook and contacting local people. About a dozen counter showed up. Lawrence High School students did not participate in the counter protest because they were skeptical of the counter protest organizers. "LGBT United" was an IRA account that appears to have been created specifically for this event.
"LGBT United" organized a candlelight vigil on 25 June 2016, for the Pulse nightclub shooting victims in Orlando, Florida.
IRA's "Don't Shoot" Facebook group and affiliated "Don't Shoot Us" website tried to organize a protest outside St. Paul, Minnesota police headquarters on 10 July 2016, in response to the 6 July fatal police shooting of Philando Castile. Some local activists became suspicious of the motives behind the event because St. Paul police were not involved in the shooting. Castille had been shot by a St. Anthony police officer in nearby Falcon Heights. Local activists contacted "Don't Shoot." After being pressed on who they were and who supported them, "Don't Shoot" agreed to move the protest to St. Anthony police headquarters. The concerned local activists investigated further and urged not to participate after deciding "Don't Shoot" was a "total troll job." "Don't Shoot" organizers eventually relinquished control of the event to local organizers, who subsequently declined to accept any money offered by "Don't Shoot" to cover expenses.
A Black Lives Matter protest rally was held in Dallas on 10 July 2016. A "Blue Lives Matter" counter protest was held across the street. The "Blue Lives Matter" protest was organized by the "Heart of Texas" Facebook group controlled by IRA.
The Blacktivist Facebook group organized a rally in Chicago to honor Sandra Bland on 16 July 2016, the first anniversary of her death. The rally was held in front of the Chicago Police Department's Homan Square building. They passed around petitions calling for a Civilian Police Accountability Council ordinance.
17 "Florida Goes Trump" rallies were held across Florida on 25 August 2016. The rallies were organized by IRA using their "Being Patriotic" Facebook group and "march_for_trump" Twitter account.
The "SecuredBorders" Facebook group organized the "Citizens before refugees" protest rally on 27 August 2016, at the City Council Chambers in Twin Falls, Idaho. Only a small number of people showed up for the three hour event, most likely because it was Saturday and the Chambers were closed. "SecureBorders" was an IRA account.
The "Safe Space for Muslim Neighborhood" rally was held outside the White House on 3 September 2016. At least 57 people attended the event organized by the IRA's "United Muslims of America" Facebook group.
"BlackMattersUS", an IRA website, recruited activists to participate in protests on the days immediately following 20 September 2016, police shooting of Keith Lamont Scott in Charlotte, North Carolina. The IRA paid for expenses such as microphones and speakers.
The "Miners for Trump" rallies held in Pennsylvania on 2 October 2016, were organized by IRA's "Being Patriotic" Facebook group.
The IRA ran its most popular ad on Facebook on 19 October 2016. The ad was for the IRA's Back the Badge Facebook group and showed a badge with the words "Back the Badge" in front of police lights under the caption "Community of people who support our brave Police Officers."
A large rally was held in Charlotte, North Carolina, on 22 October 2016, protesting the police shooting of Keith Lamont Scott. BlackMattersUS recruited unwitting local activists to organize the rally. BlackMattersUS provided one activist with a bank card to pay for rally expenses.
Anti-Hillary Clinton "Texit" rallies were held across Texas on 5 November 2016. The "Heart of Texas" Facebook group organized the rallies around the theme of Texas seceding from the United States if Hillary Clinton is elected. The group contacted the Texas Nationalist Movement, a secessionist organization, to help with organizing efforts, but they declined to help. Small rallies were held in Dallas, Fort Worth, Austin, and other cities. No one attended the Lubbock rally.
A Trump protest called "Trump is NOT my President" attracted 5,000 to 10,000 in Manhattan on 12 November 2016. Marched from Union Square to Trump Tower. The protest was organized by BlackMattersUS.
The IRA's "United Muslims of America" Facebook group organized the "Make peace, not war!" protest on 3 June 2017, outside Trump Tower in New York City. It is unclear whether anyone attended this protest or instead attended the "March for Truth" affiliated protest held on the same day.
Lawsuit
In May 2015, a trolling company employee Lyudmila Savchuk in Saint Petersburg sued her employer for labor violations, seeking to disclose its activities. Ivan Pavlov from human rights defending initiative Team 29 represented Savchuk, and the defendant "troll-factory" agreed to pay Savchuk her withheld salaries and to restore her job.Savchuk later described extreme psychological pressure at the work place, with jokes circulating among employees that "one can remain sane in the factory for two months maximum", as result of constant switching between different personalities that the workers are expected to design and maintain during work time.
Indictments
On 16 February 2018, 13 individuals were indicted by the Washington, D.C. grand jury for alleged illegal interference in the 2016 presidential elections, during which they strongly supported the candidacy of Donald Trump, according to special counsel Robert Mueller's office. IRA, Concord Management and Concord Catering were also indicted. It was alleged that IRA was controlled by Yevgeny Prigozhin, a wealthy associate of Russian President Vladimir Putin.The indicted individuals are Dzheykhun Nasimi Ogly Aslanov, Anna Vladislavovna Bogacheva, Maria Anatolyevna Bovda, Robert Sergeyevich Bovda, Mikhail Leonidovich Burchik, Mikhail Ivanovich Bystrov, Irina Viktorovna Kaverzina, Aleksandra Yuryevna Krylova, Vadim Vladimirovich Podkopaev, Sergey Pavlovich Polozov, Yevgeny Viktorovich Prigozhin, Gleb Igorevitch Vasilchenko, and Vladimir Venkov. None of the defendants are in custody.
On 15 March, President Trump imposed financial sanctions under the Countering America's Adversaries Through Sanctions Act on the 13 Russian and organizations indicted by Mueller, preventing them from entering the United States to answer the charges should they wish to.
In October 2018 Russian accountant Elena Khusyaynova was charged with interferеnce in the 2016 and 2018 US elections. She is alleged to have been working with the IRA. She was said to have managed a $16 million budget.
Timeline of the Internet Research Agency interference in United States elections
2014
- April: The IRA creates a department called the "translator project". The department's focus is on interfering in the U.S. election.
- May: The IRA begins its election interference campaign of "spread distrust towards the candidates and the political system in general."
- 4–26 June: Aleksandra Krylova and Anna Bogacheva, two IRA employees, travel to the U.S. to collect intelligence. Maria Bovda, a third employee, is denied a visa. All three are indicted in February 2018 for their work on election interference.
- 11 September: The IRA spreads a hoax they created about a fictitious chemical plant fire in Centerville, St. Mary Parish, Louisiana, purportedly started by ISIS. The hoax includes tweets and YouTube videos showing a chemical plant fire. Centerville is home to many chemical plants, but the plant named in the tweets does not exist. Initial tweets are sent directly to politicians, journalists, and Centerville residents.
- 21 September – 11 October: The Material Evidence art exhibition is displayed at the Art Beam gallery in the Chelsea neighborhood of New York City. It portrays the conflicts in Syria and Ukraine in a pro-Russian light. It is promoted by Twitter accounts that also spread the September 11 chemical plant fire hoax. The exhibition is partly funded by the IRA.
- 13 December:
- * The IRA uses Twitter to spread a hoax about an Ebola outbreak in Atlanta. Many of the Twitter accounts used in the September 11 chemical plant fire hoax also spread this hoax. The hoax includes a YouTube video of medical workers wearing hazmat suits.
- * Using a different set of Twitter accounts, the IRA spreads a hoax about a purported police shooting of an unarmed black woman in Atlanta. The hoax includes a blurry video of the purported event.
2015
- July onward: Thousands of fake Twitter accounts run by the IRA begin to praise Trump over his political opponents by a wide margin, according to a later analysis by The Wall Street Journal.
- 3 November:The IRA Instagram account "Stand For Freedom" attempts to organize a confederate rally in Houston, Texas, on 14 November. It is unclear if anyone showed up. The Mueller Report identifies this as the IRA's first attempt to organize a U.S. rally.
- 19 November: The IRA creates the @TEN_GOP Twitter account. Purporting to be the "Unofficial Twitter account of Tennessee Republicans," it peaks at over 100,000 followers.
2016
- 10 February: IRA instructs workers to "use any opportunity to criticize Hillary and the rest."
- April: The IRA starts buying online ads on social media and other sites. The ads support Trump and attack Clinton.
- 4 April: A rally is held in Buffalo, New York, protesting the death of India Cummings. Cummings was a black woman who had recently died in police custody. The IRA's "Blacktivist" account on Facebook actively promotes the event, reaching out directly to local activists on Facebook Messenger asking them to circulate petitions and print posters for the event. Blacktivist supplies the petitions and poster artwork.
- 16 April: A rally protesting the death of Freddie Gray attracts large crowds in Baltimore. The IRA's Blacktivist Facebook group promotes and organizes the event, including reaching out to local activists.
- 19 April: The IRA purchases its first pro-Trump ad through its "Tea Party News" Instagram account. The Instagram ad asks users to upload photos with the hashtag #KIDS4TRU to "make a patriotic team of young Trump supporters."
- 23 April: A small group of white-power demonstrators hold a rally they call "Rock Stone Mountain" at Stone Mountain Park near Stone Mountain, Georgia. They are confronted by a large group of protesters, and some violent clashes ensue. The counterprotest was heavily promoted by IRA accounts on Tumblr, Twitter, and Facebook, and the IRA website blackmatters.com. The IRA uses its Blacktivist account on Facebook to reach out, to no avail, to activist and academic Barbara Williams Emerson, the daughter of Hosea Williams, to help promote the protests. Afterward, RT blames anti-racist protesters for violence and promotes two videos shot at the event.
- 2 May: A second rally is held in Buffalo, New York, protesting the death of India Cummings. Like the 4 April rally, the event is heavily promoted by the IRA's Blacktivist Facebook account, including attempted outreach to local activists.
- 21 May: Two competing rallies are held in Houston to alternately protest against and defend the recently opened Library of Islamic Knowledge at the Islamic Da'wah Center. The "Stop Islamization of Texas" rally is organized by the Facebook group "Heart of Texas". The Facebook posting for the event encourages participants to bring guns. A spokesman for the group converses with the Houston Press via email but declines to give a name. The other rally, "Save Islamic Knowledge", is organized by the Facebook group "United Muslims of America" for the same time and location. Both Facebook groups are later revealed to be IRA accounts.
- 29 May: The IRA hires an American to pose in front of the White House holding a sign that says, "Happy 55th Birthday, Dear Boss." "Boss" is a reference to Russian oligarch Yevgeny Prigozhin.
- 1 June: The IRA plans a Manhattan rally called "March for Trump" and buys Facebook ads promoting the event.
- 4 June: The IRA email account allforusa@yahoo.com sends news releases about the "March for Trump" rally to New York City media outlets.
- 5 June: The IRA contacts a Trump campaign volunteer to provide signs for the "March for Trump" rally.
- 23 June: The IRA persona "Matt Skiber" contacts an American to recruit for the "March for Trump" rally.
- 24 June: The IRA group "United Muslims of America" buys Facebook ads for the "Support Hillary, Save American Muslims" rally.
- 25 June:
- * The IRA's "March for Trump" rally occurs.
- * The IRA Facebook group LGBT United organizes a candlelight vigil for the Pulse nightclub shooting victims in Orlando, Florida.
- July: The IRA's translator project grows to over 80 employees.
- Summer: IRA employees use the stolen identities of four Americans to open PayPal and bank accounts to act as conduits for funding their activities in the United States.
- 5 July: "United Muslims of America", an IRA group, orders posters with fake Clinton quotes promoting Sharia Law. The posters are ordered for the "Support Hillary, Save American Muslims" rally they are organizing.
- 6–10 July: The IRA's "Don't Shoot" Facebook group and affiliated "Don't Shoot Us" website try to organize a protest outside the St. Paul, Minnesota, police headquarters on 10 July in response to the 6 July fatal police shooting of Philando Castile. Some local activists become suspicious of the event because St. Paul police were not involved in the shooting: Castile was shot by a St. Anthony police officer in nearby Falcon Heights. Local activists contact Don't Shoot. After being pressed on who they are and who supports them, Don't Shoot agrees to move the protest to the St. Anthony police headquarters. The concerned local activists investigate further and urge protesters not to participate after deciding Don't Shoot is a "total troll job." Don't Shoot organizers eventually relinquish control of the event to local organizers, who subsequently decline to accept any money from Don't Shoot.
- 9 July: The "Support Hillary, Save American Muslims" rally occurs in Washington, D.C. The rally is organized by the IRA group "United Muslims of America."
- 10 July: A Black Lives Matter protest rally is held in Dallas. A "Blue Lives Matter" counterprotest is held across the street. The Blue Lives Matter protest is organized by the "Heart of Texas" Facebook group, controlled by the IRA.
- 12 July: An IRA group buys ads on Facebook for the "Down with Hillary" rally in New York City.
- 16 July: The IRA's Blacktivist group organizes a rally in Chicago to honor Sandra Bland on the first anniversary of her death. The rally is held in front of the Chicago Police Department's Homan Square building. Participants pass around petitions calling for a Civilian Police Accountability Council ordinance.
- 23 July: The IRA-organized "Down with Hillary" rally is held in New York City. The agency sends 30 news releases to media outlets using the email address joshmilton024@gmail.com.
- 2–3 August: The IRA's "Matt Skiber" persona contacts the real "Florida for Trump" Facebook account. The "T.W." persona contacts other grassroots groups.
- 4 August:
- * The IRA's Facebook account "Stop AI" accuses Clinton of voter fraud during the Iowa Caucuses. They buy ads promoting the post.
- * IRA groups buy ads for the "Florida Goes Trump" rallies. The 8,300 people who click on the ads are sent to the Agency's "Being Patriotic" Facebook page.
- 5 August: The IRA Twitter account @March_For_Trump hires an actress to play Hillary Clinton in prison garb and someone to build a cage to hold the actress. The actress and cage are to appear at the "Florida Goes Trump" rally in West Palm Beach, Florida on 20 August.
- 11 August: The IRA Twitter account @TEN_GOP claims that voter fraud is being investigated in North Carolina.
- 12–18 August: The IRA's persona "Josh Milton" communicates with Trump Campaign officials via email to request Trump/Pence signs and the phone numbers of campaign affiliates as part of an effort to organize pro-Trump campaign rallies in Florida.
- 15 August: A Trump campaign county chair contacts the IRA through their phony email accounts to suggest locations for rallies.
- 16 August: The IRA buys ads on Instagram for the "Florida Goes Trump" rallies.
- 18 August:
- * The IRA uses its joshmilton024@gmail.com email account to contact a Trump campaign official in Florida. The email requests campaign support at the forthcoming "Florida Goes Trump" rallies. It is unknown whether the campaign official responded.
- * The IRA pays the person they hired to build a cage for a "Florida Goes Trump" rally in West Palm Beach, Florida.
- 19 August:
- * A Trump supporter suggests to the IRA Twitter account "March for Trump" that it contact a Trump campaign official. The official is emailed by the agency's joshmilton024@gmail.com account.
- * The IRA's "Matt Skiber" persona contacts another Trump campaign official on Facebook.
- 20 August: 17 "Florida Goes Trump" rallies are held across Florida. The rallies are organized by Russian trolls from the IRA.
- 27 August: The IRA Facebook group "SecuredBorders" organizes a "Citizens before refugees" protest rally at the City Council Chambers in Twin Falls, Idaho. Only a small number of people show up for the three-hour event, most likely because it is Saturday and the Chambers are closed.
- 31 August:
- * An American contacts the IRA's "Being Patriotic" account about a possible 11 September event in Miami.
- * The IRA buys ads for a 11 September rally in New York City.
- 3 September: The IRA Facebook group "United Muslims of America" organizes a "Safe Space for Muslim Neighborhood" rally outside the White House, attracting at least 57 people.
- 9 September: The IRA sends money to its American groups to fund the 11 September rally in Miami, and to pay the actress who portrayed Clinton at the West Palm Beach, Florida, rally.
- 20–26 September: BlackMattersUS, an IRA website, recruits activists to participate in protests over the police shooting of Keith Lamont Scott in Charlotte, North Carolina. The IRA pays for expenses such as microphones and speakers.
- 22 September: The IRA buys ads on Facebook for "Miners for Trump" rallies in Pennsylvania.
- 2 October: "Miners for Trump" rallies are held across Pennsylvania. The IRA uses the same techniques to organize the rallies as they used for the "Florida Goes Trump" rallies, including hiring a person to wear a Clinton mask and a prison uniform.
- 16 October: The IRA's Instagram account "Woke Blacks" makes a post aimed at suppressing black voter turnout.
- 19 October The IRA runs its most popular ad on Facebook. The ad is for the IRA's Back the Badge Facebook group and shows a badge with the words "Back the Badge" in front of police lights under the caption "Community of people who support our brave Police Officers."
- 22 October: A large rally is held in Charlotte, North Carolina, protesting the police shooting of Keith Lamont Scott. The IRA website BlackMattersUS recruits unwitting local activists to organize the rally. BlackMattersUS provides an activist with a bank card to pay for rally expenses.
- 2 November: The IRA Twitter account @TEN_GOP alleges "#VoterFraud by counting tens of thousands of ineligible mail in Hillary votes being reported in Broward County, Florida." Trump Jr. retweets it.
- 3 November: The IRA Instagram account "Blacktivist" suggests people vote for Stein instead of Clinton.
- 5 November: Anti-Clinton "Texit" rallies are held across Texas. The IRA's "Heart of Texas" Facebook group organizes the rallies around the theme of Texas seceding from the United States if Clinton is elected. The group contacts the Texas Nationalist Movement, a secessionist organization, to help with organizing efforts, but they decline to help. Small rallies are held in Dallas, Fort Worth, Austin, and other cities. No one attends the Lubbock rally.
- 8 November: Hours after the polls close, the hashtag #Calexit is retweeted by thousands of IRA accounts.
- 11 November: A large banner is hung from the Arlington Memorial Bridge in Washington, D.C., showing a photo of Obama with the words "Goodbye Murderer" at the bottom. The IRA Twitter account @LeroyLovesUSA takes credit and is an early promoter of the banner.
- 12 November: A Trump protest called "Trump is NOT my President" attracts 5,000–10,000 protestors in Manhattan who march from Union Square to Trump Tower. The protest is organized by the IRA using their BlackMattersUS Facebook account.
- 19 November: The IRA organizes the "Charlotte Against Trump" rally in Charlotte, North Carolina.
- 8 December': The IRA runs an ad on Craigslist to hire someone to walk around New York City dressed as Santa Claus while wearing a Trump mask.
2017
- 9 April: The Internet Research Agency's "United Muslims of America" Facebook group posts a meme complaining about the cost of the 6 April missile strike on Syria by the United States. The strike had been made in retaliation for a chemical weapons attack by the Syrian government. The meme asserts the $93 million cost of the strike "could have founded Meals on Wheels until 2029."
- 3 June: The IRA's "United Muslims of America" Facebook group organizes the "Make peace, not war!" protest outside Trump Tower in New York City. It is unclear whether anyone attends this protest or instead attends the "March for Truth" affiliated protest held on the same day.
- * Thousands of people participate in the "Protest Trump and ideology of hate at Trump Tower!" protest outside Trump Tower in New York City. The protest was organized by the "Resisters" group on Facebook, one of the "bad actor" groups identified by Facebook in July 2018 as possibly belonging to the IRA.
- 23 August: The Internet Research Agency's @TEN_GOP Twitter account is closed.
- 6 September: Facebook admits selling advertisements to Russian companies seeking to reach U.S. voters. Hundreds of accounts were reportedly tied to the Internet Research Agency. Facebook pledges full cooperation with Mueller's investigation, and begins to provide details on purchases from Russia, including identities of the people involved.
- 9 September: Thousand of people participate in the "We Stand with DREAMers! Support DACA!" rally in New York City. The rally was organized by the "Resisters" group on Facebook, one of the "bad actor" groups identified by Facebook in July 2018 as possibly belonging to the IRA.
- 9 September: Trump responds to a tweet from @10_gop, the "backup" account for the now-closed IRA account @TEN_GOP, saying, "THANK YOU for your support Miami! My team just shared photos from your TRUMP SIGN WAVING DAY, yesterday! I love you- and there is no question - TOGETHER, WE WILL MAKE AMERICA GREAT AGAIN!" The response is to an @10_gop tweet that simply reads "we love you Mr. President."
- 28 September:
- * Twitter announces that it identified 201 non-bot accounts tied to the IRA.
- * Democrats rebuke Twitter for its "frankly inadequate" response to Russian meddling.
- * Mother Jones writes that "fake news on Twitter flooded swing states that helped Trump win."
- 23 October: The Daily Beast reports that Greenfloid LLC, a tiny web hosting company registered to Sergey Kashyrin and two others, hosted IRA propaganda websites DoNotShoot.Us, BlackMattersUS.com and others on servers in a Staten Island neighborhood. Greenfloid is listed as the North American subsidiary of ITL, a hosting company based in Kharkiv, Ukraine, registered to Dmitry Deineka. Deineka gave conflicting answers when questioned by The Daily Beast about the IRA websites.
- 1 November: Twitter tells the Senate Intelligence Committee that it has found 2,752 IRA accounts and 36,746 Russia-linked bot accounts involved in election-related retweets.
2018
- 16 February: Mueller indicts 13 Russian citizens, IRA/Glavset and two other Russian entities in a 37-page indictment returned by a federal grand jury in the District of Columbia.
- A 15 July Business Insider article revealed a new Russian intelligence-linked "news" site, USAReally, which follows in the footsteps of previous Russian IRA-backed troll farms, and appears to be an attempt to "test the waters" ahead of the mid-terms.
- 31 July: Facebook announces they have shut down eight pages, 17 profiles, and seven Instagram accounts related to "bad actors" identified recently with activity profiles similar to the IRA. The company says it doesn't have enough information to attribute the accounts, groups, and events to the IRA, but that a known IRA account was briefly an administrator of the "Resisters" group. The "Resisters" group was the first organizer on Facebook of the upcoming "No Unite The Right 2 - DC" protest scheduled in Washington, D.C., for 10 August. Some of the event's other organizers insist they started organizing before "Resisters" created the event's Facebook page.
- 25 September: The New York Times reports that the Moscow-based news website "USAReally.com" appears to be a continuation of the IRA's fake news propaganda efforts targeting Americans. The site, launched in May, has been banned from Facebook, Twitter, and Reddit. A new Facebook page created by the site is being monitored by Facebook.
- 12 September: The Wall Street Journal reports that nearly 600 IRA Twitter accounts posted nearly 10,000 mostly conservative-targeted messages about health policy and Obamacare from 2014 through May 2018. Pro-ObamaCare messages peaked around the spring of 2016 when Senator Bernie Sanders and Hillary Clinton were fighting for the Democratic Party presidential nomination. Anti-Obamacare messages peaked during the debates leading up to the attempted repeal of the Affordable Care Act in the spring of 2017.
- On 19 October, The US Justice Department charges 44-year old Russian accountant Elena Alekseevna Khusyaynova of Saint Petersburg with conspiracy to defraud the United States by managing the finances of the social media troll operation, including the IRA, that attempted to interfere with the 2016 and 2018 US elections.
- 20 November: The Federal Agency of News sues Facebook in the U.S. District Court for the Northern District of California for violating its free speech rights by closing its account in April. The FAN is a sister organization to the IRA that operates from the same building in St. Petersburg. The FAN claims in its filing that it has no knowledge of the IRA, even though some current FAN employees were indicted by Mueller for their work with the IRA.
2019
- 12 April: The Washington Post reports that researchers at Clemson University found the IRA sent thousands of tweets during the 2016 election campaign in an attempt to drive Bernie Sanders supporters away from Hillary Clinton and towards Donald Trump.
2020
- 12 March: CNN's Clarissa Ward reveals that Russia and the IRA have been running “troll factories” based in Nigeria and Ghana, with the aim to disrupt the 2020 presidential campaign.