Pakistan Army’s Covert Social Network

Army-linked pages inflamed tensions over India strikes and Kashmir

(Banner by @KaranKanishk / DFRLab)

Individuals linked to the Pakistan Army’s public-relations division ran a network of covert Facebook and Instagram pages, which inflamed tensions over India, pushed Pakistan’s claims over Kashmir, and praised the army itself, until Facebook removed the pages on April 1.

The network of more than 100 pages, accounts and groups represented a significant influence operation, apparently aimed at boosting support for the army inside Pakistan and boosting support for Pakistan abroad.

Facebook shared the names of the 103 pages, groups, and Instagram accounts with the DFRLab shortly before the takedown. They posted in Urdu and English. Some of the pages dated back over seven years; they boasted a combined total of more than 3 million followers by the time they were exposed, although the figure likely includes some degree of redundancy.

In its announcement of the takedown, Facebook wrote:

Although the people behind this activity attempted to conceal their identities, our investigation found that it was linked to employees of the ISPR (Inter-Service Public Relations) of the Pakistani military.

There was insufficient open-source evidence to fully prove that attribution, but the pages certainly pointed users towards Pakistan’s Inter-Services Public Relations service (ISPR), the military’s media wing, and its director general, Major General Asif Ghafoor. Their tone strongly supported Pakistan and attacked India, consistent with ISPR’s behavior.

Praising the Army

The most obvious were the two Facebook pages named “PakistaN Army — the BEST” (both with the same typo) and the Instagram account “armythebest123.”

Home page for @PAKARMYBEST, showing the number of likes and follows (right-hand side of image). (Source: PAKARMYBESTarchive)
Post by @PAKARMYBEST2, showcasing the air force’s capabilities. (Source: @PAKARMYBEST2archive)
Post by @armybest123, showcasing the army’s operational history. (Source: @armybest123archive)

A number of other accounts also focused on the army’s successes, and its importance to the nation.

Focus on ISPR

The pages went beyond generic Army fandom and focused on the efforts of ISPR and Major General Ghafoor, in particular. One page advertised an event which was organized by ISPR on Pakistan Day, March 23, 2018, indicating an interest in ISPR’s activity.

Event shared by “Pakistan Cyber Defence News,” showing the event hosted by ISPR (red box). (Source: @PakistanCyberDefenceNews / archive)

Other assets mentioned ISPR in general…

Post hashtagging ISPR, from Instagram account armythebest123. (Source: @armythebest123archive)

And others mentioned Major General Ghafoor, in particular.

Post by Facebook page “Painter’s Palette,” praising MG Ghafoor. (Source: Painter’s Palettearchive)
Shoutout to MG Ghafoor by Facebook page “PakistaN Army — the BEST,” with his name highlighted (red box). He is pictured on the left, standing next to former Pakistan cricket captain Shahid Afridi. (Source: “PakistaN Army — the BEST” / archive)

The focus on the armed forces’ PR unit, and its director, by multiple accounts in the network, is not enough to confirm Facebook’s attribution to ISPR affiliates, but it is certainly in line with that thesis.

Inflaming About India

The pages were outspoken in their derision for India, especially after a suicide attacker from Indian-administered Kashmir killed 40 Indian police on February 14, and a Pakistan-based Islamist group claimed responsibility. India blamed Pakistan and launched air strikes into Pakistan on February 26; Pakistan denied responsibility, and the following day shot down an Indian fighter, capturing the pilot.

Post by Painter’s Palette characterizing the online conflict from a distinctly one-sided viewpoint. (Source: Painter’s Palettearchive)

Some of the posts again focused on ISPR and Major General Ghafoor, using extreme rhetoric to stigmatize India and the Indian armed forces.

Post by Instagram account @armythebest123, referencing MG Ghafoor calling the Indian army “monkeys.” (Source: @armythebest123archive)

Some of the pages posed as Kashmiri activist groups, and demonized India, sometimes using memes clearly drawn from the same creative model.

Memes posted by “Kashmir for Kashmiris,” left, and “Kashmir News,” right. Note the visual similarities. (Source left: Kashmir for Kashmiris / archive; right: Kashmir Newsarchive)

All told, the aggressively anti-Indian rhetoric, and the repeated references to Major General Ghafoor, are consistent with the Pakistan armed forces’ broader messaging, and with an interest in promoting ISPR specifically.

Praising Pakistan

Other posts were positive about Pakistan more broadly, not only the army. One Facebook page with 103,000 followers, “Beautiful Pakistan,” as the name suggests, largely focused on Pakistan’s natural and architectural beauty.

Posts by “Beautiful Pakistan.” (Source left: Beautiful Pakistan / archive; right: Beautiful Pakistanarchive)

Another, posing as a news outlet in the northern area of Gilgit Baltistan, posted on local topics of interest and pride, such as the first flight to Islamabad piloted by a woman. Gilgit Baltistan occupies a geopolitically sensitive position, as it borders the conflict zone of Kashmir, Afghanistan, and China’s restive province of Xinjiang, the site of a large-scale reported crackdown on the Muslim Uighur population.

Post by “Gilgit Baltistan Times,” on the airline flight. (Source: Gilgit Baltistan Timesarchive)

In between their posts, such accounts also posted more directly patriotic content, including content praising the army. This patriotic content was in the minority, however.

Posts praising the army by “Gilgit Baltistan Times” (left) and “Beautiful Pakistan” (right). (Source left: Gilgit Baltistan Times / archive; right, Beautiful Pakistanarchive)

Old, Established Audiences

The pages’ audience numbers were, in some cases, impressive. The best-performing page was “Pakistan Cyber Defence News,” which registered over 1.6 million followers. The PAKARMYBEST page referenced above counted over 1 million followers.

The Community section of “Pakistan Cyber Defence News,” showing the follower count. (Source: Pakistan Cyber Defence Newsarchive)

The “Pakistan Cyber Defence News” page was created in 2014. Curiously, its unknown administrators first called it the “unofficial” Pakistan Defence page, then the “official” Pakistan Defence page, then simply “Pakistan Defence News.”

Page history for “Pakistan Cyber Defence News,” showing its earlier incarnations. (Source: Pakistan Cyber Defence Newsarchive)

Its “About” section, however, made no mention of any official affiliation, calling itself simply a “fan page.”

“About” section for “Pakistan Cyber Defence News,” with the description highlighted. (Source: Pakistan Cyber Defence Newsarchive)

Other pages in the network also amassed tens or hundreds of thousands of followers over many years. One of the oldest, “Shield Pakistan,” created in 2011, had 60,790 followers by the time it was taken down. Curiously, it was briefly named for a political party, the Pakistan Muslim League — Nawaz (PMLN) before adopting a more generic tone.

History of the “Shield Pakistan” page. (Source: Shield Pakistanarchive)

In other posts, the page was true to the tone of the broader network.

Post by “Shield Pakistan” on the shooting down of an Indian jet earlier this year. (Source: Shield Pakistanarchive)

An even earlier page, “Nuclear for Peace,” created on December 10, 2013, praised Pakistan’s nuclear program, which it described as peaceful, but largely focused on its nuclear weapons. This page had a relatively modest 17,000 followers.

“Community” section for “Nuclear for Peace,” showing the follower count. (Source: Nuclear for Peacearchive)

However, this page last posted in May 2018, suggesting that it had been abandoned by its operators, perhaps in favor of assets which were judged to be more effective.

The latest post by “Nuclear for Peace,” celebrating the day Pakistan unveiled its nuclear arsenal, and posted on May 28, 2018. (Source: Nuclear for Peacearchive)

Groups

The network consisted of six groups, as well as the Facebook and Instagram accounts. Four were taken down before the DFRLab could view them, and the other two were locked, leaving almost no data for research. The rules of one of the groups, “PakistaN Army the Best,” with the same typo as the page mentioned above, and also created in 2011, insisted that “speaking in favour of enemies of Islam and Pakistan is not allowed,” leaving its loyalties and antipathies clear.

“About” section for the group “PakistaN Army(the best)”. (Source: PakistaN Army(the best)archive)

Impact

The pages amassed a considerable following — over 3 million, across all the assets. However, this is only one measure of impact. Many of the individual posts only received a few reactions, measured in likes or shares. This post on Kashmir, for example, had none.

Post on India. Note the lack of reactions. (Source: Kashmir for Kashimirisarchive)

This post on energy cooperation with China had 1,600, a more substantial figure, but only 0.1 percent of the 1.6 million accounts which followed the page. Posts on this page typically scored in the low hundreds or low thousands of reactions.

Post on energy cooperation with China. Note the number of reactions. (Source: Pakistan Cyber Defence Newsarchive)

The follower numbers should not, therefore, be over-interpreted. Some of the accounts gained a considerable following, and did generate some reaction; overall, however, the operation had mixed success, with some pages gaining very little traction at all.

Conclusion

Facebook attributed the pages to ISPR employees. There was insufficient open-source evidence to fully confirm that attribution, but the behavior of the pages in question was wholly in keeping with a military PR agency. The focus on ISPR’s director general was particularly striking in this regard.

The pages and groups very largely followed Pakistan’s strategic narratives: the strength of the Army, India’s weakness and wickedness, national pride, and the claim over all of Kashmir. Most pages and groups promoted these narratives directly; a few were indirect, referencing them between more innocuous posts.

The network is noteworthy for its size, age, and context. Some of the accounts dated back to 2010 and 2011; a couple had hundreds of thousands of followers. Most importantly, they were vocal amplifiers of Pakistan’s narrative during the February showdown between South Asia’s nuclear powers. That narrative was polemic, aggressive, and highly divisive. As such, it contributed to further inflaming regional sentiment between the two nuclear powers.


Ben Nimmo is Senior Fellow for Information Defense at the Atlantic Council’s Digital Forensic Research Lab.

Kanishk Karan is a Digital Forensic Research Associate at the DFRLab.