The Russian social network VKontakte is showing a new trend in the past week.
It’s been the subject of widespread controversy and an investigation into Russian election meddling.
But a new report from cybersecurity firm FireEye suggests VKontaks posts to the site have also been linked to a string of online phishing attempts, which could have been made to obtain the personal information of millions of people.
FireEye analyzed the posts that VKontaxes users had posted since January 1, 2016.
Fireeye’s report shows that more than 6,000 of the posts were made to VKontas VKontake forum.
In addition, more than 1,200 posts had been posted to VK.com and Facebook, FireEye said.
FireStrike, the company that analyzed the VKontalk posts, said it was not able to determine which posts were the intended targets or whether the accounts were compromised.
“In some cases, the posts appeared to be genuine, but in others, they were not,” the company said.
A post on an VKontask account shows the Russian language post code.
FireEye did not identify the people who were likely victims of the Russian phishing campaign.
It said that more information about the posts is likely to come from the investigations into the phishing attacks.
In April, a Russian hacker group that uses the name Fancy Bear published an analysis of more than 2 million Facebook posts.
Fancy Bear is also suspected of being behind the 2016 hacking attacks on the Democratic National Committee.
“We’ve seen a lot of similarities between these Russian-linked posts and posts on other VKontakis forums,” FireEye’s Mattias Ekström said.
“The posts in particular, in our analysis, have the potential to contain a lot more sensitive information than a typical Facebook post.”
In one post, a person with the username “mike” posted a link to a video of a Russian propaganda video called “Dirty War.”
In the video, a masked figure can be seen firing a gun in the background, and people in the audience can be heard saying, “Dude, stop!”
In another post, the account “kryz” posted what appeared to an advertisement for an upcoming sale, which it called “Stalker Killer.”
FireStrike found that VK.co, VKontix, and Facebook also posted to these VKontaki posts.
Firestrike also found that there were several posts that appeared to have been deleted.
In one post on VKontexk.com, a user called “vladimir” posted links to a fake advertisement for a product called “Vodka for the Face.”