Search

Storm-1516 – Russia’s information war arrives early in France’s 2027 election France will not elect its next president until April 2027, but the information operations surrounding the campaign have already begun. In late July and August 2026, fabricated stories targeted several prominent figures associated with the presidential race, including Raphaël Glucksmann, Gabriel Attal and former prime minister Édouard Philippe. The methods included fake news websites copying established French media, impersonated journalists, AI-generated voices and manipulated video. French authorities identified the Russian operation known as Storm-1516 behind several of these campaigns. Other attacks were linked to Matryoshka, another Russia-aligned influence network. The timing is significant. Storm-1516 began targeting the French presidential environment roughly nine months before the first round, scheduled for 18 April 2027. Rather than a single disinformation campaign, the activity demonstrates how Russian influence networks can establish narratives and infrastructure long before an election reaches its decisive phase. A fake scandal targeting Raphaël Glucksmann One of the clearest examples appeared at the end of July. A website impersonating the French independent outlet Blast published a fabricated investigation claiming that journalist Léa Salamé had attempted to bribe media organisations in exchange for favourable coverage of her partner, Raphaël Glucksmann. The operation went beyond copying the appearance of a legitimate news site. The identities of real journalists were appropriated and a manipulated video used an AI-generated imitation of the voice of Edwy Plenel, founder of Mediapart, supposedly confirming the allegations. The accusation was false. On 4 August, Glucksmann said France's General Secretariat for Defence and National Security, the SGDSN, had informed him that he had been targeted by Storm-1516. Two days later, the Paris prosecutor's office opened an investigation into suspected Russian interference. The importance of the operation was not the quality of one particular deepfake but the construction of several mutually reinforcing elements: a fake media organisation, impersonated journalists, synthetic audio and social-media accounts distributing the material. Together they created the impression that the allegation had been independently corroborated. Different candidates, overlapping Russian networks Édouard Philippe was also targeted by fabricated stories claiming that he suffered from dementia and was medically incapable of running for president. VIGINUM attributed the operation to Storm-1516. Gabriel Attal faced another wave of false content, including fabricated stories mimicking the identities of French outlets such as RFI, BFM TV, France 24, AFP, Le Parisien, Libération and Le Monde. Some claimed that Attal had symptoms of Parkinson's disease or links to drug trafficking. Attribution here is more complicated. French reporting connected at least part of the campaign against Attal to Matryoshka, rather than Storm-1516. A later digitally manipulated video, apparently associated with Storm-1516, used genuine LCI footage from an August debate but added a white earpiece to Attal, suggesting that someone had secretly been feeding him answers. NewsGuard compared the circulating clip with authentic LCI footage and found no earpiece in the original. The distinction is important. France is not facing a single Russian propaganda operation but several overlapping networks using similar techniques and narratives. Treating every manipulation as Storm-1516 would obscure how this ecosystem actually functions. The real weapon is media impersonation The most interesting feature of Storm-1516 is not artificial intelligence itself. It is the systematic appropriation of the credibility of established journalism. Instead of relying only on anonymous Telegram channels or social-media profiles, operators create material that looks as though it originated from organisations audiences already recognise. A fabricated investigation can resemble Blast, a manipulated television report can borrow LCI's visual identity, while fake journalists and social-media accounts provide additional layers of apparent confirmation. VIGINUM has documented this architecture extensively. Its 2025 investigation analysed 77 Storm-1516 information operations and described a mature Russian system using fabricated media, websites and distribution networks to promote anti-Ukrainian and anti-Western narratives. The European External Action Service found that the infrastructure continued to expand. According to its 2026 FIMI Threat Report, Storm-1516 almost doubled its output during 2025. Five networks created that year to target French, German, American, Moldovan and international audiences comprised 453 websites, including fictional news organisations and sites impersonating genuine media or political platforms. A typical operation therefore follows a recognisable pattern: a fabricated allegation is supported by synthetic or manipulated evidence, published through an apparently legitimate source and then distributed by networks of accounts that create the appearance of wider discussion. AI makes this process faster and cheaper, but the fundamental objective remains the same – to manufacture credibility. Why begin nine months before an election? VIGINUM concluded that Storm-1516 is capable both of reacting rapidly to current events and of conducting longer campaigns aimed at discrediting Western institutions and public figures, particularly around elections and other major political events. This provides important context for France. Storm-1516 activity around the presidential race became visible in July 2026, approximately nine months before voting begins. There is no public evidence of a predetermined Russian “nine-month plan”, and the timing should not be presented as such. Early activity nevertheless provides operational advantages: narratives can be tested, websites and accounts established, audience reactions measured and the responses of journalists, authorities and fact-checkers observed. The first operations may therefore also provide information about which themes and techniques are most effective before the campaign enters its decisive months. This remains an analytical interpretation rather than a demonstrated statement of the operators' intentions. Russian operation, but what about the GRU? Attribution requires similar precision. VIGINUM explicitly describes Storm-1516 as a Russian information operation, and French authorities have attributed individual campaigns to it with high confidence. Connections with Russian military intelligence have also been reported. Glucksmann said the SGDSN informed him that the network targeting him was controlled by Russia's GRU, while French media have repeatedly described Storm-1516 as linked to Russian military intelligence. However, VIGINUM's publicly available technical documentation describes Storm-1516 primarily as a Russian information modus operandi, rather than identifying it as a formally established GRU unit. It is therefore well supported to describe Storm-1516 as a Russian influence operation with reported links to military intelligence. Saying simply that Storm-1516 is a GRU unit would go beyond what France's published technical evidence currently establishes. An early warning for the French election There is also no evidence that the operations have so far had a significant effect on French voters. Some of the fabricated material generated only limited engagement, and measuring the real impact of foreign information operations remains extremely difficult. Even a video attracting hundreds of thousands of views does not establish how many viewers believed it or whether it changed political attitudes. The significance of Storm-1516 lies instead in the infrastructure already being deployed. Months before the election, Russian influence networks have been able to test fake newsrooms, synthetic voices, manipulated television footage, candidate-specific narratives and systems for distributing them. The French case illustrates a broader evolution in election interference. The objective is no longer simply to place false claims on social media. Modern operations can manufacture an entire chain of apparent evidence in which a fake journalist cites a fake investigation, synthetic audio appears to confirm it and networks of accounts give the impression that an authentic controversy is unfolding. France still has months to go before its presidential election. The information environment surrounding it is already being contested. Sources: VIGINUM / SGDSN — Storm-1516 analysis https://www.sgdsn.gouv.fr/publications/analyse-du-mode-operatoire-informationnel-russe-storm-1516 VIGINUM / SGDSN — Full Storm-1516 technical report https://www.sgdsn.gouv.fr/files/files/Publications/20250507_TLP-CLEAR_NP_SGDSN_VIGINUM_Technical%20report_Storm-1516.pdf VIGINUM / SGDSN — Storm-1516 operation targeting Emmanuel Macron https://www.sgdsn.gouv.fr/publications/storm-1516-detection-dune-operation-dingerence-numerique-etrangere-ciblant-emmanuel EEAS — 4th Report on FIMI Threats https://www.eeas.europa.eu/sites/default/files/2026/documents/EEAS%204th%20Threat%20Report_web.pdf Le Monde — Russian interference targeting Philippe, Glucksmann and Attal https://www.lemonde.fr/politique/article/2026/08/07/presidentielle-2027-glucksmann-attal-philippe-les-ingerences-russes-s-invitent-dans-la-campagne_6740451_823448.html Le Monde — Storm-1516 and Matryoshka analysis https://www.lemonde.fr/pixels/article/2026/08/06/ingerences-russes-pourquoi-il-ne-faut-pas-nourrir-le-troll_6739956_4408996.html NewsGuard Risk Briefing — Russian activity targeting the French election https://newsguardriskbriefing.substack.com/p/russia-targets-french-elections-iran Euronews — Operation targeting Raphaël Glucksmann https://fr.euronews.com/my-europe/2026/08/04/presidentielle-de-2027-raphael-glucksmann-vise-par-une-operation-de-destabilisation-russe Télérama / AFP — Glucksmann deepfake investigation https://www.telerama.fr/debats-reportages/presidentielle-2027-raphael-glucksmann-vise-par-un-deepfake-d-origine-russe-7032318.php Le Parisien — Operation targeting Gabriel Attal https://www.leparisien.fr/elections/presidentielle/presidentielle-2027-gabriel-attal-a-son-tour-vise-par-une-ingerence-en-provenance-de-russie-05-08-2026-I3Z67Z7ZUBDUVBXUNDARI5KGPA.php Euronews — Paris prosecutor investigations into suspected Russian interference https://fr.euronews.com/my-europe/2026/08/18/soupcons-dingerence-russe-visant-attal-et-philippe-le-parquet-de-paris-ouvre-dune-enquete Keywords: #DISINFORMED #Episode6 #Storm1516 #France #FrenchElection2027 #Disinformation #InformationWarfare #InfluenceOperations #ForeignInterference #FIMI #RussianInfluence #RussianDisinformation #Propaganda #Deepfakes #ArtificialIntelligence #AI #SyntheticMedia #FakeNews #MediaImpersonation #FakeMedia #DigitalManipulation #ElectionInterference #PoliticalDisinformation #Matryoshka #VIGINUM #OSINT #CyberInfluence #DigitalInfluence #MediaManipulation #EuropeanSecurity #Democracy #WRLD

“Because machine intelligence comes from a fundamentally different process than human intelligence, we cannot assume it adheres to human principles by default” An Alien Mind https://t.co/jcOfHQCLua This is a must read piece by Jakub pachoki 5# on what I now call #aiemergency #AI #MachineIntelligence #HumanPrinciples #Nospecificcountrycodesareidentifiedinthetweetprovided.

Trzymajcie się czegoś, Sobkowiak-Czarnecka na kongresie kobiet: „Kobiety na wysokich stanowiskach najpierw muszą udowodnić, że się nadają, a mężczyźni NIGDY nie muszą udowadniać, że się nadają, oni z defaultu się nadają” XDDDDDDDDD https://t.co/1Kin5xPImN #równość #kobiety #liderki

Il governo più longevo, forse il primo che completerà la legislatura, non ci ha portato il Bengodi. Ma con Schlein & C. saremmo andati in default. Invece abbiamo lo spread a picco, 1 milione di occupati in più e l’80% di sbarchi in meno. https://t.co/dOPdFp1VQ7 #Governo #Occupazione #Spread #IT

Recommender algorithms should be turned off by default, and banned completely for children. Big Tech profits should not come before children's (and all of our) health. #TurnOffTheToxicAlgorithms #SocialMediaBan #TurnOffTheToxicAlgorithms #BigTech #ChildSafety #Nospecificcountrycodesidentified.

Denmark’s strict immigration model has now become the Nordic default. Sweden’s Social Democrats shifted to stricter immigration policies after 2015, and Finland’s Social Democrats are now moving towards this same model. Many countries have now realized that uncontrolled #ImmigrationPolicy #NordicModel #ScandinavianShift #DK #SE #FI

Five Thomas Sowell Lessons the West Refuses to Learn The West has proven Thomas Sowell right: “compassionate” policies often ignore trade-offs and incentives. Sowell offers no villains—only reality. 1) **Ask the right question.** Poverty is the default; prosperity is what needs explaining. Study what creates abundance, not inequality as automatic proof of injustice. 2) **Pick your poison.** There are no perfect solutions, only costs and benefits. Every policy uses scarce resources and shifts who pays. No free lunch. 3) **Leaders need skin in the game.** It’s dangerous to grant power to people insulated from consequences. When decision-makers aren’t harmed by error, bad choices spread. 4) **Keeping what you earn isn’t greed.** Treating production as selfish and redistribution as virtue inverts morals—and concentrates power in those who control taking and giving. 5) **Judge ideas by outcomes, not vibes.** The West keeps discarding institutions that worked because their reasoning feels unfashionable. Sowell’s core point: reality ignores intentions—scarcity, incentives, and consequences still rule.

In this week's Econoclasts, Wolfgang and I question the assumption that the US $ shields Americans from the vagaries of default. In the 2nd section, I suggest that Chinese AI, unlike Silicon Valley's version, has a truly revolutionary potential, offering China a chance to escape #Econoclasts #AI #China #US #CN

🇫🇷 IF FRANCE DEFAULTS ON ECB DEBT, FRANCE MUST LEAVE THE EURO — AND THE EU. The Euro is not a free-money machine. France cannot demand the protection of the ECB, benefit from the credibility of the Euro, finance itself inside the European monetary system — and then simply decide https://t.co/owHCDmVYN2 #France #Euro #ECB #FR

In the developing trade war between USA and Canada it is clear that the USA is proving an unreliable trading partner. In order to ensure a well regulated world trade it becomes clearer each day that Europe should develop closer ties with Canada and reduce it's dependence on trade with the USA which, with a $40trillion debt could see a plunging dollar and eventual default on debt.

A Ferragosto, quella che una volta era la squadra che dava di default il portiere titolare alla Nazionale, che ha avuto 2 dei portieri più forti della storia tra i pali, che non ha mai avuto incertezze (anche sbagliando) su chi dovesse essere l'ultimo baluardo, si trova scoperta nel ruolo forse più importante nel momento forse più critico della sua Storia. Ho ancora rimasugli di fede e fiducia, ma perdonatemi se dopo un lustro buio prevale la sensazione che si stia preparando un altro pastrocchio epocale 😔 #Calcio #Portieri #Fiducia

Me informan que Arantza Ruiz dejó la estufa abierta para eliminar totalmente a sus compañeros en el reality que participa, convirtiendose asi en la ganadora por default de La Casa de los Famosos México 2026. #LaCasaDeLosFamososMx https://t.co/eZ3tmbGdbf #RealityShow #Drama #Ganadora

Gente ces tem noção que mesmo fazendo cagada a diatv ainda o UNICO meio de comunicação que se importa com a parada LGBTQIAPN+? É o canal que tem um dos maiores reality shows do país onde o DEFAULT é ser LGBT ? Que fala abertamente de politica sem medo de perder patrocinadores? #LGBTI #DireitosHumanos #MídiaInclusiva

Mam takie spostrzeżenie, które myślałem, że będzie maleć z czasem ale jest chyba odwrotnie: Warszawa bardzo odjeżdża reszcie kraju. Wiadomo, stolica, ale mimo wszystko: patrząc po pieniądzach widocznych na ulicy i ludziach - szczególnie młodych - to Poznań czy Wrocław są kompletnie gdzie indziej. I w żadnym wypadku nie mówię tego, aby deprecjonować swoje miasto. Nieswojo czuję się raczej w Warszawie. Poznań jest oczywiście gdzie indziej niż znów taki Grudziądz, niemniej nie wiem czy kiedykolwiek czułem aż taką różnicą między default city, a resztą top 5. Nie wiem czy mam jakieś wnioski. :) #Warszawa #Polska #Miasta

In basic terms, CDS are pricing a higher probability of default by the issuer and/or lower expected recovery in the case of a default. Which puts some serious question marks around NVDIA's income statement and balance sheet - both. #CDS #NVIDIA #Default #Nospecificcountriesarementionedinthetweet.Therefore #therearenocountrycodestoreturn.