In November, Mandiant Threat Intelligence linked UNC1151 to the Belarusian government.
“We cannot rule out Russian contributions to either UNC1151 or Ghostwriter.
The accounts targeted Ukrainians across multiple social networks including on Twitter, YouTube, Telegram, Odnoklassniki and VK.
The company said the web link of fake accounts didn’t have a wide reach.
The social media giant shared information about the operation with other tech platforms, researchers and governments.
The company is reviewing other government requests to do the same in their countries.