Disinformation posted by Secondary Infektion worldwide 2014-2020, by language

“Secondary Infektion” – the name given to the long-running operation – is defined as a collection of online disinformation actions that constituted a methodic campaign carried out on global social media, blogging platforms, and online information outlets. Between 2014 and 2020, the disinformation operation published 1,252 pieces of content in English, and 953 pieces of content in Russian. Content in Ukrainian only represented three percent of all disinformation posts published by the operation. Despite being active across multiple platforms and languages, the operation never appeared to gain substantial engagement. According to the research, disinformation posts published by the operation made use of burner accounts with a very short lifespan.

In May 2019, Facebook announced it had removed a small network of 16 accounts and pages active on Facebook and Instagram, as part of its efforts to contrast Coordinated Inauthentic Behavior, or CIB. Facebook's findings were shared with the Digital Forensic Research Lab of the Atlantic Council, which was able to connect the removed accounts and pages to a wider network of disinformation agents and operations. Such network was renamed "Secondary Infektion," due to its similarity to the original disinformation campaign "Operation Infektion". Planted in English-language global media by the Soviet Union's main security agency in the 1980s, Operation Infektion main object was to spread disinformation around the origins of the HIV virus and to create social destabilization, mainly in the United States.