Ants in a Web
Chinese businessman Guo Wengui is at the center of a vast network of interrelated media entities that have disseminated online disinformation and promoted real-world harassment campaigns.
- Graphika has identified thousands of mostly-authentic social media accounts associated with this network which are active across platforms including Facebook, Instagram, YouTube, Twitter, Gab, Telegram, Parler, and Discord.
- In the last year, this network has promoted harassment campaigns against anti-CCP Chinese dissidents, activists, and other perceived enemies in six countries. These campaigns have been linked to multiple violent incidents.
- Foreign-born participants in Guo’s online and offline operations have been promised political asylum in the United States in exchange for participation.
- Graphika has noted multiple instances of what appear to be coordinated authentic behavior, with real supporters posting with the singular purpose of amplifying Guo-related content.
- The network acts as a prolific producer and amplifier of mis- and disinformation, including claims of voter fraud in the U.S., false information about Covid-19, and QAnon narratives.
- Accounts in the network have used centrally-coordinated tactics to evade enforcement actions by social media platforms.

Graphika is the most trusted provider of actionable open-source intelligence to help organizations stay ahead of emerging online events and make decisions on how to navigate them. Led by prominent innovators and technologists in the field of online discourse analysis, Graphika supports global enterprises and public sector customers across trust & safety, cyber threat intelligence, and strategic communications, spanning industries including intelligence, technology, media and entertainment, and global banking.
Download the complete PDF
The full report includes the complete network graph maps, raw attribution indicators, cross-platform topology analysis, and the full takedown timeline with platform-level data.
- Full network graph visualizations
- Attribution indicators with confidence scores
- Raw behavioral modeling data
- Takedown coordination timeline
Related Reports

#PuppetMaster
How Breadcrumbs From Spamouflage-Linked Assets Led Us to an Accounts-for-Sale Service
Read the Report
Falsos Amigos
Network of Domains and Social Media Accounts Uses AI Tools to Launder Reports From Chinese State Media Outlet CGTN in Multiple Languages
Read the Report
Summit Old, Summit New
Russia-Linked Actors Leverage New and Old Tactics in Influence Operations Targeting Online Conversations About NATO Summit
Read the ReportSee How Graphika Can Help Your Team Act on This Intelligence
This report is one of 600+ investigations Graphika’s team has published. Our platform gives your analysts continuous access to the same intelligence — plus the tools to apply it to your specific threat environment.