Large language models can consistently generate high-quality content for election disinformation operations
Not on the map. Why?
Abstract (arXiv)
Advances in large language models have raised concerns about their potential use in generating compelling election disinformation at scale. This study presents a two-part investigation into the capabilities of LLMs to automate stages of an election disinformation operation. First, we introduce DisElect, a novel evaluation dataset designed to measure LLM compliance with instructions to generate content for an election disinformation operation in localised UK context, containing 2,200 malicious prompts and 50 benign prompts. Using DisElect, we test 13 LLMs and find that most models broadly comply with these requests; we also find that the few models which refuse malicious prompts also refuse benign election-related prompts, and are more likely to refuse to generate content from a right-wing perspective. Secondly, we conduct a series of experiments (N=2,340) to assess the "humanness" of LLMs: the extent to which disinformation operation content generated by an LLM is able to pass as human-written. Our experiments suggest that almost all LLMs tested released since 2022 produce election disinformation operation content indiscernible by human evaluators over 50% of the time. Notably, we observe that multiple models achieve above-human levels of humanness. Taken together, these findings suggest that current LLMs can be used to generate high-quality content for election disinformation operations, even in hyperlocalised scenarios, at far lower costs than traditional methods, and offer researchers and policymakers an empirical benchmark for the measurement and evaluation of these capabilities in current and future models.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Builds on 26 of its 70 references that are in the map. First posted on arXiv 13 Aug 2024.
Builds on
26 of 70 references.
References · 26
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2023Mistral 7Bcited by 3,164
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2022GPTQ: Accurate Post-Training Quantization for Generative Pre-trained Transformerscited by 1,919
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2022Red Teaming Language Models with Language Modelscited by 1,026
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
- 2020Aligning AI With Shared Human Valuescited by 723
14 more
- 2023Bias and Fairness in Large Language Models: A Surveycited by 639
- 2019Defending Against Neural Fake Newscited by 559
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2022The case for 4-bit precision: k-bit Inference Scaling Lawscited by 251
- 2023PersonaLLM: Investigating the Ability of Large Language Models to Express Personality Traitscited by 234
- 2023Sociotechnical Safety Evaluation of Generative AI Systemscited by 157
- 2022Human heuristics for AI-generated language are flawedcited by 105
- 2014The Rise of Social Botscited by 96
- 2023AI model GPT-3 (dis)informs us better than humanscited by 78
- 2023Machine-Made Media: Monitoring the Mobilization of Machine-Generated Articles on Misinformation and Mainstream News Websitescited by 38
- 2024Tradeoffs Between Alignment and Helpfulness in Language Models with Steering Methodscited by 28
- 2024Comparing the willingness to share for human-generated vs. AI-generated fake newscited by 12
- 2024Evidence of a log scaling law for political persuasion with large language modelscited by 11
- 2024Prompto: An open source library for asynchronous querying of LLM endpointscited by 2
Built on by
Citing papers per year: 2024: 1; 2025: 6; 2026: 7.
14 papers.
Sort:
By area:
- 2024Evaluation of LLM Vulnerabilities to Being Misused for Personalized Disinformation Generationcited by 20
- 2025How malicious AI swarms can threaten democracy: The fusion of agentic AI and LLMs marks a new frontier in information warfarecited by 20
- 2025Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuningcited by 8
- 2025AI Propaganda factories with language modelscited by 4
- 2025Toward a Safer Web: Multilingual Multi-Agent LLMs for Mitigating Adversarial Misinformation Attackscited by 1
- 2026How AI Writing Assistance Distorts Perceptions of AI Users and Their Opinionscited by 1
- 2026HarmProfile: Characterizing Harmful Distributions in Frontier LLMscited by 1
- 2025Do small language models generate realistic variable-quality fake news headlines?cited by 0
- 2025Building Resilient Information Ecosystems: Large LLM-Generated Dataset of Persuasion Attackscited by 0
- 2026SWAN: Semantic Watermarking with Abstract Meaning Representationcited by 0
- 2026InfoOps Bench: A live information operations safety benchmarkcited by 0
- 2026Poli-Bias: Understanding and Measuring Large Language Model Biases in International Political Conflictscited by 0
- 2026CrisisFake: Benchmark Validity of AI-Generated Text Detection for Disaster Social Sensing21 Sep 2026
- 2026Build it, Break it, Repeat: Benchmarking and improving LLM-manipulated disinformation detection in social media posts10 Aug 2026
- 2026Poli-Bias: Understanding and Measuring Large Language Model Biases in International Political Conflicts6 Aug 2026
- 2026InfoOps Bench: A live information operations safety benchmark30 Jul 2026
- 2026HarmProfile: Characterizing Harmful Distributions in Frontier LLMs11 Jun 2026
- 2026SWAN: Semantic Watermarking with Abstract Meaning Representation5 May 2026
- 2026How AI Writing Assistance Distorts Perceptions of AI Users and Their Opinions24 Apr 2026
- 2025Building Resilient Information Ecosystems: Large LLM-Generated Dataset of Persuasion Attacks23 Nov 2025
- 2025Toward a Safer Web: Multilingual Multi-Agent LLMs for Mitigating Adversarial Misinformation Attacks7 Oct 2025
- 2025Do small language models generate realistic variable-quality fake news headlines?31 Aug 2025
- 2025Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning28 Aug 2025
- 2025AI Propaganda factories with language models27 Aug 2025
- 2024Evaluation of LLM Vulnerabilities to Being Misused for Personalized Disinformation Generationcited by 20
- 2025Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuningcited by 8
- 2025AI Propaganda factories with language modelscited by 4
- 2026How AI Writing Assistance Distorts Perceptions of AI Users and Their Opinionscited by 1
- 2025Do small language models generate realistic variable-quality fake news headlines?cited by 0
- 2025Building Resilient Information Ecosystems: Large LLM-Generated Dataset of Persuasion Attackscited by 0
- 2026SWAN: Semantic Watermarking with Abstract Meaning Representationcited by 0
- 2026InfoOps Bench: A live information operations safety benchmarkcited by 0
- 2026Poli-Bias: Understanding and Measuring Large Language Model Biases in International Political Conflictscited by 0
- 2026Build it, Break it, Repeat: Benchmarking and improving LLM-manipulated disinformation detection in social media postscited by 0
- 2026CrisisFake: Benchmark Validity of AI-Generated Text Detection for Disaster Social Sensingcited by 0
- 2026CrisisFake: Benchmark Validity of AI-Generated Text Detection for Disaster Social Sensing21 Sep 2026
- 2026Build it, Break it, Repeat: Benchmarking and improving LLM-manipulated disinformation detection in social media posts10 Aug 2026
- 2026Poli-Bias: Understanding and Measuring Large Language Model Biases in International Political Conflicts6 Aug 2026
- 2026InfoOps Bench: A live information operations safety benchmark30 Jul 2026
- 2026SWAN: Semantic Watermarking with Abstract Meaning Representation5 May 2026
- 2026How AI Writing Assistance Distorts Perceptions of AI Users and Their Opinions24 Apr 2026
- 2025Building Resilient Information Ecosystems: Large LLM-Generated Dataset of Persuasion Attacks23 Nov 2025
- 2025Do small language models generate realistic variable-quality fake news headlines?31 Aug 2025
- 2025Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning28 Aug 2025
- 2025AI Propaganda factories with language models27 Aug 2025
- 2024Evaluation of LLM Vulnerabilities to Being Misused for Personalized Disinformation Generation18 Dec 2024