The arrival of the German ship Catherine at Alexandria Port triggers a cyber targeting campaign
The platform Sahih Masr published a report about the docking of the ship Kathrin at the military pier of the Port of Alexandria on October 28, 2024. This was after the ship had failed to dock at several ports since departing from Haiphong, Vietnam, on July 21, 2024. The report sparked controversy as there were claims that the ship was carrying 60 containers of TNT explosives allegedly en route to Israel. These allegations provoked mixed reactions.
Subsequently, Sahih Masr released an additional report revealing that the ship had unloaded part of its cargo at an Albanian port before continuing to Alexandria. However, the report did not specify the ship’s final destination or the fate of the remaining cargo.
Amid the debate, a targeting campaign was launched against Egyptian activists and politicians, including Hamdeen Sabahi and Ahmed Douma. The campaign was fueled by their posts criticizing Egypt's role in the war on Gaza and opposing the ship's docking in Alexandria.
Between October 30 and November 8, 2024, several hashtags gained traction, including #حاكموا_دومة_وصباحي (Prosecute Douma and Sabahi), which featured over 2,000 posts viewed approximately 223,000 times and generated 6,183 interactions (likes, shares, and replies).
According to statistics from Meltwater, a leading social media analytics company, these posts reached an estimated audience of nearly three million accounts.
The hashtag peaked on November 1, 2024, driven by 906 posts in a single day. The sudden surge in activity is one of the key indicators of potential inauthentic activity.
Periods of Activity for the Hashtag #حاكموا_دومة_وصباحي (Prosecute Douma and Sabahi) – Meltwater
A total of 716 accounts participated in activating the hashtag #حاكموا_دومة_وصباحي (Prosecute Douma and Sabahi). Accounts with a long history of engaging in pro-government political propaganda and orchestrating smear campaigns against critics played a significant role in launching and promoting the hashtag. Some of these accounts have tens of thousands of followers and feature profile pictures of President Abdel Fattah El Sisi, Egyptian flags, and nationalist slogans.
Meltwater identified only 76 original posts under the hashtag—content written directly by accounts, as opposed to reposts. Within the first five hours of the hashtag’s launch, 51 original posts were recorded. The first post appeared at 11:06 PM on October 31, 2024, by the account @hany20el. This account was created in October 2018 and has posted over 2,000 tweets since. A review of its activity suggests it may be part of a coordinated effort, as the majority of its posts are retweets aligned with specific agendas.
A screenshot of the first post on the hashtag, published by the account Hany El Shazly.
Ten minutes after the first post, the hashtag saw activity from the account "El Maestro," also known as Bassem Al Masry or, in another alias, Bassem Bekhit—one of the coordinators of organized propaganda campaigns in Egypt. Bassem manages multiple accounts on social media platforms. When one account faces disruption or temporary suspension, he switches to his other accounts to continue his activity. His main account (@bassembekhitt) has over 92,000 followers and contributed 129 posts to the hashtag. Typically, his posts serve as the launchpad for online campaigns. Although the initial post this time came from the account @hany20el, there are clear connections between the two accounts in coordinating campaigns, as evidenced by their mutual interactions.
A screenshot of interaction between the accounts of Al-Maestro and Hany El-Shazly, commenting on the news about the ship.
Responses to the posts made up 48% of total published content, equaling 964 posts, while reposted tweets accounted for 40.2%, or 807 posts. Together, responses and retweets comprised more than 88%, a high percentage that suggests coordinated activity, compared to only 3.8% of original posts.
An analysis of the impressions associated with the hashtag’s content reveals a strong push in one direction, with a dominant negative tone, accounting for 85.5%—or at least 1,720 posts—according to Meltwater.
Engagement Statistics for the Hashtag from the Meltwater Tool
In his first post under the hashtag, Bassem shared an old photo of activist Ahmed Douma holding a rifle alongside a fighter in Gaza. The image was accompanied by inciting remarks calling on security forces to arrest the activist on charges of "spreading rumors," due to his posts about the ship Kathrin on social media.
Bassem wrote: "What's going on‼️ How are these people allowed to remain unchecked? [The Ministry of] Interior must charge them with spreading rumors to cause confusion!"
It’s important to note that the photo of Ahmed Douma was taken during a previous visit with a group of activists, journalists, and Egyptian politicians to Gaza during the final years of former President Hosni Mubarak’s rule, when the Gaza Strip was facing heavy Israeli strikes.
In August 2023, a presidential pardon was granted to Douma after serving ten years in prison for his involvement in the "Cabinet Events" case from 2011.
A screenshot from El Maestro's account on X showing what he wrote about Douma and Sabahi.
Another inciting post was published by @difrawy150277. Notably, the account was able to publish a large number of posts within a short period, totaling more than 175,000 tweets, despite being newly created in July 2023.
Arabi Facts hub identified two other accounts using the same profile picture, sharing the same type of posts and campaigns, and circulating within the same network of " El Maestro" accounts. The oldest of these accounts was created in December 2020, and the most recent in September 2023.
Screenshots of similar accounts on X that amplify propaganda campaigns.
Through the hashtag, the attack extended to other activists, including Alaa Abdel Fattah, his mother Dr. Laila Soueif, and activist Wael Ghonim. For example, the account @bntmy4540 wrote on the hashtag: "For 14 years, the Egyptian youth believed that these people were 'the flowers that bloomed in Egypt's gardens.' Why is decay always associated with the left? I mean, if you shower, will the traces of opposition wash away or what? Now I know why I'm holding onto Sisi and the army with all my might and won't let even if it kills me."
Post “Against Egyptian Opposition” on the Bnt Masr Account on X.
Media outlets affiliated with the United Media Services company, which controls the majority of media in Egypt, joined the attack, directing criticism at Ahmed Douma, former presidential candidate and politician Hamdeen Sabahi, and writer Belal Fadl.
On TEN TV, broadcaster Nashaat El Deehy attacked Douma, Sabahi, and others who criticized the docking of the Kathrin, saying: "Go ask the Palestinians what Egypt is offering to the factions, the people, and the Palestinian state." He described their statements as "deceptive."
A screenshot from the Facebook page of broadcaster Nashaat El Deehy's program.
A day after the hashtag appeared, Dina El Mokadem, a member of the Coordination Committee of Youth of Political Parties, filed a complaint with the Public Prosecutor against Douma, accusing him of "spreading rumors that threaten public security and instill fear among citizens, which could harm the public interest." She called for "stricter penalties... considering the crime was committed during a time of war," according to her statement.
Following the complaint, the Supreme State Security Prosecution summoned Ahmed Douma without specifying the reason for the summons. He was later released on bail of EGP20,000. According to human rights lawyer Khaled Ali, Douma was charged with spreading false news about information regarding the ship Kathrin in Alexandria port, as well as the Israeli warship that passed through the Suez Canal.