DavidAgranovich Profile Banner
David Agranovich Profile
David Agranovich

@DavidAgranovich

Followers
4K
Following
8K
Media
385
Statuses
3K

Fmr. Director, Intelligence @WHNSC | Director, Threat Disruption (OG) @Meta | Rescue Dog Pilot | Flight Instructor | @dagrano on better platforms | 🏳️‍🌈

San Francisco, CA
Joined November 2018
Don't wanna be here? Send us removal request.
@DavidAgranovich
David Agranovich
2 years
1/ We just released our Q1 Adversarial Threat Report, which incl deep dives into influence ops, espionage ops, and malware campaigns disrupted in Q1 this year. Read the report here, and I’ll dive into some takeaways from the espionage networks in this 🧵
Tweet media one
3
16
47
@DavidAgranovich
David Agranovich
9 months
RT @jc_stubbs: 🧩As in previous U.S. election cycles, Russia-linked influence operations have attempted to spread false and inflammatory cla….
0
54
0
@DavidAgranovich
David Agranovich
11 months
5/ One of the challenges we see with for-hire operators like the ones behind this campaign is obfuscation of the end client. It makes it harder for security teams to understand and prove the entire chain of attribution. This is exactly why we share threat indicators with others.
0
1
4
@DavidAgranovich
David Agranovich
11 months
4/ Finally, tech companies can only attribute these campaigns based on the evidence each company has access to, and Meta has done so consistently over the past 7 years of our extensive threat reporting. This included some of the most notable attribution breakthroughs in the.
1
0
2
@DavidAgranovich
David Agranovich
11 months
3/ Overall, we’ve invested more than $20B in our work on safety and security since 2016, that includes dedicated efforts to detect, disrupt and publicly report these findings, in addition to sharing our insights with other tech companies and researchers so they can study and.
1
0
1
@DavidAgranovich
David Agranovich
11 months
2/ It’s important to note that this campaign (and its ad spend) was global in nature, not UK and France alone. In fact, they targeted Lebanon, the US, UK, and France, and to a lesser extent Saudi Arabia and Qatar.
1
0
2
@DavidAgranovich
David Agranovich
11 months
1/ A few things to clarify on our threat research into this covert influence operation:. In our quarterly Adversarial Threat Report this month, we shared details about this and other covert influence operations we disrupted globally. One of them was this anti-Qatar campaign that
Tweet media one
6
4
6
@DavidAgranovich
David Agranovich
1 year
Looking back at you @ThisC172Pilot
Tweet media one
1
0
3
@DavidAgranovich
David Agranovich
1 year
7/ Read the full report here:
0
1
1
@DavidAgranovich
David Agranovich
1 year
6/ Want to dig deeper into Doppelganger’s cross-internet presence yourself? Our teams added 600+ new signals to our large repository of threat indicators on our public GitHub:
Tweet media one
github.com
Welcome to the Meta Threat Research Indicator Repository, a dedicated resource for the sharing of Indicators of Compromise (IOCs) and other threat indicators with the external research community - ...
1
0
1
@DavidAgranovich
David Agranovich
1 year
5/ In addition to continuing to block and remove, constantly adding friction and making these cross-internet efforts less and less effective, we share some recommendations to make our collective response stronger across industry and government:
Tweet media one
1
1
1
@DavidAgranovich
David Agranovich
1 year
4/ Our teams aggressively work to counter Doppelganger through investigations, takedowns, and scaled detection and enforcement. we’ve seen those efforts have real effects in degrading their capabilities. In addition to currently abandoning many of the tactics on our platforms,
Tweet media one
Tweet media two
1
0
0
@DavidAgranovich
David Agranovich
1 year
3/ We also released an update on Doppelganger, an IO from Russia that we first discovered and reported almost two years ago. This is a persistent, nation-state backed (per US/EU reporting) operation targeting Ukraine and its allies in wartime. It’s incredibly cross-platform,.
1
0
1
@DavidAgranovich
David Agranovich
1 year
2/ First, these are all adversarial networks constantly trying to find workarounds for our industry’s detection to slip through across the internet. That’s why we use the Threat Disruption model - to constantly detect, disrupt, and improve scaled systems to degrade their.
1
0
1
@DavidAgranovich
David Agranovich
1 year
1/ This week, we released our Q1 Adversarial Threat Report, which includes insights into influence ops we disrupted from Iran, Israel, China, and a number of other countries. A few takeaways 🧵.
2
2
6
@DavidAgranovich
David Agranovich
1 year
RT @ColumbiaIGP: 🔴 LIVE NOW - The Role and Responsibilities of Tech Companies. A panel discussion with @DavidAgran….
0
1
0
@DavidAgranovich
David Agranovich
1 year
I’ll be on at 2:50pm ET to talk about what tech companies can do to build safer systems - and will share more on threads at
Tweet media one
0
0
0
@DavidAgranovich
David Agranovich
1 year
Join me with @ColumbiaIGP & @AspenDigital today for important conversations about the new challenges and opportunities generative AI will bring during this major global election year. Watch the event live:
2
1
6
@DavidAgranovich
David Agranovich
1 year
Lots of cross-platform targeting, including right here on X
Tweet media one
0
1
3
@DavidAgranovich
David Agranovich
1 year
Read the rest of the threat and details on the companies here:
Tweet media one
1
1
6
@DavidAgranovich
David Agranovich
1 year
1/ We just released our Q4 Adversarial Threat Report focused on our work to investigate and disrupt abusive spyware activity around the world. Our report includes findings on 8 surveillance-for-hire firms from Italy, Spain, and the UAE. We also share detailed recommendations for
Tweet media one
1
24
49