This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Researchers identified a coordinated network of over 50 inauthentic X accounts, dubbed 'PRISONBREAK,' conducting an AI-enabled influence operation targeting Iranian audiences. The campaign, likely linked to Israeli state actors, synchronized the release of AI-generated synthetic media with military strikes in June 2025 to incite civil unrest. The operation highlights the increasing ease with which AI tools can be used to produce realistic disinformation for covert influence campaigns.
Researchers from Citizen Lab and Clemson documented "PRISONBREAK," a coordinated network of 50+ inauthentic X accounts running a purportedly AI-enabled influence operation. The network reportedly synchronized with the June 23 Evin Prison strikes, posting an AI-generated "attack" video during the events and urging Iranians to free inmates, alongside other synthetic media and media impersonations. They assess, with medium confidence, likely Israeli government or contractor involvement.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to conduct large-scale disinformation campaigns, malicious surveillance, or targeted and sophisticated automated censorship and propaganda, with the aim of manipulating political processes, public opinion, and behavior.
Also classified as
The operation utilized AI to generate and spread realistic-looking synthetic media and sensational falsehoods to mislead the target audience.
The incident involves a coordinated, state-linked network using AI-generated content to conduct a large-scale influence operation targeting the Iranian public to manipulate political stability.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The risk was caused by human operators intentionally deploying AI tools to generate synthetic media for a coordinated influence campaign.
Added categories peak at 4: Severe (Epistemic Harm, Inferred)
The PRISONBREAK campaign represents a sophisticated, state-linked information operation that utilized AI-generated synthetic media to incite civil unrest and revolt in Iran. By synchronizing digital propaganda with real-world military strikes, the operation demonstrates an evolved capability in information warfare, though its overall impact was mitigated by limited organic engagement.
The AI systems (image and video generators) were used as tools by human operators to produce realistic-looking media. The report notes 'The growing sophistication and ease-of-use of AI tools has also helped power these campaigns, providing actors with an unprecedented ability to produce increasingly realistic-looking videos and images'.
Limited Risk: The report describes the use of AI-generated content such as deepfakes (realistic-looking videos and images) and chatbots/inauthentic profiles, which fall under transparency obligations for interactive AI and synthetic media.
The AI systems were used to generate realistic-looking videos, images, and posts to populate inauthentic social media profiles on X for an influence campaign.
The report provides a detailed, evidence-based analysis of the PRISONBREAK network, its timing, target audience, and the role of AI tools in generating synthetic media. The attribution to Israeli state actors is presented as a highly consistent hypothesis rather than absolute certainty, but the operational details of the campaign itself are clear and well-documented.
The campaign could theoretically be operated by a non-state actor or a different nation-state with advanced knowledge of IDF operations, though this is assessed as highly unlikely.
Technology
AI-Generated Content Tools
AI tools enabled easy creation of realistic videos and images.
Engagement-Driven Algorithms
Platform algorithms prioritized and amplified sensational content.
Coordinated Inauthentic Profiles
Networks of automated profiles synchronized posts to mimic organic reach.
Human Factors
Emotional Susceptibility
Sensational falsehoods spread quickly by feeding off human emotions.
Lack of Detection Capabilities
General public lacks the specialized resources to detect coordination.
Process and Methods
Reduced Content Moderation Teams
Platforms cut teams responsible for removing inauthentic content.
Restricted Research Access
Platforms restricted data access, hindering independent attribution.
Pre-planned Campaign Synchronization
Content was prepared in advance to synchronize with military strikes.
Management
Platform Safety Budget Cuts
Management chose to reduce capacity of teams removing inauthentic content.
State-Sponsored Orchestration
State actor managed and directed the covert influence operation.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
