International accounts accounted for 60% of anti-war messages on X, according to a research firm.

Analysis of Social Media Activity During Operation Epic Fury

A recent study examining social media activity at the outset of Operation Epic Fury indicates that much of the online criticism and anti-Israel sentiment may have originated from foreign accounts, rather than American users.

The report highlighted specific phrases that foreign accounts frequently used, including descriptions of the operation as a “MAGA betrayal” and claims that it was “highly unpopular” in the U.S. and executed “on behalf of Israel.”

Conducted by Argyle Consulting Group, a private intelligence firm, the study revealed that 60% of the most shared posts on X, which mentioned “Iran” within the first week of the operation, were from accounts located outside the United States. Interestingly, these accounts often presented themselves as if they were American.

“These aren’t just casual opinions,” noted Eran Bhaskar, co-founder and CEO of Argyle Consulting Group. “What we’re observing is discourse that appears American—written in English and utilizing U.S. political terminology—but is actually sourced from abroad. This makes it almost untraceable for the average user,” he further explained, emphasizing that these accounts seem very much aligned with domestic political talk.

The analysis focused on 100 viral posts with significant engagement (over 10,000 shares each) from February 28 to March 7. Posts that referenced “Iran” amassed an astounding 98 million mentions, leading to 696.4 million interactions and potentially 1.5 trillion views, marking this as one of the largest online information events recorded.

Notably, the international accounts generated 155.6 million views, surpassing the 93.4 million views from U.S.-based accounts by more than 60 million. Surprisingly, all content from international accounts was negative towards the operation, while supportive posts predominantly stemmed from U.S. users.

JP Castellanos, a threat intelligence director at Binary Defense, emphasized that a significant portion of the online activity centers on Israel, which combines disruptive tactics with messaging strategies. He pointed out that around 42% of the online claims target Israel specifically and highlighted the influence of doxxing campaigns and AI-generated content in shaping public perception.

Castellanos also addressed the difficulty in distinguishing genuine cyber incidents from exaggerated claims made by groups seeking attention, stating, “Often, these are just unverified assertions online.”

Furthermore, researchers concluded that the coordinated nature of the messaging suggests a deliberate effort rather than a spontaneous global dialogue. The online narrative campaign coincides with increased activity from pro-Iran and sympathetic groups in the digital arena.

Among the currently active entities is Handara, linked to Iran, which has claimed responsibility for cyberattacks on U.S. and Israeli objectives. Interestingly, seven of the top ten influential accounts responsible for driving engagement were found to be based outside of the U.S., associated with nations such as Russia, the United Arab Emirates, and the United Kingdom.

U.S. authorities and cybersecurity experts have tied Handara to Iran’s Ministry of Intelligence and Security, illustrating how the group’s initiatives are part of a broader strategy that mixes cyber offensives with psychological and information warfare.