Coordinated Disinformation Campaign Attempts to Implicate India in US-Iran Maritime Conflict

A sophisticated disinformation operation, allegedly originating from Pakistan-based networks, sought to exploit a recent US-Iran naval confrontation to damage India’s diplomatic reputation, according to detailed open-source intelligence assessments.

The campaign emerged following the March 4 sinking of the Iranian Navy frigate IRIS Dena by U.S. forces off the Sri Lankan coast. U.S. Defense Secretary Pete Hegseth characterized the strike as a demonstration that Iranian vessels weren’t safe even in international waters, with released periscope footage documenting the attack. The frigate had no opportunity to surrender, though debates continue regarding whether warnings were issued prior to the strike. Under naval warfare law, attacks on enemy warships without prior warning are permitted when clear surrender signals are absent.

Shortly after the incident, social media platforms saw the rapid proliferation of a narrative accusing India of providing critical intelligence to the United States that enabled the attack. Security analysts and intelligence officials have widely disputed this claim.

“A coordinated disinformation campaign emerged on social media under the hashtag #IndiaBetraysIran, falsely alleging that India had leaked the frigate’s coordinates or location data to the United States,” said officials familiar with the investigation. Analysis traced the campaign’s origin to a March 4 post by the account @TacticalTribun, which reportedly has a history of frequent username changes suggesting malicious intent.

The narrative spread through what appears to be a combination of manual amplification by unique accounts rather than purely algorithmic distribution. Approximately 40% of the amplification originated from Pakistan-based users and networks, with additional contributions from Iran-aligned accounts, Middle Eastern, African, and Southeast Asian clusters.

Security officials noted that the campaign reached significant scale, with “over 500 posts from more than 100 identified accounts reaching an estimated cumulative exposure of 50,000-100,000 views in the initial phase, with some individual posts achieving viral reach exceeding 900,000 impressions.”

The operation’s structure followed a hub-and-spoke network pattern, with the original post rapidly replicated by primary amplifiers within hours, followed by secondary amplification across more than 80 accounts through quote tweets, replies, and hashtag clustering. Visual content featuring the IRIS Dena with Iranian flags significantly outperformed text-based posts, indicating deliberate emotional manipulation tactics.

Intelligence assessments identified structured layers of participation, including originators, high-reach amplifiers, mid-tier ideological networks, and low-reach “sockpuppet” accounts. The campaign demonstrated multiple indicators of coordinated inauthentic behavior, including verbatim content duplication, synchronized posting patterns, rapid hashtag emergence, and abnormal engagement spikes.

What made this disinformation effort particularly effective was its cross-ideological appeal. Distinct groups amplified the narrative through their own perspectives, creating a self-reinforcing ecosystem. These groups included Pakistan-based networks (35-40%), pro-Iran actors (15-18%), pro-Palestine clusters (12%), Western anti-war communities (8%), China-aligned accounts (5%), and even segments of Indian domestic political opposition (8%).

Officials connected the campaign to a broader pattern of similar operations. “Such campaigns have witnessed a rinse and repeat playbook by ISI-backed actors and have featured deepfakes and fabrications,” sources revealed. For instance, @TacticalTribun previously posted a deepfake video of Indian Defense Minister Rajnath Singh purportedly endorsing U.S. attacks on Iran. Similarly, old footage of Israeli Prime Minister Benjamin Netanyahu was repurposed by a Pakistani account claiming that Indian Prime Minister Narendra Modi had pledged support for assassinating Iran’s Supreme Leader Ali Khamenei.

India’s Press Information Bureau (PIB) Fact Check unit and other verification services debunked these fabrications as Pakistani-origin propaganda aimed at straining India-Iran relations.

While the #IndiaBetraysIran campaign was relatively short-lived in its primary wave, intelligence assessments suggest it succeeded in seeding residual perceptions of distrust, particularly among Muslim-majority countries and Global South audiences. The operation highlights the evolving sophistication of misinformation warfare as a strategic tool in contemporary geopolitical conflicts.

The incident underscores the growing challenge nations face in protecting their diplomatic relationships in an era where information operations can rapidly exploit international events to sow discord between allies and strategic partners.