Topic starter
11/11/2026 6:05 pm
TL;DR: Fake accounts dominated parts of Norway’s political conversations around Prime Minister Jonas Gahr Støre, using coordinated activity, abuse and deepfake imagery to shape perception, according to Cyabra. Election monitoring has to focus on account behaviour and narrative amplification, not only on removing false content.
Editorial analysis by NHI Mgmt Group, based on content published by Cyabra: “The Coordinated Shadow Campaign Targeting Norway’s Election”.
Key questions
Q: How do deepfakes change influence operations?
A: Deepfakes let influence operators fabricate audio, video, or images that appear to show a real person saying or doing something they did not, making false narratives more convincing and harder to rebut.
Q: What is the difference between coordinated inauthentic behaviour and spam?
A: Coordinated inauthentic behaviour is a networked deception pattern where multiple accounts work together to mislead audiences about who they are or what they represent.
Q: How do fake accounts distort election discourse on social platforms?
A: Fake accounts distort election discourse by creating the appearance of broad support, repeated narratives, and trending attention where little or none exists organically.
Practitioner guidance
- Implement behavioural clustering for fake-account detection Correlate posting cadence, shared narratives, reply chains and profile similarity to surface coordinated inauthentic activity before it reaches peak visibility.
- Add provenance checks for synthetic media Triage AI-generated images and deepfakes with source verification, hash comparison and context review before they are allowed to shape response decisions.
- Monitor high-value political threads continuously Watch official profiles and election-critical conversations for coordinated bursts, sudden sentiment shifts and cross-account amplification during key moments.
Bottom line: Coordinated influence campaigns succeed when fake personas can borrow legitimacy from ordinary civic conversation, not only when they publish obviously false claims.
Glossary terms: Coordinated Inauthentic Behavior, Disinformation, Deepfake, Synthetic Media
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/11/2026 6:07 pm
Coordinated disinformation is an identity problem before it is a content problem. The dangerous part of this campaign is not only what was said, but that the messages were delivered through accounts designed to look organic. Once a network can masquerade as many independent voices, moderation becomes reactive and late. Practitioners should treat account provenance, behavioural clustering and engagement authenticity as primary controls.
A question worth separating out:
Q: What signs suggest a social media influence campaign?
A: Common signs include many newly created accounts, repetitive wording, synchronised posting times, shared links, recycled profile images, and sudden bursts of activity around the same narrative. Analysts also look for cross-platform amplification, low-authenticity engagement, and networks of accounts that mainly repost rather than engage independently.
👉 Read our full editorial: Coordinated fake accounts distorted Norway’s election debate