Dozens of Facebook accounts posting near-identical messages within minutes of each other have drawn attention after a pattern of coordinated activity emerged in discussions defending the Department of Information and Communications Technology, according to a report presented by PGMN Anchor Ann Cuisia.
Watch the full video here:
Her coverage examined comment sections on a Politiko Facebook post involving allegations tied to a Department of Information and Communications Technology – DICT undersecretary and a cybersecurity procurement linked to preparations for the 2026 ASEAN Summit. Cuisia said the comments initially appeared as ordinary public reactions, but a closer review identified repeated behavioral signals across multiple accounts.
A significant number of profiles posting pro-DICT comments were created within a narrow window, with many traced to February 2025. The accounts showed minimal activity, often limited to a few posts per month, and lacked detailed personal timelines. Several profiles did not display the typical interaction patterns seen in regular users, such as consistent engagement with friends or varied content over time.
Clusters of accounts were also identified through overlapping friend networks, suggesting that many of the profiles operated within a shared ecosystem rather than as independent users. Activity patterns showed that multiple comments were posted in quick succession, often within minutes of each other, with similar tone, structure, and emoji usage.
Additional indicators included the use of ZohoMail addresses for account recovery among some profiles. A Facebook account based in Cebu City was also observed repeatedly tagging large groups of users in single posts, at times reaching dozens of accounts in one instance. Many of those tagged accounts later appeared in comment sections defending the DICT.
Cuisia noted that this tagging behavior may be used to activate or identify accounts within a network prior to coordinated engagement. When viewed alongside synchronized posting, clustered connections, and uniform messaging, the combined patterns align with characteristics commonly associated with coordinated online networks described as troll farms.
She also clarified that the analysis did not present direct evidence linking the DICT to the creation or operation of the accounts involved, and that the findings are limited to observable behavioral patterns.
Her report also referenced ongoing public discussions surrounding several DICT-related proposals, including mandatory social media user verification, potential geo-blocking of platforms that do not comply with regulatory requests, and possible restrictions on messaging applications.
