Graphika Identifies China-Linked Spamouflage Accounts Active on X Ahead of Midterms

Graphika, a New York-based digital forensics firm, identified active influence operations on the social media platform X linked to the China-backed network known as Spamouflage. The firm released a report on Friday detailing how accounts associated with the network are currently posting content that questions the integrity of upcoming U.S. midterm elections. This activity mirrors tactics previously documented during the 2024 presidential campaign cycle.

The influence campaign has been a persistent target of U.S. intelligence and national security officials for years. While Russia and Iran have often supported specific candidates, observers note that Beijing’s strategy focuses on eroding public confidence in the American electoral process and voting systems generally. The Chinese Embassy in Washington did not immediately respond to requests for comment regarding the new findings.

Darren Linvill, co-director of the Watt Family Innovation Center Media Forensics Hub at Clemson University, has tracked Spamouflage activity for several years. He noted that the network is "famously bad at mimicking real Americans" and operates outside its traditional strengths. Linvill argued there is "no chance it tips the balance in any real political conversation," suggesting the network’s primary utility lies elsewhere.

Linvill explained that the accounts are more effective at suppressing information than driving narratives. The network frequently attacks and harasses members of the Chinese diaspora community as part of a wider effort by Beijing to silence dissenting views. This pattern aligns with the firm’s assessment that the accounts are designed to amplify division and undermine legitimacy rather than advocate for a single policy position.

Graphika’s report highlights specific account behaviors that deviate from their previous profiles. One account, which previously appeared to replace a removed Spamouflage-linked profile, now attacks Democratic Party leadership during the U.S. government shutdown in October 2025 and criticizes immigration policy. The firm also flagged four other accounts with a history of Spamouflage activity that now amplify MAGA-styled personas.

The most prominent target of the new activity is an account with more than 200,000 followers. This profile presents itself as a Philippine culture blog but now posts content that is pro-China and focused on divisive U.S. political issues. Graphika stated it could not determine if this account was hijacked or if the original operator sold or lost control of the handle.

The network’s current operations coincide with the lead-up to the November midterm elections. Analysts continue to monitor these accounts for changes in posting frequency and content focus. The firm’s findings provide a snapshot of how state-linked actors are adapting their digital presence in the final months before voting day.