An investigation by the open source intelligence platform Eekad identified what it describes as an organized disinformation network operating on the social media app TikTok. The probe found about 25 accounts claiming Syrian identity while promoting divisive political messaging and inflammatory rhetoric.
According to findings published Sunday in a series of posts on X, the accounts collectively generated over 2.3 million views. Eekad said the level of engagement reflects “broad reach and real, not marginal, influence,” prompting deeper analysis of the accounts’ behavior and content. The platform concluded the activity appears coordinated rather than organic. It cited similarities in messaging, timing and interaction patterns as evidence of a structured campaign.
Geographic Patterns and Coordinated Launch
Eekad reported 88% of the accounts showed activity originating from European countries, with about half linked to Germany. Investigators noted some locations may have been masked through proxy servers or virtual private networks. One account appeared to operate from within Israeli-controlled territory.
The timing of account creation also raised concerns. Investigators found that 24 of the 25 accounts became active within a narrow window between late 2025 and early 2026. Only one account dated back earlier, launching shortly after the fall of Bashar al-Assad in December 2024. Eekad said the clustering of start dates supports the theory of prior coordination and a shared objective.
Messaging Strategy and Political Narratives
The accounts presented themselves as Syrian voices, often using nationalist language to build credibility. At the same time, they promoted content supportive of Syrian President Ahmad al-Sharaa and Israeli Prime Minister Benjamin Netanyahu.
Investigators said the messaging combined praise for Israeli leadership with criticism of Palestinians and attacks on Egypt and its military. Eekad described the approach as “a complex and contradictory discourse aimed at infiltrating the Arab debate and spreading discord.” Some posts included artificial intelligence-generated imagery designed to provoke strong reactions and amplify divisive narratives.
Support for Violence and Targeting of Critics
The investigation found certain accounts openly supported military actions in Gaza. One account, identified as operating from Germany, shared images depicting missile strikes on children. The network also targeted Syrian journalists, including Jamil al-Hassan and Hadi al-Abdullah, over their coverage of Gaza.
Eekad described the campaign against them as “moral assassination,” driven by coordinated responses that boosted visibility and engagement. Analysts observed that the accounts relied heavily on replying to one another rather than simple reposting, a tactic that can increase algorithmic reach and create the appearance of widespread agreement.
Shifting Identities and Network Behavior
Eekad documented repeated changes in account names and identities, along with patterns of deleting and reposting content. One central account changed its name without altering its identifier, while others adopted entirely new personas.
In some cases, accounts with different claimed nationalities shared identical content, suggesting a strategy to simulate diverse viewpoints. Investigators also noted links between certain accounts and Hebrew-language material, as well as interactions with profiles using explicitly pro-Israeli names.
Eekad concluded that the network’s structure, messaging and behavior point to an organized effort to influence online discourse. The platform said the findings raise questions about who may benefit from such campaigns and whether they represent a systemic model of coordinated digital manipulation.
