'Think about that… twice': Tracking Coordinated Inauthentic Behaviour on Lithuanian social media

Cyber & Information WarfareInformation OperationsPropaganda & disinformation campaigns

Aggressor

Summary

In April 2022, a widely amplified pro-Kremlin disinformation video on Lithuanian Facebook page Minfo.lt showed coordinated inauthentic behaviour with suspicious accounts and artificial boosting spreading false narratives about Russia and Ukraine following the Bucha massacre.

On April 5, 2022, shortly after global exposure of the Bucha massacre, Minfo.lt's Facebook page posted a video by Russian wellness influencer Artur Sita, which quickly amassed over 1.5 million views and 121,000 interactions, becoming vastly more popular than any other content on the page. A detailed analysis by Debunk.org uncovered clear signs of coordinated inauthentic behaviour, including a third of comments (1622) by 484 users using repeated images and GIFs, multiple rapid successive comments from locked or minimally active profiles, and major participation from Russian-speaking accounts despite Minfo's Lithuanian audience. The post was shared 145 times in 130 public groups, mostly outside Lithuania (Ukraine, Russia, Moldova, Kazakhstan). Suspicious accounts shared the video multiple times in seconds, with content shifts highlighting anti-USA propaganda. The disinformation campaign reinforced Kremlin narratives absolving Russia from blame for the war and propagated ontological skepticism about truth to sow confusion among various audiences. This coordinated operation appears designed to mitigate the damaging effect of the Bucha massacre images on Kremlin narratives by flooding social media with manipulative content, supported by accounts with signs of bot-like behaviour, sock puppetry, and across multiple platforms.

Classification

Confidence: High

The event clearly describes a discrete pro-Kremlin coordinated inauthentic behaviour disinformation campaign targeting Lithuanian social media analyzed by credible sources. No defensive measures are discussed in the source.

Source URL

https://debunk.org/think-about-that-twice-tracking-coordinated-inauthentic-behaviour-on-lithuanian-social-media

Open source

Provenance

Publisher: extension
Submitted: Mar 11, 2026, 12:09 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Apr 5, 2022, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "77459e0d-9723-4c44-a099-f6ba91f6bedf",
  "url": "https://debunk.org/think-about-that-twice-tracking-coordinated-inauthentic-behaviour-on-lithuanian-social-media",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Information Operations",
  "incident_type": "Propaganda & disinformation campaigns",
  "country": "Lithuania",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "Coordinated Inauthentic Behaviour",
    "disinformation",
    "Kremlin narratives",
    "Russian influence operations",
    "Bucha massacre",
    "Facebook",
    "Minfo.lt",
    "social media manipulation",
    "fake accounts",
    "bot activity",
    "Russian language disinformation",
    "TikTok",
    "anti-USA propaganda"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "'Think about that… twice': Tracking Coordinated Inauthentic Behaviour on Lithuanian social media",
  "description": "In early April 2022, shortly after the Bucha massacre revelations, a coordinated inauthentic behaviour (CIB) campaign was detected on Facebook via a video posted on the Lithuanian Minfo.lt page featuring Russian influencer Artur Sita. The video gained over 1.5 million views, 121,000 interactions, and was 444.4 times more popular than other Minfo posts. Analysis revealed extensive artificial boosting: coordinated posting by suspicious accounts across multiple languages, especially Russian, frequent usage of identical images and GIFs, rapid succession commenting by accounts with locked or minimal profiles, and widespread sharing across 130 public groups mainly outside Lithuania including Ukraine, Russia, Moldova, and Kazakhstan. Key narratives promoted included Kremlin-aligned disinformation that Russia should not be blamed for the Ukraine war. The campaign seemingly aimed to dilute the impact of the Bucha massacre evidence and promote pro-Kremlin ontological narratives about truth and the war. Linked TikTok and Facebook accounts exhibited suspicious behavior and content switches from animal videos to anti-USA propaganda. Statistical and behavioral patterns strongly indicate automated and inauthentic amplification consistent with a Kremlin influence operation targeting Lithuanian social media and wider Russian-speaking audiences.",
  "summary_short": "In April 2022, a widely amplified pro-Kremlin disinformation video on Lithuanian Facebook page Minfo.lt showed coordinated inauthentic behaviour with suspicious accounts and artificial boosting spreading false narratives about Russia and Ukraine following the Bucha massacre.",
  "summary_extended": "On April 5, 2022, shortly after global exposure of the Bucha massacre, Minfo.lt's Facebook page posted a video by Russian wellness influencer Artur Sita, which quickly amassed over 1.5 million views and 121,000 interactions, becoming vastly more popular than any other content on the page. A detailed analysis by Debunk.org uncovered clear signs of coordinated inauthentic behaviour, including a third of comments (1622) by 484 users using repeated images and GIFs, multiple rapid successive comments from locked or minimally active profiles, and major participation from Russian-speaking accounts despite Minfo's Lithuanian audience. The post was shared 145 times in 130 public groups, mostly outside Lithuania (Ukraine, Russia, Moldova, Kazakhstan). Suspicious accounts shared the video multiple times in seconds, with content shifts highlighting anti-USA propaganda. The disinformation campaign reinforced Kremlin narratives absolving Russia from blame for the war and propagated ontological skepticism about truth to sow confusion among various audiences. This coordinated operation appears designed to mitigate the damaging effect of the Bucha massacre images on Kremlin narratives by flooding social media with manipulative content, supported by accounts with signs of bot-like behaviour, sock puppetry, and across multiple platforms.",
  "actor_primary": "Kremlin influence operators",
  "target_primary": null,
  "location_text": "Lithuania",
  "location_region": null,
  "location_coordinates_lat": 55.169438,
  "location_coordinates_lon": 23.881275,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The event clearly describes a discrete pro-Kremlin coordinated inauthentic behaviour disinformation campaign targeting Lithuanian social media analyzed by credible sources. No defensive measures are discussed in the source.",
  "event_time_utc": "2022-04-05T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-03-11T12:09:00.070Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "exact",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: ExactLocation: Regional

Source reliability

Info credibility

Event time

Apr 5, 2022, 00:00 UTC

Event time confidence

exact

Location

Lithuania

Primary actor

Kremlin influence operators

Country

Lithuania

Tags

Coordinated Inauthentic Behaviour, disinformation, Kremlin narratives, Russian influence operations, Bucha massacre, Facebook, Minfo.lt, social media manipulation, fake accounts, bot activity, Russian language disinformation, TikTok, anti-USA propaganda

Nodes

Node 2: 5th Column

Loading signal...

{ "id": "77459e0d-9723-4c44-a099-f6ba91f6bedf", "url": "https://debunk.org/think-about-that-twice-tracking-coordinated-inauthentic-behaviour-on-lithuanian-social-media", "source": "extension", "status": "approved", "category": "Cyber & Information Warfare", "subcategory": "Information Operations", "incident_type": "Propaganda & disinformation campaigns", "country": "Lithuania", "source_reliability": "B", "info_credibility": "3", "tags": [ "Coordinated Inauthentic Behaviour", "disinformation", "Kremlin narratives", "Russian influence operations", "Bucha massacre", "Facebook", "Minfo.lt", "social media manipulation", "fake accounts", "bot activity", "Russian language disinformation", "TikTok", "anti-USA propaganda" ], "nodes": [ "Node 2: 5th Column" ], "countries": [], "where_text": "Cyberspace", "headline": "'Think about that… twice': Tracking Coordinated Inauthentic Behaviour on Lithuanian social media", "description": "In early April 2022, shortly after the Bucha massacre revelations, a coordinated inauthentic behaviour (CIB) campaign was detected on Facebook via a video posted on the Lithuanian Minfo.lt page featuring Russian influencer Artur Sita. The video gained over 1.5 million views, 121,000 interactions, and was 444.4 times more popular than other Minfo posts. Analysis revealed extensive artificial boosting: coordinated posting by suspicious accounts across multiple languages, especially Russian, frequent usage of identical images and GIFs, rapid succession commenting by accounts with locked or minimal profiles, and widespread sharing across 130 public groups mainly outside Lithuania including Ukraine, Russia, Moldova, and Kazakhstan. Key narratives promoted included Kremlin-aligned disinformation that Russia should not be blamed for the Ukraine war. The campaign seemingly aimed to dilute the impact of the Bucha massacre evidence and promote pro-Kremlin ontological narratives about truth and the war. Linked TikTok and Facebook accounts exhibited suspicious behavior and content switches from animal videos to anti-USA propaganda. Statistical and behavioral patterns strongly indicate automated and inauthentic amplification consistent with a Kremlin influence operation targeting Lithuanian social media and wider Russian-speaking audiences.", "summary_short": "In April 2022, a widely amplified pro-Kremlin disinformation video on Lithuanian Facebook page Minfo.lt showed coordinated inauthentic behaviour with suspicious accounts and artificial boosting spreading false narratives about Russia and Ukraine following the Bucha massacre.", "summary_extended": "On April 5, 2022, shortly after global exposure of the Bucha massacre, Minfo.lt's Facebook page posted a video by Russian wellness influencer Artur Sita, which quickly amassed over 1.5 million views and 121,000 interactions, becoming vastly more popular than any other content on the page. A detailed analysis by Debunk.org uncovered clear signs of coordinated inauthentic behaviour, including a third of comments (1622) by 484 users using repeated images and GIFs, multiple rapid successive comments from locked or minimally active profiles, and major participation from Russian-speaking accounts despite Minfo's Lithuanian audience. The post was shared 145 times in 130 public groups, mostly outside Lithuania (Ukraine, Russia, Moldova, Kazakhstan). Suspicious accounts shared the video multiple times in seconds, with content shifts highlighting anti-USA propaganda. The disinformation campaign reinforced Kremlin narratives absolving Russia from blame for the war and propagated ontological skepticism about truth to sow confusion among various audiences. This coordinated operation appears designed to mitigate the damaging effect of the Bucha massacre images on Kremlin narratives by flooding social media with manipulative content, supported by accounts with signs of bot-like behaviour, sock puppetry, and across multiple platforms.", "actor_primary": "Kremlin influence operators", "target_primary": null, "location_text": "Lithuania", "location_region": null, "location_coordinates_lat": 55.169438, "location_coordinates_lon": 23.881275, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The event clearly describes a discrete pro-Kremlin coordinated inauthentic behaviour disinformation campaign targeting Lithuanian social media analyzed by credible sources. No defensive measures are discussed in the source.", "event_time_utc": "2022-04-05T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "exact", "created_at": "2026-03-11T12:09:00.070Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "exact", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }