Thread by @SlickRockWeb

This Fazze story is crazy. There will likely be a bunch of fascinating stories coming out on this ... and yes it is a Russian linked PR agency. The #OSINT is pretty solid and clear. And a very interesting new twist on Russian promoted #disinfo schemes

Excellent #OSINT thread via @AlbertYZhang and covers alot of what we found last night and this morning. #disinfo #infosec #socialmedia

This ham-handed Russian attempt at discrediting the Pfizer vaccine by covertly using #socialmedia influencers (CPA marketing) has us wondering what other #disinfo was attempted via Fazze(.)com in the past. The Russian controlled infrastructure has been in place for awhile #osint

Another shout out to @RiskIQ and their great #OSINT tools like @PassiveTotal. When we looked a few days ago the Russian origins of this campaign were not hard to find and were present in multiple places. The company Adnow LLP was also very quickly identified #infosec

This is an excellent article by Radio Free Europe that just came out today and goes into depth on the Russian connections for the companies Fazze(.)com and Adnow LLP. Well worth using Google translator and reading this. #osint #infosec #antivax #disinfo svoboda.org/a/31276679.html

Here is the English version rferl.org/a/russia-pfize…

According to @RiskIQ data the Fazze(.)com domain was briefly on this Russian IP address (46.235.53[.]195) in early 2021. The subdomain crm.adnow(.)com was also hosted on this IP. This Threatcrowd map reveals tangentially the malware infested Goldcentre(.)ru domain

There is alot going on with Fazze that has yet to be fully unpacked, as the great @z3dster recently found out. Good #OSINT thread here:

After the influencer showed interest they would receive additional instructions to retrieve documents at a password protected link, Fazz[.]help. Shown is one of the pages of instructions that were included to promote the fake death statistics on the Pfizer vaccine

The original offer email came from an "Anton G" supposedly working at Fazze[.]com. We believe it is very likely Anton Gorshkov

Here is one of the media links that Fazze or someone working with Fazze injected (narrative laundered) into the internet ecosystem that the paid influencers could then reference. The intro emails to potential influencers were sent the same day.

This content was also posted to this Facebook page, which I hope Facebook has finally had the sense to take down. The page was full of all the worst imaginable Kremlin linked disinfo and conspiracies.

Sigh .... I gave @Facebook too much credit. That horrendous #antivaxxer #disinfo page is still up ... just less public. Note the name change in 2016. And the recent outreach to Charlie Kirk and @TuckerCarlson

Here is where the Fazze content was posted to this Facebook page back in May ... a few days after the initial articles were first injected into the world wide wide.

I really should note that @Fact_N_Furious was the first to report on Fazze(.)com. Its buried in the Albert Zhang thread i posted in May, so I’m putting it here as well