Lawyers from the Electronic Frontier Foundation (EFF) are representing three US labor unions in a lawsuit against the Trump administration, challenging a social media surveillance program that they argue infringes on First Amendment rights. The unions claim that the program, which requires nearly all US visa applicants to disclose all social media handles used in the past five years, has had a chilling effect on free speech and union engagement. This policy, implemented under the Trump administration but proposed during the Obama era, also mandates that noncitizens on F, M, and J visas make their social media accounts publicly viewable. The surveillance initiative, known as "Catch and Revoke," is a collaborative effort between the Department of Homeland Security, the State Department, and the Department of Justice, and uses AI to monitor visa holders' social media for expressions of support for Hamas, Palestine, or antisemitism. Individuals found to express views deemed anti-American or non-conforming risk having their visas or immigration benefits revoked. In a related legal development, a federal court in Massachusetts ruled that the executive orders underpinning these surveillance measures were unconstitutional, temporarily halting enforcement actions based on social media activity. The government is expected to appeal this decision. Separately, the Trump administration has been accused of pressuring Facebook to remove a large group page used to track and publicize the locations of ICE agents in Chicago. The Department of Justice contacted Meta after reports that the group, which had over 84,000 members, was being used to dox ICE agents, leading Facebook to remove the group for violating its policies against coordinated harm. Attorney General Pam Bondi stated that the DOJ would continue to work with tech companies to eliminate platforms that could incite violence against federal law enforcement. The White House has claimed a dramatic increase in attacks on ICE officers, though independent reporting has found no public evidence to support the scale of these claims. Meta, Facebook's parent company, confirmed the removal of the group but did not specify the exact policy violation. The actions taken by both the government and social media platforms highlight the intersection of immigration enforcement, online speech, and civil liberties. These developments have raised concerns among advocacy groups about the potential for overreach and the suppression of lawful dissent. The ongoing legal battles and policy debates underscore the contentious nature of social media monitoring in the context of US immigration and law enforcement. Both the surveillance program and the removal of online groups reflect broader efforts by the Trump administration to control narratives and activities related to immigration on digital platforms. The outcomes of these legal and policy actions are likely to have significant implications for privacy, free expression, and the rights of both citizens and noncitizens in the United States.

Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Three US labor unions, supported by the Electronic Frontier Foundation, sued the Trump administration over a social media surveillance program targeting visa holders' online speech. The lawsuit argues the program violates First Amendment rights and has chilled speech and union participation among affected noncitizens and their associates.
A federal court in Massachusetts ruled that executive orders underpinning the Trump administration's social media surveillance program were unconstitutional. The Register reports the government is expected to appeal, but no specific ruling date is given in the reference.
According to Ars Technica, the Trump administration pressured Facebook into removing a group that tracked ICE activity. The reference does not provide a more specific event date, so the publication date is used as the estimate.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.