| Characteristic | Number of posts | Share of posts* (%) |
|---|---|---|
| Ukraine | 863 | 32 |
| United States | 362 | 14 |
| Poland | 281 | 11 |
| Germany | 179 | 7 |
| United Kingdom | 178 | 7 |
| European Union | 151 | 6 |
| Russia | 137 | 5 |
| Sweden | 135 | 5 |
| Turkey | 108 | 4 |
| Lithuania | 84 | 3 |
| Intl. Organization | 48 | 2 |
| Georgia | 47 | 2 |
| Latvia | 44 | 2 |
| France | 30 | 1 |
| Moldova | 28 | 1 |
June 2020
Worldwide
2014 to 2020
across the lea
*The values may not sum up to 100 percent due to rounding.
According to the source (page 9): "As of May 2020, this operation has not been directly attributed to a particular actor or entity." Additionally, the source gives the following notes on attribution (page 12): The attribution to operators in Russia rests on multiple indicators, both technical and contextual. Based on technical signals, Facebook first attributed the operation to Russian actors in May 2019. In December 2019, Reddit attributed the leak of US-UK trade leaks to the same operation. The context and content of the Secondary Infektion campaigns across the years echo that initial attribution. The operation started out working in Russian and targeted the Russian opposition, especially Alexei Navalny. It shifted focus to attacking Ukraine just as Russia annexed Crimea and launched its proxy war in the Donbass."









