2025-10-02-citizenlab-prisonbreak-report

We Say You Want a Revolution: PRISONBREAK — An AI-Enabled Influence Operation Aimed at Overthrowing the Iranian Regime

Summary

The primary forensic source behind the Pahlavi influence-operation story. Citizen Lab Report No. 189 (2 October 2025) documents PRISONBREAK, a coordinated network of 50+ inauthentic X accounts running an AI-enabled influence operation that incited Iranians to revolt and promoted regime change, assessed as most likely run by an Israeli government entity or a private subcontractor working closely with it. This is the load-bearing, methodology-driven research that the Haaretz/TheMarker investigation and downstream press coverage rest on. Anchor source for israeli-influence-operation-iran and the 2025-10-03-haaretz-citizenlab-pahlavi-influence-op evidence note.

Authors: Alberto Fittarelli, Ron Deibert, Marcus Michaelsen, Maia Scott, with Darren Linvill (Clemson University).

Key Data Points (forensic)

• Network size: 50+ inauthentic X profiles (53 analyzed); 30 of 53 used obscured-face / stolen profile photos from stock sites or Pinterest.
• Dormancy → activation: accounts created Feb–Dec 2023, but ~99.5% of posting happened after January 2025.
• Timezone signal: activity ramped at 6:00 UTC, peaked 7:00 UTC, wound down after 15:00 UTC — a regular work day in UTC+3 (Israel/Tehran), not organic global user behavior.
• Client signal: ≥75% of posts via X’s desktop web app — anomalous for a mobile-first platform.
• Registration signal: ~half the accounts registered via the same obscure “b…” email domain.
• Coordination markers: identical hashtag strings, shared content, same posting hours, coordination with the pro-Israel @TelAviv_Tehran persona.

AI-Generated Content Documented

• Evin Prison deepfake (23 June 2025, 12:05 Tehran time) — posted while airstrikes were ongoing; calls to storm the prison within ~90 min. Researchers say the timing “strongly suggests prior knowledge of the Israeli military action.”
• Fake BBC Persian broadcasts/articles (officials fleeing Iran) — BBC confirmed it never published them.
• “8 o’clock cry” protest videos (≥9 between 20–22 June, 20k–60k views each) with “Death to Khamenei” chants.
• Deepfake of musicians Toomaj Salehi, Mehdi Yarrahi, Shervin Hajipour (13 Aug 2025) singing altered “Baraye” lyrics — visible AI artifacts (backwards walking, duplicated tattoos).
• Water-crisis propaganda (Khamenei “stealing water from a baby”; bomb-timer imagery).

Attribution & Confidence

• Assessment: high likelihood an Israeli government entity or close contractor ran it. US-involvement hypotheses rated medium-high / low.
• Corroborating signal: Israeli FM Gideon Saar reposted the Evin Prison deepfake.
• Stated limitation (verbatim caveat): “At present, we cannot conclusively attribute this to a particular entity” — platform access restrictions deny researchers the metadata for definitive attribution.

Credibility Assessment

Citizen Lab is a non-partisan academic research lab (the Pegasus/NSO and Candiru exposers); this is its standard rigorous, indicator-based methodology with explicit confidence levels and stated limitations. The highest-weight source in this cluster. Note the discipline line carried through the cluster: this proves a Pahlavi-promoting, regime-change AI amplification op — it does not establish that the 36,500 casualty figure was a product of the same operation.