Google’s Threat Analysis Group (TAG), in collaboration with its cybersecurity firm Mandiant, has uncovered a widespread network of fake news websites operated by four different public relations (PR) firms that spread propaganda in line with the Chinese government’s interests.
Known as GLASSBRIDGE, this PR network created and distributed inauthentic content globally to influence public opinion on key geopolitical issues. Since 2022, Google has removed and deindexed over 1,000 websites associated with GLASSBRIDGE from appearing in Google News and Google Discover for violating policies against deceptive practices and lack of editorial transparency.
These sites, which appear as independent media outlets, push narratives that align with Beijing’s political agenda, covering topics such as Taiwan, the South China Sea, and COVID-19. It is worth noting that this announcement comes just weeks after reports revealed that North Korean hackers used fake news to spread malware.
“These campaigns show how private PR firms are being used to conduct coordinated influence operations,” Google said in a blog post. “By using these firms, the actors behind the information operations remain hidden, concealing their role in spreading inauthentic content.”
The campaigns rely on news services to distribute their content, with two of the PR firms directly operating these services. The fake news network targets audiences in over 30 countries, including the United States, Australia, Germany, Japan, and Brazil, as well as Chinese diasporas worldwide.
The four firms within the GLASSBRIDGE network are:
- Shanghai Haixun Technology
Shanghai Haixun Technology is the largest PR firm in the network, with more than 600 domains linked to its operations, which have already been removed by Google. These sites target both English and Chinese-speaking audiences, as well as countries across Asia, Europe, and the Americas. Haixun’s websites often feature low-quality repetitive content that blends trivial articles with pro-China stories. The firm was also caught using independent platforms like Fiverr to hire social media accounts to amplify its messages. In July 2023, Haixun’s influence campaigns were observed infiltrating legitimate news media via subdomains provided by its news services, Times Newswire and World Newswire. - Times Newswire and Shenzhen Haimai Yunxiang Media
Google researchers identified Times Newswire and its operator, Shenzhen Haimai Yunxiang Media, as major players in distributing pro-China propaganda. These entities were linked to the PAPERBALL campaign, a network of over 100 fake websites reported by Citizen Lab earlier this year. These fraudulent sites, spanning more than 30 countries, published a mix of copied local news, conspiracy theories, and smear campaigns targeting critics of Beijing. Many of these articles were brief, appearing momentarily on sites before being removed to avoid detection. - DURINBRIDGE
DURINBRIDGE, another PR and marketing firm in the network, operates over 200 fake news websites. While most of its content consists of press releases and generic news, a portion is dedicated to spreading pro-China narratives, including articles related to DRAGONBRIDGE, a long-running influence operation tracked by Google. These sites were also used to promote politically motivated smear campaigns, such as targeting Taiwanese presidential candidates ahead of elections. - Shenzhen Bowen Media
Shenzhen Bowen Media controls a network of over 100 fake news sites designed to cater to specific countries and cities. The articles are published in local languages, including French, German, Japanese, and Thai, to appear more credible to regional audiences. The content often combines local news with legitimate imagery, blending pro-Beijing narratives sourced from its news service, World Newswire, which is also used by Haixun.
A Broader Picture
This operation is part of a growing trend where nation-states outsource influence campaigns to private PR firms, allowing them to remain hidden. By using fake news websites instead of traditional social media disinformation, these campaigns can more effectively target audiences, tailoring content to local languages and issues.
Google’s action to block these websites from its news platforms shows that disinformation campaigns are a reality. The takeaway for readers is to critically assess news sources and verify information across multiple media outlets.
/The Geopost
