AI Weekly Malaysia

OpenAI says it banned two influence operations over the past two and a half years — one Russia-origin, one Iran-origin — that combined its models with conventional tactics to build "false front" entities. The Iranian operation ran seven "journalist" personas that pitched long-form articles to small and medium outlets worldwide and also mass-generated social media comments on US-Iran war topics; the Russian operation co-opted unwitting people in Latin America to run a ground-level "think tank" and produced fake "leaked" documents and audio scripts. OpenAI rates the Russia-origin operation as Category 5 on the IO Breakout Scale, which it calls a first, and notes both operations leaned on AI heavily to draft internal reports while using questionable methodologies to exaggerate their own effectiveness.

Why: The distribution channel here is not an exploit — it's a pitch email to small and medium outlets, which means any site you run that accepts contributed or guest articles is a candidate target with zero technical barrier. If your product or community publishes third-party bylines, this is a prompt to decide what verification you require before publishing, because the personas are indistinguishable from normal contributors by design. Note what you cannot do with this post: OpenAI publishes no indicators, no detection heuristics, and no model-level detail, so there is no operational action beyond contributor vetting.