Search

𝗧𝗵𝗲 $𝟰𝟯 𝗺𝗶𝗹𝗹𝗶𝗼𝗻 𝗿𝗼𝘆𝗮𝗹 𝗲𝘀𝘁𝗮𝘁𝗲 𝘁𝗵𝗮𝘁 𝗭𝗲𝗹𝗲𝗻𝘀𝗸𝘆𝘆 𝗻𝗲𝘃𝗲𝗿 𝗯𝗼𝘂𝗴𝗵𝘁 A Norwegian royal residence, a $43 million price tag, an offshore company historically linked to Volodymyr Zelenskyy and a video apparently produced by the American entertainment outlet E! News. The story contained enough authentic details to look plausible. It was also fabricated. At the end of September 2026, social-media accounts began circulating a video claiming that Film Heritage Inc., a Belize-registered company with historical links to Zelenskyy and his family, had purchased the Norwegian royal estate of Skaugum for approximately $43 million. The property was described as covering 240 acres, while the supposed transaction was linked to Zelenskyy’s visit to Norway for the funeral of King Harald V. Independent investigations found no evidence that such a sale had ever taken place. 𝗔 𝗳𝗮𝗸𝗲 𝗿𝗲𝗽𝗼𝗿𝘁 𝗯𝘂𝗶𝗹𝘁 𝗮𝗿𝗼𝘂𝗻𝗱 𝗿𝗲𝗮𝗹 𝗲𝘃𝗲𝗻𝘁𝘀 The fabrication was carefully constructed around genuine information. King Harald V had died in August 2026, and Zelenskyy and First Lady Olena Zelenska travelled to Oslo for his funeral on 9 September. Skaugum is also a genuine royal estate in Asker with a long history as a residence of Norway’s heir to the throne. The false report turned those facts into a fictional property transaction. It claimed that Zelenskyy had previously attempted to buy the estate, that the Norwegian royal family had rejected an earlier approach and that the purchase had finally been completed after the property supposedly became a financial burden. No documentary evidence supporting any of these claims has emerged. Norway’s Ministry of Foreign Affairs later confirmed to fact-checkers that the allegation was false. Searches of established Norwegian and international media also produced no credible reporting about the supposed transaction. 𝗔 𝗻𝗲𝘄𝘀𝗿𝗼𝗼𝗺 𝘁𝗵𝗮𝘁 𝗲𝘅𝗶𝘀𝘁𝗲𝗱 𝗳𝗼𝗿 𝘁𝘄𝗼 𝗱𝗮𝘆𝘀 The most important part of the operation was not the property claim itself. It was the source apparently verifying it. The video was designed to resemble an E! News report, borrowing the visual language of the established American entertainment brand. But investigators found no such story on E! News’s genuine website, social-media channels or archived pages. Instead, the accompanying article appeared on eonline.news, a domain closely resembling E! News’s legitimate eonline.com address. Registration records showed that the imitation domain had been created on 27 September 2026 — only two days before the story was published. The accompanying video also showed signs of synthetic production. Fact-checkers examining the material identified indications that AI tools had been used in the narration and audiovisual elements. The operation therefore did not simply invent a news story. It created an apparently credible media environment around it. 𝗧𝗵𝗲 𝗿𝗲𝗮𝗹 𝗰𝗼𝗺𝗽𝗮𝗻𝘆 𝗶𝗻𝘀𝗶𝗱𝗲 𝘁𝗵𝗲 𝗳𝗮𝗹𝘀𝗲 𝘀𝘁𝗼𝗿𝘆 The supposed buyer was also carefully selected. Film Heritage Inc. was not invented for the fabrication. The Pandora Papers previously documented a genuine historical connection between the Belize-registered company and Zelenskyy’s former business network. Leaked documents showed that Zelenskyy and his wife had held an interest in another offshore company through Film Heritage before changes were made to the ownership structure around his 2019 presidential campaign. That authentic history gave the new fabrication an additional layer of plausibility. The same company name has previously appeared in false narratives alleging extravagant purchases by Zelenskyy, including supposed luxury-property and casino acquisitions. Those stories were also unsupported by evidence. This illustrates a recurring feature of effective disinformation: not every component has to be false. A genuine company can be combined with a genuine trip, a genuine property and a genuine media brand to manufacture an event that never occurred. 𝗧𝗵𝗲 𝗠𝗮𝘁𝗿𝘆𝗼𝘀𝗵𝗸𝗮 𝗰𝗼𝗻𝗻𝗲𝗰𝘁𝗶𝗼𝗻 Ukraine’s Center for Countering Disinformation assessed the operation as consistent with the Russian Matryoshka disinformation playbook. The technique strongly resembles previously documented Matryoshka activity: impersonating established Western media organisations, creating fabricated video reports and distributing them through coordinated or pro-Russian social-media networks. French authorities have documented Matryoshka since 2023 as a pro-Russian influence operation targeting media organisations, public figures and fact-checkers. Investigations have shown repeated use of counterfeit reports imitating major European and North American news brands. The Norwegian-estate story fits that pattern closely. The attribution nevertheless requires precision. Independent evidence establishes that the E! News report was fake, that a newly created imitation website was involved and that the story circulated through pro-Russian information channels. Publicly available forensic evidence does not yet identify a specific individual or technical operator who created this particular asset. It is therefore more accurate to describe the Matryoshka connection as a well-supported analytical attribution rather than a publicly proven chain of command. 𝗪𝗵𝗲𝗻 𝘁𝗵𝗲 𝘀𝗼𝘂𝗿𝗰𝗲 𝗯𝗲𝗰𝗼𝗺𝗲𝘀 𝘁𝗵𝗲 𝗱𝗲𝗲𝗽𝗳𝗮𝗸𝗲 The most important element of the operation is not really the $43 million figure. It is the construction of credibility around it. A genuine royal funeral supplied the timing. A genuine Norwegian estate supplied the location. A genuine offshore company supplied a documented connection to Zelenskyy. A counterfeit E! News website supplied apparent journalistic confirmation. Synthetic audiovisual material supplied what looked like additional evidence. Each element reinforced the others. This reflects a broader change in contemporary disinformation. The most sophisticated operations no longer rely exclusively on fabricating photographs, videos or statements. Increasingly, they fabricate the source that supposedly verified them. The deepfake is sometimes the entire newsroom! 𝗦𝗼𝘂𝗿𝗰𝗲𝘀 Lead Stories — investigation into the fake E! News report https://leadstories.com/hoax-alert/2026/10/fact-check-enews-did-not-publish-report-about-zelenskyy-buying-43-million-dollar-mansion-from-norways-royal-family.html Center for Countering Disinformation of Ukraine — Norwegian royal estate fabrication https://cpd.gov.ua/en/international-threats-en/europe/fake-about-zelenskyys-purchase-of-a-norwegian-royal-family-estate/ Ellinika Hoaxes — investigation and Norwegian government response https://www.ellinikahoaxes.gr/2026/10/09/agorase-o-zelenski-ektasi-240-stremmaton-apo-ti-vasiliki-oikogeneia-tis-norvigias-gia-43-ekatommyria-dolaria/ The Royal House of Norway — funeral of King Harald V https://www.royalcourt.no/news/the-funeral-of-king-harald-v The Royal House of Norway — Skaugum and the Royal Estates https://www.royalcourt.no/the-royal-court/the-departments-the-royal-court/the-royal-estates-and-parks President of Ukraine — Zelenskyy and First Lady attend King Harald V’s funeral https://www.president.gov.ua/en/news/prezident-ukrayini-ta-persha-ledi-vzyali-uchast-u-ceremoniyi-106293 OCCRP — Pandora Papers investigation into Zelenskyy’s offshore network https://www.occrp.org/en/project/the-pandora-papers/pandora-papers-reveal-offshore-holdings-of-ukrainian-president-and-his-inner-circle AFP Fact Check — previous false luxury-purchase narrative involving Film Heritage https://factcheck.afp.com/doc.afp.com.36PG6EC VIGINUM / SGDSN — Matryoshka technical report https://www.sgdsn.gouv.fr/files/files/20240611_NP_SGDSN_VIGINUM_Matriochka_EN_VF.pdf CheckFirst — Operation Overload / Matryoshka investigation https://checkfirst.network/operation-overload-an-ai-fuelled-escalation-of-the-kremlin-linked-propaganda-effort/ Keywords #DISINFORMED #Episode19 #Zelenskyy #Ukraine #Norway #Russia #RussianDisinformation #RussianInfluence #Matryoshka #OperationOverload #Disinformation #InfluenceOperations #InformationWarfare #FIMI #MediaImpersonation #FakeMedia #ClonedWebsite #FakeNewsroom #ENews #ArtificialIntelligence #AI #AIGeneratedContent #VoiceCloning #SyntheticMedia #Deepfake #SourceLaundering #NarrativeLaundering #FilmHeritage #PandoraPapers #Skaugum #NorwegianRoyalFamily #Propaganda #DigitalInfluence #FactChecking #VIGINUM #OSINT #MediaManipulation #WRLD

Fake NV – how a cloned newsroom turned an AI video into a $140 million corruption scandal For two days in September, a website that looked almost indistinguishable from one of Ukraine’s best-known news organisations carried an extraordinary corruption story. It claimed that Ukraine’s National Anti-Corruption Bureau had raided former defence procurement chief Arsen Zhumadilov and discovered more than $140 million in cash packed inside refrigerator boxes. One box supposedly carried the words “For the Servant of the People” – an apparent reference to President Volodymyr Zelenskyy’s political party. The raid never happened. The photographs and video presented as evidence were fabricated, and the news organisation reporting the story was not the New Voice of Ukraine but a cloned version of it. The episode is a compact example of an increasingly effective disinformation technique. Rather than inventing a new propaganda outlet and trying to build its credibility from scratch, an operator can simply steal the identity of an established newsroom and place fabricated material inside an otherwise convincing copy of its editorial environment. A newsroom copied almost in full The counterfeit site appeared at nvukraine.com, while the authentic New Voice of Ukraine operates at nv.ua and english.nv.ua. Registration records examined by fact-checkers show that the false domain was created on 21 September 2026, two days before the fabricated article appeared. According to NV’s own investigation, the imitation went much further than copying a logo: the operators reproduced the site’s visual design, sections, branding, contact information and genuine editorial material. A snapshot of legitimate NV content from 23 September appears to have been copied onto the counterfeit site, into which the operators inserted a single false article. That article claimed that NABU had searched premises connected to Zhumadilov, who had headed Ukraine’s Defence Procurement Agency until August, and seized $140 million in cash. The story was published in several languages, including Ukrainian and English, suggesting that the operation was intended not only for Ukraine’s domestic information space but also for foreign audiences following the war and Western support for Kyiv. AI supplied the supposed evidence The false article was supported by a video purportedly showing the money discovered during the raid. NABU said no such search or procedural action had taken place and identified the footage as fabricated using artificial intelligence. Independent fact-checker Lead Stories found no credible Ukrainian or international reporting confirming either the raid or the alleged seizure, while searches of NABU’s own published material produced no evidence supporting the claim. The operation therefore combined two separate forms of synthetic credibility. The AI-generated footage supplied what looked like visual proof, while the cloned NV website supplied institutional proof: an apparently reputable Ukrainian newsroom supposedly confirming that the event had happened. Neither element needed to withstand close scrutiny for long. Together, they only needed to appear credible enough to be copied, quoted and redistributed before the deception was exposed. From a fake Ukrainian source into the Russian information ecosystem On 24 September, the story began moving through large pro-Russian Telegram channels. Ukraine’s Center for Strategic Communications traced early amplification to Golos Mordora, with roughly 149,000 subscribers, and Militarist, with around 277,000. Within less than an hour, other channels including VOBLA, Rossiya Seychas and Ostashko! Vazhnoye were circulating versions of the same claim. It subsequently appeared on X and on Russian-language websites including e-news.su and pressa24.ru. Babel calculated that posts carrying the fabrication had accumulated approximately 370,000 views by the morning of 25 September. The story also moved beyond the Russian-language ecosystem. English-language versions appeared in online communities including Lemmy and Hexbear, while accounts on X shared direct links to the counterfeit NV article. NV later reported that larger Russian media and propaganda outlets, including RIA Novosti, Life, Vesti, Ukraina.ru and Mail.ru, had reproduced or discussed the claim. Kirill Dmitriev, head of the Russian Direct Investment Fund and a Kremlin representative involved in contacts with the United States, also shared it on 25 September. This amplification is significant, but it should not be confused with proof of authorship. Publicly available evidence shows how the false story entered and spread through a Russian and pro-Russian information ecosystem. It does not establish which organisation registered the cloned domain, generated the video or directed the operation from the outset. Why copy NV? The operation relied on source laundering. A claim originating directly from a Russian Telegram channel that Ukraine’s defence procurement system had concealed $140 million would immediately carry an obvious political context. A claim apparently uncovered by an established Ukrainian newsroom looks very different. Once the fabricated NV article existed, subsequent accounts could cite what appeared to be an independent Ukrainian source rather than present the allegation as their own. Each repost moved the story another step away from its manufactured origin. The use of an English-language version strengthened that mechanism for audiences outside Ukraine. The underlying narrative was also carefully chosen. Corruption in Ukrainian defence procurement is a genuine subject of public scrutiny and investigative reporting, so the fabricated story did not require audiences to accept an entirely unfamiliar premise. It inserted a false event into a real area of political concern. That mixture of authentic context and fabricated evidence can be more persuasive than a completely invented story because much of the surrounding information feels recognisable. What can – and cannot – be attributed Ukrainian authorities and NV describe the episode as a Russian information operation, and its distribution can be documented extensively across pro-Russian and Russian media channels. The available public evidence, however, does not identify the organisation that created the counterfeit website, nor does it link the operation forensically to a named Russian intelligence service, military unit or state contractor. The most precise description is therefore a Russian-aligned disinformation operation whose fabricated material was systematically amplified through the Russian information ecosystem. That distinction matters. Distribution can be observed directly; command-and-control is harder to establish and should not be inferred without evidence. The newsroom itself becomes the deepfake The most important feature of the operation was not the $140 million figure or even the AI-generated video. It was the counterfeit newsroom surrounding them. The operators copied a real publication, populated it largely with genuine material and inserted a single false story, allowing the fabrication to borrow the accumulated credibility of journalists who had nothing to do with it. This points to a broader evolution in synthetic media. AI can fabricate an image, a voice or a video, but an influence operation can now fabricate something larger: the source that supposedly verified the evidence. In the Fake NV operation, the article, the video and the website reinforced one another, creating not simply a false story but a manufactured chain of credibility. Sources The New Voice of Ukraine — investigation into the cloned website https://english.nv.ua/nation/nv-discovers-fake-copy-of-website-with-planted-story-cites-russian-links-50644601.html The New Voice of Ukraine — Russian amplification of the $140 million fabrication https://english.nv.ua/russia-spreads-fake-140-million-ukraine-corruption-story-during-dmitriev-u-s-talks-50644647.html Lead Stories — independent fact-check https://leadstories.com/hoax-alert/2026/09/fact-check-fake-story-claims-140-million-found-at-home-of-ukraines-zhumadilov-marked-servant-of-the-people-nv-website-originated-it.html Babel — AI video and distribution analysis https://babel.ua/en/news/130469-a-video-is-sharing-online-about-140-million-found-in-the-possession-of-the-ex-head-of-the-defense-procurement-agency-this-is-an-ai-video-distributed-by-a-clone-of-ukrainian-media Center for Strategic Communications and Information Security — initial debunk https://spravdi.org/en/ai-fake-about-140-million-amid-us-talks-how-russians-impose-the-image-of-corrupt-ukraine-on-the-west/ Center for Strategic Communications and Information Security — NABU confirmation https://spravdi.org/u-merezhi-poshyryuyut-shi-fejk-pro-nibyto-obshuky-nabu-v-eksgolovy-agencziyi-oboronnyh-zakupivel/ Detector Media — distribution and NABU response https://detector.media/infospace/article/252806/2026-09-25-u-merezhi-pidrobyly-sayt-nv-dlya-poshyrennya-feyku-pro-obshuky-v-eksochilnyka-agentsii-oboronnykh-zakupivel/ Keywords #DISINFORMED #Episode10 #FakeNV #NewVoiceOfUkraine #Ukraine #Russia #RussianDisinformation #RussianInfluence #Disinformation #InformationWarfare #InfluenceOperations #ForeignInterference #FIMI #MediaImpersonation #ClonedMedia #FakeMedia #FakeNews #ArtificialIntelligence #AI #AIGeneratedContent #SyntheticMedia #AIVideo #SourceLaundering #NarrativeLaundering #CorruptionNarrative #UkraineCorruption #DefenceProcurement #NABU #ArsenZhumadilov #Telegram #SocialMediaManipulation #DigitalInfluence #Propaganda #OSINT #MediaManipulation #WRLD

Today, we fined AliExpress €550M for breaching its obligations under the Digital Services Act to diligently assess and mitigate risks relating to the sale of illegal, unsafe or counterfeit products on its e-commerce platform. 🔗https://t.co/U88x3yCgC1 https://t.co/O8UaAYnkNf #AliExpress #DigitalServicesAct #EcommerceRegulation #EU #ES

🚨 OMG. A MASSIVE India H-1B visa fraud ring has just been busted...nearly 90% PERCENT of India's visa applications contain FRAUDULENT INFORMATION 100,000 THOUSAND counterfeit certificates have been seized 🤯 "Law enforcement in India claim it has uncovered a network of universities that produce fake degrees which were possibly used to obtain these high skilled H1B visas, including one school which allegedly stole over 36,000 fake degrees. It cost as little as $1,400 for one of those." "And while these are supposed to be high skilled employees during almost all of Biden's time in office, 83% got junior or entry level positions." This is INSANE! SHUT DOWN THE H-1B SCAM! https://x.com/EricLDaugh/status/2063272469301965232

Wie erwartet: Russland lenkt ukrainische Drohnen mit Spoofing auf NATO-Gebiet um: "From Kaliningrad, Russian transmitters broadcast counterfeit satellite signals strong enough to seize a drone’s navigation in flight, feed it false coordinates and send it off course. Lithuania counted 36 of those spoofing transmitters this week, up from three at the start of 2025, reaching 450 kilometers (280 miles) across the region, according to Reuters." #Russland #Drohnen #NATO

Nazi Germany's Operation Bernhard, the largest counterfeiting scheme in history, sought to undermine the British economy using forged banknotes made by Jewish prisoners in a concentration camp, a story that has inspired a new exhibition featuring these notes and aims to raise awareness about this dark chapter in history. #History #Counterfeiting #Holocaust #DE #GB #AT #MA

Nazi Germany's Operation Bernhard, an extensive counterfeiting scheme aimed at destabilizing the British economy through fake banknotes, is now the focus of a new exhibition showcasing these forgeries, which were produced under horrific conditions by Jewish prisoners in concentration camps, highlighting a dark chapter in history that intersects with contemporary culture as elements of the operation are featured in the Peaky Blinders series. #History #Counterfeiting #NaziGermany #DE #GB #HU #AT #MA

The article discusses Operation Bernhard, a Nazi counterfeiting scheme during World War II that aimed to destabilize the British economy by producing fake banknotes, and highlights a new exhibition showcasing some of these forged notes, revealing the overlooked historical significance and the tragic story of the Jewish prisoners forced to create them. #Counterfeiting #History #Holocaust #DE #GB #AT #MA

The article details Nazi Germany's Operation Bernhard, the largest counterfeiting scheme in history, which involved forcing Jewish prisoners to create fake British banknotes in an attempt to destabilize the British economy; although ultimately unsuccessful, the operation resulted in thousands of genuine notes being withdrawn from circulation, and several counterfeit notes are now on display in an exhibition inspired by these events, highlighting their historical significance and connection to the Holocaust. #OperationBernhard #Counterfeiting #History #DE #GB #AT #HU #MU

The article highlights the alarming trend of individuals in the UK suffering severe health issues or even death after using illegal weight loss injections, known as "skinny jabs," due to strict NHS access and affordability issues, prompting concerns from medical experts about the risks associated with counterfeit and shared medications. #WeightLoss #HealthRisks #ObesityTreatment #GB

Interpol's global operation has seized 6.42 million doses of counterfeit and unapproved medicines worth $15.5 million, with the UK leading in intercepted doses and highlighting the dangers of illegal online drug sales that put public health at risk. #CounterfeitMedicine #OnlineFraud #PublicHealth #GB #CO #AU #IN #US #EU

Interpol has seized 6.42 million doses of counterfeit and unapproved medicines worth $15.5 million in a global operation across 90 countries, highlighting the serious health risks posed by illegal online drug sales and the exploitation of regulatory gaps by organized criminal groups. #CounterfeitMedicine #OnlinePharmacy #DrugSafety #UK #CO #AU #IN #US #EU