Coordinated Inauthentic Behavior

From CIB to Coordinated Manipulation: An Evolving Research Programme

The papers gathered here trace the arc of a research programme that began with a narrowly platform-defined concept — Meta’s “coordinated inauthentic behavior” (CIB) — and is now being pulled in multiple directions: conceptually toward manipulation and brokerage, methodologically toward multimodal and cross-platform detection, and empirically into new platforms, regions, and adversaries. What unites the corpus is a shared dissatisfaction with both the original CIB framing and the data regimes that produced it, and a search for more robust theoretical and computational foundations.

Contesting the Concept: From “Inauthenticity” to “Manipulation”

A first thread reconsiders what CIB even means. Hurcombe2025-cs reads Meta’s Newsroom as discursively constructing “coordinated inauthentic behaviour” as a floating signifier that externalises responsibility, deflecting attention from platform affordances and hyperpartisan verified accounts. Thiele2025-ol makes the parallel theoretical move: inauthenticity conflates a normatively suspect feature (deception) with the actually problematic one (manipulative intent), and is moreover ill-suited to pseudonymous platforms. Their typology of Coordinated Social Media Manipulation (CSMM) reframes campaigns along observable axes — scale, elaborateness, disguise — that can be linked back to principals via rational-choice attribution. Gaw2025-ru pushes further, recasting influence operations as brokerage embedded in political-economic infrastructures, while Poliakoff2026-fa empirically substantiates this organisational turn by reconstructing the Internet Research Agency from employee CVs as a labour-market actor rather than a covert monolith. Graham2026-fb and Graham2025-gp complete the conceptual loosening from opposite ends: the former shows that “botting” is often participatory culture rather than manipulation, the latter that propaganda exploits, rather than evades, the very infrastructures of truthful discourse.

Methodological Maturation: Multimodal, Temporal, Cross-Platform

A second thread is methodological consolidation around the CooRnet/CLSB tradition while pushing past its limits. Yang2025-iv proposes evasion-resistant signals based on the statistical regularity of link-sharing speed and frequency rather than easily manipulable post timing. Mannocci2025-ig systematically compares operationalisations of multimodal coordination, finding that union flattening — the field’s default — discards structurally important nodes, and advocating multiplex community detection. Iannucci2025-eg integrates this with temporal decay kernels, benchmarking against a 26-dataset corpus and showing that combining time-awareness and multiplexity yields the most robust detection. Minici2024-tf takes the generalisation problem head-on with a graph foundation model (IOHunter) that transfers across campaigns in out-of-distribution settings, while Gerard2025-br (CANE/t-CANE) abandons platform-specific interaction signals entirely, embedding users in latent narrative space to reconstruct cross-platform discourse networks with a small amount of data.

Platform Expansion Beyond Twitter/Facebook

The third thread is a deliberate move beyond the text-centric, API-rich platforms where CLSB research grew up. Luceri2025-tr adapts coordination detection to TikTok’s video-first ecosystem; Rodriguez_Farres2025-sg pushes into real-time detection on decentralised Bluesky; Kuznetsova2025-nu applies forwarding-network analysis to Russian and Belarusian Telegram; Kansaon2025-id adapts Rapid Spread Network methods to encrypted WhatsApp groups in Brazil, linking digital coordination to the January 8th attacks. These platform-specific studies collectively demonstrate that coordination is a transversal phenomenon, but that its observable signatures — reposts, forwards, duets, link shares — are platform-bound and demand methodological adaptation rather than transfer.

What Coordination Does: Reach, Influence, and Effects

A fourth thread asks the harder question of whether coordinated networks actually matter. Appel2026-qr uses the FIES dataset to show that while Meta-identified deceptive networks reached 37 million U.S. Facebook users in 2020, reach was extraordinarily concentrated (three networks ≈ 80%), driven mostly by reshares from non-network accounts, and that apparent effects on factual discernment vanish after controlling for pre-exposure characteristics. Di-Marco2025-aa reaches a structurally compatible conclusion: in retweet cascades, observed coordinated accounts occupy positions statistically indistinguishable from random, far from the strategic placements that would maximise influence. Pante2025-pq similarly tempers claims of inter-state collaboration, arguing prior findings rest on weak indicators and absent controls. Against this deflationary tendency, Efstratiou2026-ij shows that even modestly sized coordinated networks can disproportionately amplify a small set of credentialed contrarian experts and precede news cycles, while Goel2025-iq documents a complementary phenomenon — mainstream articles co-shared with fake news amplify misleading narratives at roughly twice the reach of explicit fake news. The collective picture is that coordination matters less through direct persuasion than through agenda-shaping, narrative seeding, and selective amplification.

Cases and Comparative Politics

A fifth thread fills out the comparative empirical map. Song2025-yh uses CLSB and CooRnet to contrast UK (denser anti-vaccine) and US (denser pro-vaccine) coordinated networks during COVID-19, arguing that CLSB is ideologically agnostic. Jovanovic-Harrington2026-ze shows that Serbia’s SNS exemplifies a decentralised, mimetic form of digital authoritarianism that evades centralised-bot-farm detection logic; Kulichkina2026-zk documents the dual-use character of coordinated activity around the 2022 Chinese COVID protests, where the same affordances supported mobilisation and repression. Oprea2025-lf tracks hyperactive users across all four major Romanian parties in the 2024 European elections, and Zhao2025-ny examines hashtag hijacking as a tactic in attention contests. FitzGerald2025-nv adds the temporal dimension of campaign persistence through event appropriation.

The Emerging Frontier: Generative AI

A final, prospective thread treats LLMs as the next inflection point. Schroeder2026-im sketches the threat model of malicious AI swarms — persistent, adaptive, cross-platform agentic systems that erode the conditions of independent judgment underwriting democratic deliberation. Orlando2025-ul provides empirical traction by simulating LLM-based IO agents, showing that mere teammate awareness suffices to produce coordination signatures nearly identical to explicit collective deliberation — including the very synchrony, narrative homogeneity, and co-amplification patterns that current detectors look for. Read together with the methodological thread, this suggests an impending arms race: the multimodal, temporal, and foundation-model approaches being consolidated now are precisely the tooling that will need to confront emergent rather than scripted coordination in the near future.

A Field in Transition

Across the corpus, three tensions structure the field’s current moment. Conceptually, “inauthenticity” is giving way to manipulation, brokerage, and infrastructural exploitation as organising frames. Methodologically, the CLSB/CooRnet lineage is maturing into multimodal, temporal, cross-platform, and foundation-model architectures, even as platform data access narrows. Substantively, ambitious claims about coordinated networks’ causal influence are being chastened by careful effect estimates and structural placement analyses, while new evidence keeps surfacing about indirect pathways — narrative laundering, agenda-setting, bridge users, and reshare cascades — through which coordination shapes the information environment without dominating it.