Info War & Source Reliability
From the first hours of the US-Israeli strikes on Iran, the information environment became a battlefield unto itself — and in many ways, the more consequential one. This thread tracks how fakes, bot campaigns, AI-generated content, and cross-ecosystem amplification patterns shaped what the world believed was happening on the ground. The arc is striking: within hours of the first strikes at ~06:10 UTC on February 28, competing kill claims, doctored footage, and strategic denials were already migrating across ecosystem boundaries — from Russian milblogs to OSINT aggregators to Iranian state media and back — at speeds that outpaced any official confirmation mechanism.
The information war evolved through distinct phases. First came the fog-of-war phase, dominated by Russian-language Telegram channels that served as the primary amplification infrastructure for unverified Iranian claims. Then came the debunking phase, where OSINT accounts and Western outlets began challenging specific claims — the Minab school strike attribution, IRGC casualty figures for Haifa, the Khamenei alive-or-dead question. By day three, the ecosystem had matured into something more sophisticated: coordinated cross-platform information operations, including the IRIB Channel 3 hack, AI-generated Netanyahu videos, and the White House 'Call of Duty' strike compilation. Each side was no longer just making claims — they were engineering the information architecture itself.
What makes this thread analytically significant is not any single fake or debunking, but the structural pattern: claims consistently migrated from their ecosystem of origin through predictable relay chains. Iranian claims traveled via IRGC communiqués → Press TV → Russian milblogs → OSINT aggregators. Israeli counter-narratives moved through IDF briefings → AbuAliExpress → Western wire services. And the most dangerous information events were those that crossed multiple ecosystem boundaries before anyone could verify them — the Aramco attribution contest, the friendly-fire narrative, the Mojtaba Khamenei succession claim. By week's end, the information environment had become self-referential: sources were spending as much energy debunking each other as reporting new developments.
Early Signals
Friday morning, February 28 (10:00–20:00 UTC) — roughly four to fourteen hours after the first strikes hit Iran. The information war's opening salvo was dominated overwhelmingly by Russian-language Telegram, which accounted for 12 of 14 items in this window. The first major info-war event: competing claims about whether Iranian Armed Forces commander Amir Hatami had been killed. Boris Rozhin (@boris_rozhin) posted at 10:47 UTC that Hatami was 'alive and safe,' explicitly pushing back against earlier kill claims. Within minutes, IntelSlava relayed the same denial in English, and Soloviev's channel amplified the Russian MFA's condemnation of the strikes.
The Iranian ecosystem was almost silent — a single Press TV article from this window, and notably one timestamped before the strikes (a stray item about US intel debunking Trump's ICBM claims). This asymmetry is the chapter's real story: in the critical first hours, Russia's Telegram infrastructure was doing Iran's information work for it. The MFA statement at 10:57 UTC framed the strikes as 'armed aggression,' establishing the Russian narrative template that would persist for days.
OSINT Sources Enter
Friday evening, February 28 (20:00–22:00 UTC) — roughly fourteen to sixteen hours in. Arab-language sources entered the information war through @qudsnen, a Palestinian channel, which carried an Israeli source's claim that pre-strike negotiations with Iran had been merely performative. But the more significant development was Rozhin's attack on Reuters at 20:36 UTC: he accused the agency of spreading the Khamenei death story and then retreating, calling them 'propagandists' (пропагандоны) who 'crawled back' to claim they had only been citing Israeli sources.
This is a pivotal moment in the information war's architecture. The Khamenei alive-or-dead question was becoming the central contested fact, and Russian milblogs were positioning themselves not just as amplifiers but as arbiters of reliability — claiming to hold Western media accountable. Meanwhile, @rybar_mena flagged a mysterious fire off the Israeli coast at 21:31 UTC, a speculative item that illustrates how the fog of war generates its own content: unverified observations become narratives simply because the information appetite is insatiable.
Arab Sources Enter
Late Friday through Saturday evening (Feb 28, 22:00 UTC — Mar 1, 18:00 UTC) — the thread's first full day. Western sources entered primarily through BBC Persian, which became a critical bridge between ecosystems. At 23:10 UTC on Feb 28, BBC Persian carried Fars News Agency's denial of Khamenei's death — framing Trump as having 'again published fake news.' The Khamenei question was now a full-blown cross-ecosystem information battle, with each side accusing the other of fabrication.
The most significant info-war development was the Minab school strike debunking. At 23:28 UTC, CIG Telegram and Fotros Resistance simultaneously posted a GeoConfirmed analysis rebutting claims that the school was hit by a failed Iranian rocket rather than a coalition strike. This is the OSINT ecosystem at its most consequential: real-time geolocation challenging both Iranian and Israeli narratives. By March 1 morning, Rybar had published a long analytical piece on global reactions to Khamenei's reported death, framing consulate attacks in the Muslim world as the authentic popular response — positioning street rage as more truthful than official denials.
Western Sources Enter
Sunday evening, March 1 (18:00–20:00 UTC) — roughly 36 hours into the conflict. Turkish sources entered the thread, but the real story was the Israeli information offensive reaching a new phase. At 19:47 UTC, AbuAliExpress reported that IRIB Channel 3 — Iranian state broadcasting — had been hacked, with Netanyahu and Trump messages replacing regular programming. Simultaneously, BBC Persian reported that Iran's internet connectivity, severely degraded since the strikes began, was further restricted.
This convergence — a broadcast hack plus internet throttling — created an information environment where Iranians inside Iran were increasingly cut off from independent sources while being subjected to hostile messaging on their own state channels. The Milinfolive channel at 19:58 UTC provided technical debunking of Iranian missile claims, analyzing footage frame-by-frame and concluding that what Iran presented as a cluster warhead was actually a missile breaking apart after interception. This granular visual forensics, conducted in Russian, then migrated to English-language OSINT — a relay pattern that defined the thread.
Turkish Sources Enter
Sunday night, March 1 (20:00 UTC — midnight) — hours 38 to 42. The amplification machinery hit full velocity. The IRGC claimed 40 killed and 60 wounded in Haifa, a claim Rozhin relayed at 20:01 UTC. Within fifteen minutes, AbuAliExpress had posted a direct rebuttal in Hebrew, calling Iranians liars ('שקרנים') and asserting that 'the bigger the lie, the more they believe it.' This is real-time claim-and-counter-claim operating at the speed of Telegram.
The window also saw two distinct information operations converge. The Pentagon released 'Operation Epic Fury' briefing slides (Milinfolive, 22:15 UTC), while Middle East Spectator and IntelSlava amplified civilian casualty imagery from Tehran with maximum emotional framing — 'dead civilians in the center of Tehran. While talking about the freedom of Iranians, they are killing Iranians and their children.' The Texas shooting at 20:03 UTC — a gunman in an Iranian flag shirt — introduced a domestic US dimension. Each ecosystem selected the facts that served its narrative, creating parallel but incompatible information realities that shared almost no common evidentiary ground.
Amplification Surge
Monday March 2 through Tuesday March 3 (00:00 UTC Mar 2 — 18:00 UTC Mar 3) — the conflict's second and third days. Chinese sources entered the thread, though with notably restrained volume (just one item in the ecosystem breakdown). The real dynamic was the maturation of cross-ecosystem information operations. At 06:23 UTC on March 2, Soloviev's channel carried a Saudi anti-fake committee debunking reports of a hotel strike in Riyadh — a rare instance of Saudi and Russian information interests aligning.
The friendly-fire narrative emerged as a case study in information dynamics. When the US acknowledged an F-15 crash as friendly fire, Rozhin immediately noted the contradiction: admitting Iranian responsibility would undermine claims that Iranian air defenses were destroyed. Press TV escalated to 'seven downed aircraft.' The Pentagon's own strike footage release (IntelSlava, 03:54 UTC) became ammunition for both sides — the US framed it as precision; Russian analysts dissected it for evidence of missed targets. By editorial #58, the Aramco attribution contest had become the thread's signature dynamic: Tasnim claimed Israel, not Iran, struck the Saudi refinery, and the claim traveled Tasnim → TASS → IntelSlava in hours.
Chinese Sources Enter
Tuesday evening through early Wednesday (Mar 3, 18:00 UTC — Mar 4, 06:00 UTC) — the conflict's fourth day. Iranian state media surged to dominance in the info-war thread, producing 9 of 15 items. The shift was structural: Iran's information apparatus, largely offline or reactive for the first 60 hours, had reorganized around Khamenei's funeral preparations. Tasnim and Mehr News were now producing at volume, with funeral logistics doubling as information operations — every crowd estimate, every eulogy, every traffic-control announcement served to project state continuity and popular unity.
The Russian MFA's anti-fake desk posted at 18:02 UTC, accusing Western press of 'working a political order to blacken Russia' — not about Iran at all, but about Ukraine. This intrusion of the Ukraine narrative into the Iran thread reveals how Russia's information infrastructure treats all conflicts as fronts in a single information war. BBC Persian at 22:12 UTC carried Fars reporting that the Assembly of Experts session to select a new leader might happen in person after the burial — the succession process itself becoming contested information territory.
Amplification Surge
Early Wednesday, March 4 (06:00–08:00 UTC) — day five dawn. Iranian sources dominated almost completely (8 of 10 items), with the information environment now organized around the Khamenei funeral as a media spectacle. IRNA, Mehr News, and Tasnim published near-identical items about security and traffic arrangements for the funeral at Mosalla-ye Imam Khomeini, beginning at 22:00 local time. The synchronized output suggests centralized messaging control — not independent newsrooms covering an event, but a coordinated state communication apparatus.
Rybar MENA opened the window at 06:15 UTC with a sardonic piece headlined 'Turkey — an independent state' and described as 'morning jokes of March 4,' mocking Turkey's ambiguous positioning. The sole Arab-ecosystem item — Rudaw reporting an Iraqi militia drone attack on Jordan — signals how the information war was spilling into adjacent theaters. The thread's character had shifted: from contested facts to contested meanings, with funeral coverage becoming the new battleground.
Amplification Surge
Wednesday March 4 through Friday March 6 (08:00 UTC Mar 4 — 14:00 UTC Mar 6) — the conflict's longest chapter, spanning nearly 54 hours across days five through seven. With 107 items, this was the thread's peak volume. Russian channels (44 items) and Iranian state media (33 items) together accounted for 72% of the information-war content, revealing a consolidated amplification axis.
The chapter's signature dynamic was the ceasefire-negotiation information battle. On March 4, the New York Times reportedly published claims of Iranian willingness to discuss a ceasefire. By 14:59 UTC, Soloviev was carrying Tasnim's flat denial; by 15:21, Rozhin called the NYT report a 'throw-in' (вброс) — Russian information-warfare terminology for a planted false story — arguing it revealed 'poorly concealed American desire' for a way out. The characterization of legitimate journalism as information operations became standard across the Russian ecosystem. Meanwhile, the White House 'Call of Duty' strike compilation video (noted in editorial #100) — gamifying military operations — was dissected by TASS for its video-game aesthetics and by Radio Farda for its propaganda function. By March 6, the Azerbaijan dimension had emerged: claims and counter-claims about Iranian drone strikes on Nakhchivan, with Israeli media promoting Azerbaijan as a potential belligerent — information operations laying groundwork for geographic escalation.
Amplification Surge
Friday afternoon and evening, March 6 (14:00–22:00 UTC) — one week minus eight hours since the first strikes. The thread's final chapter captures an information environment that had achieved a kind of toxic equilibrium. Trump's 'Let's Make Iran Great Again' at 14:00 UTC, relayed by Al Jazeera Arabic, collided with Khamenei's posthumous X account posting in Hebrew that Israel 'committed a great mistake.' The dead leader's social media accounts had become an information weapon — Iranian state media operating them as if Khamenei were still issuing guidance.
The Azerbaijan dimension intensified: IntelSlava at 19:02 UTC accused Azerbaijan of launching disinformation about an 'Iranian attack on Nakhchivan' to prepare ground for entering the war on Israel's side. Israeli Channel 11 reportedly announced Azerbaijan would 'soon enter' the conflict. Tasnim at 18:27 UTC published what it framed as an exposé: an Israeli plot to missile-strike Al-Aqsa Mosque, allegedly discovered by Iranian intelligence. The claim's propagation — Tasnim → Arabic-language aggregators — followed the now-familiar cross-ecosystem relay pattern. By week's end, the information war had become self-sustaining: each ecosystem generated content primarily to counter the other's content, creating an ouroboros of claim and counter-claim that bore decreasing relationship to verifiable events on the ground.