top of page

Different tragedies, same malicious narrative

  • Writer: Brandon Abrams
    Brandon Abrams
  • Dec 23, 2025
  • 2 min read

Immediately following the terrorist attack on Bondi beach in Sydney, Social media was flooded with stories surrounding the attack. One narrative which received especially high reach and engagement was the claim that one of the attackers' names spiked on google search in Israel and Australia, before the attack even took place. 


This false claim, supported by doctored Google search screenshots, suggests that Israeli and Australian authorities were aware of the attack and chose not to stop it, or even worse, planned it. 


False-flag narratives are a hallmark of FIMI (Foreign Information Manipulation and Interference)., but this specific “spike in search” narrative felt familiar for us, so we digged in a bit deeper   



Bondi Beach 


The first instance of this claim detected by our platfrom came from X user Hidden_Archievz a small account who maintains a presence across various social media profiles.


A tweet shows a driver's license next to search trend graphs. The text speculates about a search spike on "Bondi shooters" before an attack.

The post was quickly picked up by major X influencer Sulaiman Ahmed (who quoted hidden archievz as the source of the claim in his comments), where it received over 2.2 million views, and 3.4k shares. The claim that continued to spread, we detected hundreds of instances and variations of this claim, receiving millions of views overall.


Phone displaying a driver's license and search trend graphs. Text mentions Bondi Beach shooting and search spikes on Israeli and Australian Google.
Tweet by Sulaiman Ahmed mentions Source: @Hidden_Archivez. Shows interaction stats: 30 comments, 20 retweets, 302 likes, 204K views.

We knew we saw this narrative before in other investigations, so we ran a similar narrative analysis across other use cases. This narrative was familiar from prior investigations, prompting us to conduct a similar analysis of the narrative across additional use cases.We found out that this is not the first (or even the 2nd!) time that this narrative has been pushed over the last few months. Brinker’s platform detected multiple variations of this narrative in connection with different assassinations and attacks


Charlie Kirk’s murder


Charlie Kirk’s murder on September 10th also sparked a wave of misinformation online. Once the name of Kirk’s killer went public, users started to claim that the shooter’s name and address were searched on google before the shooting. Some users claimed that searches for the shooter spiked in May, months before the shooting happened. Again supported with screenshots of trend graphs to amplify believability.  


Tweet by FrancescoTM with Google Trends chart for "Losee Center." Interest spikes in the US and Israel at different times.
Tweet by Tom Shanklin questioning searches related to an alleged shooter. Mentions honoring Mr. Kirk's memory. Includes timestamp and views.

US DC National Guard Shooting


Immediately following the attack on US National guardsmen in Washington DC on November 26th,users online claimed that the shooter's name was heavily searched in both Washington DC and Israel prior to the attack, with some users claiming that this was proof of a combined CIA and Mossad false flag operation.


Tweet by Skittle Man discussing conspiracy theories about an Afghan shooter, CIA, and Israel. Timestamp: 3:09 AM, Nov 28, 2025.


A Facebook post with conspiracy text about a DC shooter, CIA, and Google search activity. Image shows search trend graphs and user reactions.


These "search spikes" narratives were repeatedly spread and proved to be highly shareable. Claims were framed as statistical, irrefutable, and contained graphs, leaving no room for objectivity for viewers, requiring them to conduct additional research. Furthermore, these types of narratives shift the blame from the attackers onto the victims and aim to create chaos and distrust in the aftermath of horrifying events. 


Based on the above findings, and other similar instances,  it is our recommendation to monitor for this Google spike narrative shortly after terrorist attacks and hate crimes to identify its onset and the malicious actors perpetrating it.

See it in Action
Talk to us. 

One of our represntaitves will be in touch soon

Disinformation Threat Mitigation 

Brinker is an end-to-end disinformation threat mitigation platform that serves the public sector and major enterprises. It combats disinformation attacks and influence campaigns, using proprietary narrative intelligence technology, AI-enabled detection, and automated OSINT investigations.

Address: 398 Kansas Street
San Francisco, CA 94103

  • LinkedIn
bottom of page