Summary:
This article discusses GLASSBRIDGE, a network of companies operating inauthentic news sites that promote narratives aligned with the People’s Republic of China (PRC). These firms create numerous domains masquerading as independent news outlets, disseminating misleading content globally. Google has blocked over a thousand such sites for violating its policies. The article highlights the tactics used by these PR firms to obscure their influence and the implications for information integrity.
#InauthenticNews #PRCInfluence #InformationOperations
This article discusses GLASSBRIDGE, a network of companies operating inauthentic news sites that promote narratives aligned with the People’s Republic of China (PRC). These firms create numerous domains masquerading as independent news outlets, disseminating misleading content globally. Google has blocked over a thousand such sites for violating its policies. The article highlights the tactics used by these PR firms to obscure their influence and the implications for information integrity.
#InauthenticNews #PRCInfluence #InformationOperations
Keypoints:
GLASSBRIDGE is a collective of four firms operating networks of inauthentic news sites.
These sites publish content aligned with the political interests of the PRC.
Google has blocked over a thousand GLASSBRIDGE-operated websites from appearing in Google News.
The firms create numerous domains to target audiences outside the PRC, including various countries worldwide.
Shanghai Haixun Technology is identified as the most prolific firm in these operations.
Haixun uses newswire services to place pro-PRC content on legitimate news subdomains.
Times Newswire and Shenzhen Haimai Yunxiang Media are involved in distributing pro-PRC content.
DURINBRIDGE operates over 200 sites that appear as independent media but include pro-PRC narratives.
Shenzhen Bowen Media operates over 100 domains with localized content promoting PRC interests.
The article emphasizes the need for information transparency and ongoing tracking of these operations by Google.
MITRE Techniques:
Command and Control (T1071): Utilizes multiple command and control domains to maintain communication with compromised systems.
Impersonation (T1583): Operates inauthentic news sites to impersonate legitimate news outlets.
Content Manipulation (T1491): Distributes misleading narratives through bulk-created domains.
Social Media Manipulation (T1496): Engages freelance services to promote pro-PRC content on social media.
IoC:
[domain] glassbridge[.]com
[domain] haixun[.]com
[domain] timesnewswire[.]com
[domain] shenzhenbowen[.]com
[url] worldnewswire[.]com
[url] dragonbridge[.]com
Full Research: https://cloud.google.com/blog/topics/threat-intelligence/glassbridge-pro-prc-influence-operations/