Iran Dominates Google's AI-Powered Disinfo Campaigns

Iranian state-backed groups have become the largest users of Google's Gemini AI model for cyberattacks and disinformation campaigns, according to a report by Google's Threat Intelligence Group (GTIG).

The group found that Iranian actors represent the single largest nation-state user demographic of Gemini among threat groups GTIG tracks. They use Gemini to supercharge cyberattacks, build fake online personas, and run disinformation campaigns at scale.

One of the most active offenders is APT42, also known as GreenBravo, a group widely linked to Iran's Islamic Revolutionary Guard Corps (IRGC).

A study by GTIG revealed that Iranian actors are now using Gemini to design photorealistic fake identities and craft convincing phishing campaigns.