Search

Nigeria – how pro-Russian influence networks sell military rule as the answer When Nigerians took to the streets in August 2024 to protest soaring living costs and frustration with government, some demonstrations acquired an unexpected symbol: the Russian flag. In Kano, Kaduna and other northern cities, protesters were filmed carrying Russian colours and calling for Moscow’s intervention. Some demanded a military takeover. What initially looked like an unusual expression of anger has since become part of a much larger picture. A September 2026 assessment by the Africa Center for Strategic Studies describes Nigeria as a major target of overlapping foreign information operations, with Russia the most active external actor in its information space. The report does not identify a single centrally controlled campaign. Instead, it maps an ecosystem in which genuine dissatisfaction over insecurity, corruption and living standards is repeatedly redirected towards a broader proposition: democratic government has failed, while the military-led regimes of the Sahel offer a more effective alternative. Turning a real protest into a pro-Russian message The clearest example emerged during the 2024 #EndBadGovernance protests. Nigerian investigative reporting found that a Kano-based TikTok influencer with more than 100,000 followers had been paid through a Telegram channel associated with African Initiative, a Moscow-based media operation linked by researchers to Russian influence activity in Africa. The influencer said the channel supplied photographs, videos and talking points for redistribution on TikTok and Instagram. Among the messages provided were phrases such as “Putin please come and save Nigeria” and “The army is the answer for Nigeria”. Influencers were encouraged to use Hausa-language hashtags including #Zangazanga – “protest” – alongside references to Putin and Russia. Investigators identified 38 accounts circulating similar pro-Russian and pro-military narratives during the demonstrations. Russian flags subsequently appeared among protesters in several northern cities. This does not mean the protests themselves were created by Russia. They were driven by genuine economic and political grievances, and Nigerian protesters gave different reasons for carrying Russian flags. The important feature of the influence activity was precisely that it did not need to manufacture the original anger. It could attach a geopolitical message to an existing domestic crisis. From frustration to the idea of military government The narrative fits a wider pattern seen across West Africa. Russia has developed close relations with the military governments of Mali, Burkina Faso and Niger, while pro-Russian media ecosystems routinely portray those states as examples of sovereignty, stability and resistance to Western influence. Nigeria, by contrast, has remained under constitutional civilian government since 1999. Africa Center researchers say information networks targeting Nigerians increasingly contrast these two models. Recurring messages depict elections as wasteful or predetermined, civilian institutions as incapable of protecting citizens and military governments as more decisive on security and development. Some content portrays the Sahelian juntas as delivering better roads, lower prices and stronger security even where available evidence points to continuing or worsening instability. Language is central to the strategy. Hausa is spoken across northern Nigeria and neighbouring Niger, allowing political narratives to travel across borders that are far less important online than they are on maps. HumAngle documented efforts involving Nigerien state-linked actors to cultivate Hausa-speaking journalists and distribute material favourable to Niger’s junta and hostile to France and Western influence. The Russian and Sahelian-junta information ecosystems are not identical, but their narratives frequently reinforce one another. Fake journalists inside real Nigerian media The campaign environment extends beyond social media. A 2026 investigation by Graphika and Code for Africa identified 44 ghost reporters and fake experts whose identities were used to place Russia-aligned narratives in African media. Thirty-eight were assessed with high confidence to be fabricated. Their articles or quotations appeared across 138 websites and were amplified by at least 113 Facebook accounts and Pages. Nigeria was one of the most heavily targeted countries. According to the Africa Center’s analysis of the research, Daily Post Nigeria carried 39 articles involving 14 identified ghost authors. Once published by a genuine Nigerian outlet, such material could then be cited by other websites, social-media accounts or even Russian official channels as though it had originated independently in Africa. This is information laundering rather than simple propaganda: the most valuable asset being borrowed is the credibility of the local newsroom. Generative AI added another layer. OpenAI and Meta separately disrupted a Russia-origin network that produced Africa-focused political content and operated Facebook Pages posing as local media organisations. One fabricated commentator, “Dr Manuel Godsin”, was presented as a European-trained geopolitical expert although investigators found no evidence supporting his academic biography. ChatGPT had been used to generate articles under the persona’s name, while Meta removed 37 Facebook accounts and 29 Pages connected to the broader network. Different networks, similar strategic direction It would be misleading to merge all these activities into a single Russian command structure. The African Initiative-linked influencer campaign, the ghost-reporter network and the AI-enabled operation disrupted by OpenAI and Meta were uncovered separately and used different infrastructure. Public evidence does not demonstrate that every actor reported to the same organisation. What connects them is a recurring set of themes and methods: portraying Western partnerships as exploitative, presenting Russia as an alternative security partner, amplifying failures of civilian government, and giving military-led rule greater legitimacy. Investigative reporting on leaked Russian documents has meanwhile described a much wider influence apparatus operating across Africa, involving political consultants, paid journalists, influencers and locally tailored campaigns intended to reduce Western influence and expand Moscow’s position. The underlying technique is less about inventing dissatisfaction than redirecting it. Nigeria faces real security threats, economic pressure and public frustration. Influence operators do not need to persuade Nigerians that those problems exist. They need only influence the explanation for why they exist – and which political model appears to offer the answer. That is what makes the Nigerian case significant. The most effective propaganda does not necessarily introduce a completely false reality. It takes a real crisis and changes where the audience is encouraged to look for the solution. Sources Africa Center for Strategic Studies — The Raging Information Battle in Nigeria https://africacenter.org/spotlight/the-raging-information-battle-in-nigeria/ Graphika — Umbrae Ex Machina https://www.graphika.com/reports/umbrae-ex-machina OpenAI — Operation “No Bell” https://openai.com/index/disrupting-malicious-uses-of-ai-no-bell/ TheCable — Ghost reporters in African media https://www.thecable.ng/ghost-reporters-how-fabricated-african-voices-carried-pro-russia-narratives/ HumAngle — Nigeria Is Facing an Information War in Its Own Language https://www.humanglemedia.com/nigeria-is-facing-an-information-war-in-its-own-language DAIDAC / CJID — Russian influence during #EndBadGovernance https://daidac.thecjid.org/how-telegram-tiktok-aided-russian-disinformation-that-led-to-incarceration-of-nigerian-minors/ FactCheckHub — How Nigeria’s hunger protest took a radical turn https://factcheckhub.com/from-economic-protests-to-coup-agitation-how-nigerias-hunger-march-took-a-radical-turn/ News24 — Fake Kremlin-linked analyst planted stories in African media https://www.news24.com/southafrica/news/ai-expert-exposed-fake-kremlin-linked-analyst-planted-stories-in-african-media-20260318-0560 Vanguard — AI ‘expert’ exposed https://www.vanguardngr.com/2026/03/ai-expert-exposed-fake-kremlin-linked-analyst-planted-stories-in-african-media/ Africa Confidential — How Moscow wages social media war https://www.africa-confidential.com/article/id/15961/how-moscow-wages-social-media-war Keywords #DISINFORMED #Episode15 #Nigeria #Russia #RussianInfluence #RussianDisinformation #Africa #WestAfrica #Disinformation #InformationWarfare #InfluenceOperations #ForeignInterference #FIMI #Propaganda #MilitaryRule #MilitaryGovernment #Democracy #PoliticalManipulation #NarrativeManipulation #AfricanInitiative #EndBadGovernance #Hausa #LocalInfluencers #GhostReporters #FakeExperts #ArtificialIntelligence #AI #AIPersonas #SyntheticMedia #AIPropaganda #Astroturfing #SocialMediaManipulation #Telegram #TikTok #DigitalInfluence #SourceLaundering #NarrativeLaundering #MediaManipulation #Sahel #Geopolitics #OSINT #WRLD

Disinformation for hire – the network of 70 fake newsrooms sold as a service The websites looked local. Naija Pulse appeared to cover Nigeria, Echo Berlin Germany, The British Daily Britain, Fifty States the United States and Commonwealth Post Australia. Each had its own branding, articles, supposed journalists and matching social-media presence. Taken individually, they resembled small independent news outlets. According to Anthropic, however, they were parts of a single commercial influence network spanning six continents. Anthropic’s September 2026 threat report identifies the operation as GTG-54002, a commercial “influence-as-a-service” network that used Claude to generate and rewrite political content at industrial scale. Investigators linked roughly 70 fabricated news websites to around 70 matching X accounts and more than 250 additional inauthentic commenting accounts designed to create the appearance of genuine public engagement. The network produced at least 8,913 articles in about 20 languages before Anthropic disrupted the activity. The significance of the case is not simply the number of fake sites. It is the business model. The network did not consistently promote one government, party or ideology. Anthropic found that its political position changed according to the apparent interests of different customers. The company therefore described it as a commercial influence operation: political manipulation offered in much the same way as other outsourced digital services. A fake media ecosystem built at scale Anthropic says the infrastructure was created rapidly. Domains were registered from France during a roughly ten-week period in mid-2025 and deployed through shared technical infrastructure, allowing investigators to connect publications that outwardly appeared unrelated. Most of the supporting social-media accounts were also created within a narrow timeframe in June and July 2025. The sites were designed to look like functioning local newsrooms rather than anonymous propaganda pages. Articles carried fabricated bylines belonging to journalists who, according to Anthropic, did not exist. Each outlet had a corresponding account on X, while a second layer of fake profiles commented on and amplified the articles. Many of those accounts used AI-generated profile photographs. The result was a three-tier structure: the newsroom published the story, the branded social account distributed it, and apparently ordinary users supplied the appearance of public reaction. Some of those sites remained publicly visible after the operation was exposed. The British Daily, for example, described itself as providing “conservative insights” on British sovereignty and migration, while Commonwealth Post presented itself as an Australian liberal publication focused on democracy, migration and regional security. Those contrasting editorial identities illustrate the central feature identified by Anthropic: the network was capable of taking different political positions in different markets. Claude as a publishing engine Claude was not simply asked to draft occasional articles. The operators built a structured production pipeline around it. Prompts required fixed JSON outputs, formatted HTML, precise character limits and internal links, allowing articles to move directly into an automated publishing workflow. The system could generate entirely new material or take reporting produced by legitimate journalists and rewrite it to fit a desired political perspective. Anthropic identified three recurring techniques. The same source article could be rewritten in opposite ideological directions for different audiences; a political interpretation could be added to a story that originally contained none; and material could be moved from one country to another after its original context had been removed. The articles were also structured to improve the apparent authority of the sites in search engines, helping the network imitate ordinary digital publishing practices rather than simply broadcasting propaganda. This is where generative AI changes the economics of an influence operation. A conventional network of dozens of supposedly local publications would normally require writers, translators, editors and social-media staff. Here, much of that production could be standardised and automated while human operators concentrated on political direction, customer requirements and distribution. The DRC–Rwanda conflict as a test case The clearest concentration of activity involved the Democratic Republic of Congo. Anthropic identified 318 articles concerning the DRC across the fake-news network. The material generally supported positions aligned with the Congolese government, particularly on regional mineral agreements and tensions with Rwanda. Early in the network’s growth, many of the fake social-media personas following and amplifying its accounts also presented themselves as Congolese. Investigators observed one especially revealing episode on 11 September 2025, when multiple sites published almost identical articles about the DRC–Rwanda conflict within approximately three minutes of one another. The wording and political tone were adjusted for different regional audiences, while associated X accounts distributed the links in a coordinated pattern. Anthropic said the activity contained signals suggesting that one or more customers had interests connected to the DRC–Rwanda conflict. It did not, however, identify those customers and explicitly stated that it found no evidence that any government had directed the operation. That distinction is essential. The content may have benefited a political actor without demonstrating that the actor commissioned or controlled it. Influence without ideology Commercialisation is what distinguishes GTG-54002 from many state-linked information operations. A government propaganda network usually has an identifiable strategic direction. A commercial influence provider does not need one. Its infrastructure can support one position in one country and the opposite position somewhere else, provided different customers are willing to pay. That makes attribution more difficult. Analysts cannot necessarily infer the operator from the ideology of the content because ideology may simply be part of the service package. The enduring asset is the infrastructure: domains, publishing systems, fake journalists, social-media accounts and automated amplification. Anthropic says the operation was disrupted before it achieved significant genuine reach. It classified GTG-54002 as Category Two on the Brookings Breakout Scale: material circulated across the network’s own sites and associated social accounts but showed no evidence of substantial penetration into authentic communities. Most of the 8,913 articles generated little observable engagement from real users. That limited impact is important. The case should not be presented as a successful global manipulation campaign. It is better understood as evidence that the infrastructure required to run such campaigns has become cheaper, faster and increasingly commoditised. The deeper shift is that a fake media ecosystem no longer has to be built around a single political cause. It can be built once, automated and then repurposed for the next customer. Disinformation, in this model, is no longer only a political instrument as it turend into the service. Sources: Anthropic — Countering misuse of AI: September 2026 https://www.anthropic.com/threat-intelligence-report-september-2026 Business Standard — AI scaling fake newsrooms, surveillance and online scams https://www.business-standard.com/technology/tech-news/anthropic-report-ai-fake-newsrooms-dating-surveillance-scams-126091100730_1.html Mimikama — KI baut 70 erfundene Nachrichtenportale https://www.mimikama.org/ki-netzwerk-erfundene-nachrichtenportale-echo-berlin/ Poliscoop Media — Anthropic exposes DRC propaganda network https://www.poliscoopmedia.com/articles/anthropic-exposes-drc-propaganda-network-20260911 The British Daily — example of a fabricated outlet identified in the network https://www.british-daily.com/contact Commonwealth Post — example of a fabricated outlet identified in the network https://commonwealth-post.com/category/science MalPulse — infrastructure references for network domains https://www.malpulse.com/infra-pivots/usom-pivots/list/?page=1105 Keywords: #DISINFORMED #Episode13 #DisinformationAsAService #InfluenceAsAService #FakeNewsrooms #FakeMedia #SyntheticMedia #ArtificialIntelligence #AI #GenerativeAI #ClaudeAI #Anthropic #Disinformation #InfluenceOperations #InformationWarfare #FIMI #CommercialInfluence #PoliticalManipulation #NarrativeManipulation #NarrativeLaundering #SourceLaundering #MediaImpersonation #FakeJournalists #SyntheticPersonas #Astroturfing #SocialMediaManipulation #CoordinatedInauthenticBehaviour #CIB #DigitalInfluence #AutomatedPropaganda #ContentAutomation #AIPropaganda #LKMCompany #NaijaPulse #AxumVoices #JamboJournal #EchoBerlin #TheBritishDaily #FiftyStates #CommonwealthPost #DRC #Rwanda #OSINT #WRLD

AI-agents van bedrijven zoals OpenAI hebben in de afgelopen maanden tienduizenden beveiligingsincidenten veroorzaakt door onbedoeld externe websites te hacken, wat heeft geleid tot bezorgdheid over de veiligheid en verantwoordelijkheid van het gebruik van kunstmatige intelligentie. #KunstmatigeIntelligentie #Cybersecurity #OpenAI

++ Anlasslose Massenüberwachung von neuen Medien droht! ++ "Die Rundfunkkommission will damit die gesetzliche Grundlage schaffen, um Podcasts, YouTube-Videos, Plattformen und Websites präventiv, allumfassend und automatisiert zu scannen und vermeintliche Verstöße zu ahnden." #Überwachung #Medienfreiheit #Digitalisierung

Exklusiv: Nun droht die anlasslose Massenüberwachung von neuen Medien. NIUS liegt der Entwurf des Digitale Medien-Staatsvertrags hervor. Die Rundfunkkommission will damit die gesetzliche Grundlage schaffen, um Podcasts, Youtube-Videos, Plattformen und Websites präventiv, allumfassend und automatisiert zu scannen und vermeintliche Verstöße zu ahnden. Dabei soll es nicht wie bisher einzig um Verstöße gegen den Jugendschutz und das Strafrecht gehen, sonder explizit um angebliche Verstöße gegen „anerkannte journalistische Grundsätze“. Durchgeführt werden soll die Massenüberwachung ausgerechnet durch die Landesmedienanstalten, die sich in der Vergangenheit als Wächter der Regierungs-Wahrheit präsentierten und immer wieder gegen unliebsame Medien vorgingen. Die Direktorin der MABB hatte im Januar gar damit gedroht, Medien wie NIUS zu verbieten. Sollte der Digitale Medien-Staatsvertrag so beschlossen werden, wäre dies ein massiver staatlicher Angriff auf Meinungs- und Pressefreiheit. Alle Details: https://t.co/lzAQNQUSzi #Pressefreiheit #Meinungsfreiheit #Mediengesetz

Ein israelisches Startup steht im Mittelpunkt von Sicherheitsvorfällen, nachdem KI-Agenten aufgrund von Fehlkonfigurationen bei Testläufen ungewollt Angriffe auf reale Regierungs-Websites gestartet haben, was zu einem Stopp des KI-Trainings durch OpenAI und Fragen des australischen Senats führte. #KIAngriffsicherheit #TechnologieSkandal #IsraelsStartup

Fake NV – how a cloned newsroom turned an AI video into a $140 million corruption scandal For two days in September, a website that looked almost indistinguishable from one of Ukraine’s best-known news organisations carried an extraordinary corruption story. It claimed that Ukraine’s National Anti-Corruption Bureau had raided former defence procurement chief Arsen Zhumadilov and discovered more than $140 million in cash packed inside refrigerator boxes. One box supposedly carried the words “For the Servant of the People” – an apparent reference to President Volodymyr Zelenskyy’s political party. The raid never happened. The photographs and video presented as evidence were fabricated, and the news organisation reporting the story was not the New Voice of Ukraine but a cloned version of it. The episode is a compact example of an increasingly effective disinformation technique. Rather than inventing a new propaganda outlet and trying to build its credibility from scratch, an operator can simply steal the identity of an established newsroom and place fabricated material inside an otherwise convincing copy of its editorial environment. A newsroom copied almost in full The counterfeit site appeared at nvukraine.com, while the authentic New Voice of Ukraine operates at nv.ua and english.nv.ua. Registration records examined by fact-checkers show that the false domain was created on 21 September 2026, two days before the fabricated article appeared. According to NV’s own investigation, the imitation went much further than copying a logo: the operators reproduced the site’s visual design, sections, branding, contact information and genuine editorial material. A snapshot of legitimate NV content from 23 September appears to have been copied onto the counterfeit site, into which the operators inserted a single false article. That article claimed that NABU had searched premises connected to Zhumadilov, who had headed Ukraine’s Defence Procurement Agency until August, and seized $140 million in cash. The story was published in several languages, including Ukrainian and English, suggesting that the operation was intended not only for Ukraine’s domestic information space but also for foreign audiences following the war and Western support for Kyiv. AI supplied the supposed evidence The false article was supported by a video purportedly showing the money discovered during the raid. NABU said no such search or procedural action had taken place and identified the footage as fabricated using artificial intelligence. Independent fact-checker Lead Stories found no credible Ukrainian or international reporting confirming either the raid or the alleged seizure, while searches of NABU’s own published material produced no evidence supporting the claim. The operation therefore combined two separate forms of synthetic credibility. The AI-generated footage supplied what looked like visual proof, while the cloned NV website supplied institutional proof: an apparently reputable Ukrainian newsroom supposedly confirming that the event had happened. Neither element needed to withstand close scrutiny for long. Together, they only needed to appear credible enough to be copied, quoted and redistributed before the deception was exposed. From a fake Ukrainian source into the Russian information ecosystem On 24 September, the story began moving through large pro-Russian Telegram channels. Ukraine’s Center for Strategic Communications traced early amplification to Golos Mordora, with roughly 149,000 subscribers, and Militarist, with around 277,000. Within less than an hour, other channels including VOBLA, Rossiya Seychas and Ostashko! Vazhnoye were circulating versions of the same claim. It subsequently appeared on X and on Russian-language websites including e-news.su and pressa24.ru. Babel calculated that posts carrying the fabrication had accumulated approximately 370,000 views by the morning of 25 September. The story also moved beyond the Russian-language ecosystem. English-language versions appeared in online communities including Lemmy and Hexbear, while accounts on X shared direct links to the counterfeit NV article. NV later reported that larger Russian media and propaganda outlets, including RIA Novosti, Life, Vesti, Ukraina.ru and Mail.ru, had reproduced or discussed the claim. Kirill Dmitriev, head of the Russian Direct Investment Fund and a Kremlin representative involved in contacts with the United States, also shared it on 25 September. This amplification is significant, but it should not be confused with proof of authorship. Publicly available evidence shows how the false story entered and spread through a Russian and pro-Russian information ecosystem. It does not establish which organisation registered the cloned domain, generated the video or directed the operation from the outset. Why copy NV? The operation relied on source laundering. A claim originating directly from a Russian Telegram channel that Ukraine’s defence procurement system had concealed $140 million would immediately carry an obvious political context. A claim apparently uncovered by an established Ukrainian newsroom looks very different. Once the fabricated NV article existed, subsequent accounts could cite what appeared to be an independent Ukrainian source rather than present the allegation as their own. Each repost moved the story another step away from its manufactured origin. The use of an English-language version strengthened that mechanism for audiences outside Ukraine. The underlying narrative was also carefully chosen. Corruption in Ukrainian defence procurement is a genuine subject of public scrutiny and investigative reporting, so the fabricated story did not require audiences to accept an entirely unfamiliar premise. It inserted a false event into a real area of political concern. That mixture of authentic context and fabricated evidence can be more persuasive than a completely invented story because much of the surrounding information feels recognisable. What can – and cannot – be attributed Ukrainian authorities and NV describe the episode as a Russian information operation, and its distribution can be documented extensively across pro-Russian and Russian media channels. The available public evidence, however, does not identify the organisation that created the counterfeit website, nor does it link the operation forensically to a named Russian intelligence service, military unit or state contractor. The most precise description is therefore a Russian-aligned disinformation operation whose fabricated material was systematically amplified through the Russian information ecosystem. That distinction matters. Distribution can be observed directly; command-and-control is harder to establish and should not be inferred without evidence. The newsroom itself becomes the deepfake The most important feature of the operation was not the $140 million figure or even the AI-generated video. It was the counterfeit newsroom surrounding them. The operators copied a real publication, populated it largely with genuine material and inserted a single false story, allowing the fabrication to borrow the accumulated credibility of journalists who had nothing to do with it. This points to a broader evolution in synthetic media. AI can fabricate an image, a voice or a video, but an influence operation can now fabricate something larger: the source that supposedly verified the evidence. In the Fake NV operation, the article, the video and the website reinforced one another, creating not simply a false story but a manufactured chain of credibility. Sources The New Voice of Ukraine — investigation into the cloned website https://english.nv.ua/nation/nv-discovers-fake-copy-of-website-with-planted-story-cites-russian-links-50644601.html The New Voice of Ukraine — Russian amplification of the $140 million fabrication https://english.nv.ua/russia-spreads-fake-140-million-ukraine-corruption-story-during-dmitriev-u-s-talks-50644647.html Lead Stories — independent fact-check https://leadstories.com/hoax-alert/2026/09/fact-check-fake-story-claims-140-million-found-at-home-of-ukraines-zhumadilov-marked-servant-of-the-people-nv-website-originated-it.html Babel — AI video and distribution analysis https://babel.ua/en/news/130469-a-video-is-sharing-online-about-140-million-found-in-the-possession-of-the-ex-head-of-the-defense-procurement-agency-this-is-an-ai-video-distributed-by-a-clone-of-ukrainian-media Center for Strategic Communications and Information Security — initial debunk https://spravdi.org/en/ai-fake-about-140-million-amid-us-talks-how-russians-impose-the-image-of-corrupt-ukraine-on-the-west/ Center for Strategic Communications and Information Security — NABU confirmation https://spravdi.org/u-merezhi-poshyryuyut-shi-fejk-pro-nibyto-obshuky-nabu-v-eksgolovy-agencziyi-oboronnyh-zakupivel/ Detector Media — distribution and NABU response https://detector.media/infospace/article/252806/2026-09-25-u-merezhi-pidrobyly-sayt-nv-dlya-poshyrennya-feyku-pro-obshuky-v-eksochilnyka-agentsii-oboronnykh-zakupivel/ Keywords #DISINFORMED #Episode10 #FakeNV #NewVoiceOfUkraine #Ukraine #Russia #RussianDisinformation #RussianInfluence #Disinformation #InformationWarfare #InfluenceOperations #ForeignInterference #FIMI #MediaImpersonation #ClonedMedia #FakeMedia #FakeNews #ArtificialIntelligence #AI #AIGeneratedContent #SyntheticMedia #AIVideo #SourceLaundering #NarrativeLaundering #CorruptionNarrative #UkraineCorruption #DefenceProcurement #NABU #ArsenZhumadilov #Telegram #SocialMediaManipulation #DigitalInfluence #Propaganda #OSINT #MediaManipulation #WRLD

COLUMN: MASSASURVEILLANCE? BEGIN BIJ DE MACHT Max von Kreyfelt De overheid wil alles van u weten. Waar u bent. Wat u koopt. Met wie u praat. Welke websites u bezoekt. Waarom u dinsdag €47,80 contant opnam. Straks registreert men ook waarom u nors keek bij uw belastingaanslag. Dat heet geen massasurveillance, maar veiligheid. In Den Haag krijgt ieder digitaal wurgtouw een vriendelijke naam. De controlefuik heet een wallet. Het persoonsdossier heet dienstverlening. De enkelband heet digitale identiteit. Wie bezwaar maakt, heeft iets te verbergen. Test het systeem eerst waar de macht zit: bij het establisment. Geef iedere topambtenaar, minister, Kamerlid en ambassadeur een volgapp en camera. Bewaar hun telefoongesprekken, appjes, declaraties, lobbycontacten en besloten diners. Niet uit wantrouwen. Voor hun eigen veiligheid. Een algoritme onderzoekt waarom kritische rapporten verdwijnen, bevriende adviesbureaus miljoenenopdrachten krijgen en verkiezingsbeloften na de stembus overlijden. Zo zien we welke politicus ’s middags over onafhankelijk beleid spreekt en ’s avonds bij een lobbyist aanschuift. Ook diplomaten doen mee. Registreer welke ambassadeur aast op een buitenlandse functie. Leg vast welke afspraken achter gesloten deuren worden gemaakt en waarom ongelezen verdragen dringend ondertekend moeten worden. Voer een sociaal kredietsysteem in. De Kamer verkeerd informeren: vijftig punten eraf. Geheime appjes wissen: honderd punten. Een verkiezingsbelofte breken: digitaal paspoort geblokkeerd. Een burger vermorzelen in een computermodel en daarna mompelen over “de menselijke maat”: drie maanden geen dienstauto. Een mislukt ICT-project? Geen bedrijfsrestaurant. Miljarden kwijt? Geen Promotie, Gezichtsherkenning lijkt mij nuttig. Zo zien we welke bestuurder na een parlementaire enquête weer door de draaideur komt. Zelfde gezicht. Nieuwe functie. Hoger salaris. Geen actieve herinnering. Ik hoor de bezwaren al. Algoritmen maken fouten. Gegevens kunnen worden misbruikt. Permanente controle veroorzaakt angst. Diplomatiek verkeer moet vertrouwelijk blijven. Politici moeten vrij kunnen spreken. Kijk eens aan. Zodra het hun eigen telefoon, agenda en bankrekening betreft, ontdekken de beroepscontroleurs de privacy en de rechtsstaat. De burger is voor Den Haag geen mens, maar een burgerservicenummer met een betaalrekening. Over hem mag alles worden verzameld. Maar rond ambtenaren, politici en diplomaten gaat het gordijn dicht. Daar heet geheimhouding zorgvuldigheid, achterkamertjesoverleg landsbelang en de doofpot bestuurlijke rust. Dus doe het. Maak van ministeries, parlement en ambassades tien jaar lang een digitaal aquarium. Camera’s aan. Telefoons open. Lobbyisten registreren. Geldstromen volgen. Memo’s opsporen. Wie niets te verbergen heeft, heeft niets te vrezen. En wie binnen de macht daarvan schrikt, begrijpt dan wat hij de burger aandoet. 📌 Heeft u mijn bundel al? https://t.co/y64gXJ5yrY 📌 Steunt u mij ook? https://t.co/V2P6pFuNy1 #Massasurveillance #Privacy #DigitaleIdentiteit

Russia’s fake African newsrooms – propaganda designed to look local A Facebook user in Nairobi, Accra, Johannesburg or Luanda encounters what appears to be a local news page. It publishes stories about African politics, Western influence and relations with Russia. The language is tailored to an African audience and the page presents itself not as a foreign broadcaster, but as part of the local information landscape. Behind some of these outlets, however, Meta found operators based in Russia. In its 2026 threat research, the company disclosed a Coordinated Inauthentic Behaviour network targeting audiences in Angola, Ghana, Kenya and South Africa. Meta removed 37 Facebook accounts and 29 Pages connected to the operation. Around 30,000 users followed at least one of the Pages, while the operators spent approximately $7,000 on Facebook and Instagram advertising, mostly in euros and US dollars. The numbers are relatively modest. The method is considerably more important. Rather than openly distributing Russian state messaging, the network posed as local African news sources and grassroots organisations, promoting narratives about Western colonialism and political interference while presenting Russia as a credible economic and political alternative. It was an old geopolitical message delivered through a much more effective identity: not Moscow speaking to Africa, but Africans apparently speaking to one another. A news outlet that was actually an influence operation Meta's investigation found that the network attempted to conceal its Russian origin while creating media brands that appeared indigenous to the countries they targeted. Its content amplified historical grievances against former colonial powers, criticised Western involvement in Africa and promoted closer relations with Russia. One example helps illustrate how the infrastructure was assembled. A Facebook Page targeting Kenya was called Kenya Watchtower. According to OpenAI's subsequent investigation, Facebook transparency records showed that the Page had previously been named “Farmtown5”. It appears to have been acquired or repurposed rather than built from scratch as a Kenyan news organisation. Some Pages also exposed administrator locations in Russia and Ukraine. Other elements of the network had previously targeted audiences in Zambia and Namibia. This use of apparently local identities is particularly important in the African information environment. A story published by RT or another identifiable Russian outlet arrives with an obvious geopolitical provenance. The same narrative presented by something resembling an independent Kenyan, Ghanaian or South African newsroom carries a different kind of credibility. The source appears closer to the reader, and the geopolitical interest behind the message becomes less visible. Then investigators found Dr Manuel Godsin The Facebook operation was only one part of a broader information ecosystem. OpenAI investigated related activity after receiving information from Meta and subsequently banned a ChatGPT account it assessed as likely originating in Russia. OpenAI called the campaign Operation No Bell. The account was being used to generate long-form articles and social-media posts about African geopolitics. Prompts were primarily written in English, but OpenAI also observed Russian-language instructions that the user described as coming from a manager. The operator sometimes explicitly asked the model to make the material appear less AI-generated – including requests to avoid stylistic features associated with machine-generated text and to write more like a human journalist. Many articles appeared under the name “Dr Manuel Godsin”, presented as an academic with a PhD from the University of Bergen and an affiliation with an organisation called the International Centre for Political and Strategic Studies. OpenAI could find no credible evidence that Godsin existed. Searches of Norway's National Research Information Repository and the University of Bergen library produced no record of him. Investigators subsequently discovered that a photograph used to represent Godsin had appeared years earlier on a Russian professional networking site and apparently belonged to a law student in St Petersburg. The fabricated academic identity was nevertheless remarkably productive. OpenAI identified 53 online articles carrying the Godsin byline. The fiction had moved beyond fake social-media pages and into the real media ecosystem. When propaganda enters genuine newsrooms This is the most consequential aspect of the operation. The articles were not confined to websites controlled by the influence network. Some were published by genuine African news organisations, including established South African outlets. The content mixed local political issues with broader geopolitical narratives. Some pieces criticised the United States and Britain or defended Russia's role in Africa. One accused the British NGO Crisis Action of fomenting protests in South Africa. Another praised Russia's presence in the Central African Republic. Other material addressed Kenya, Angola and relations between African governments and Washington. The mechanism represents a significant evolution from the classic troll-farm model. Instead of building an audience entirely on its own platforms, an influence operator can manufacture an apparently credible expert, generate articles in his name and persuade genuine news organisations to publish them. Once this happens, the propaganda acquires something a fake Facebook Page cannot provide: the institutional credibility of a real newsroom. OpenAI assessed No Bell's social-media impact as limited. One Facebook Page had around 3,000 followers before Meta removed it, while several others had very small audiences. But the operation was more successful in placing material in established media. In OpenAI's impact framework, it approached the level at which an influence operation breaks into mainstream media. For information operators, a single article published by a recognised outlet can potentially be more valuable than thousands of impressions generated by an obviously artificial account. A much larger network of ghost journalists Subsequent research suggests that Manuel Godsin was not an isolated experiment. In August 2026, Graphika, working with Code for Africa and with support from Meta, published a much broader investigation into Russian ghostwriting operations across African media. Researchers identified 44 ghost writers and fake experts, 38 of them assessed as high-confidence fabricated personas, operating between 2021 and 2026. Their material appeared or was quoted across 138 websites and was subsequently republished through at least 113 Facebook accounts and Pages, including authentic users, coordinated inauthentic networks and official Russian communication channels. The narratives were strikingly consistent. They included criticism of France, Ukraine and the United States; attacks on organisations such as ECOWAS and the International Criminal Court; positive portrayals of Russian involvement in Africa; praise for Russian paramilitary forces; and support for sovereignty-oriented political projects such as the Alliance of Sahel States. The operation therefore extends beyond creating fake news websites. It attempts to insert Russian-aligned narratives into the legitimate African media ecosystem using identities that appear African, independent or academically authoritative. This also explains why measuring reach through the original Facebook network alone is misleading. A fabricated article may begin with an influence operator, appear in a genuine African publication, be republished elsewhere and eventually circulate without any visible connection to Russia. At that point, the provenance of the narrative has effectively been laundered. An old Russian strategy with increasingly local faces Russia's use of local intermediaries in Africa is not new. Meta documented Russian networks using African nationals as early as 2019. In 2020 it dismantled another operation involving people in Ghana and Nigeria working on behalf of individuals in Russia, with links to previous activity associated with the Internet Research Agency. More recent Meta investigations suggest that this model has continued to evolve. Networks have increasingly relied on local freelancers, social-media managers and authentic media outlets rather than exclusively operating armies of obviously fake Russian-controlled accounts. This decentralisation offers several advantages. Local operators understand language, political sensitivities and cultural references. Authentic accounts are harder to identify than newly created synthetic personas. Local media brands can also deliver narratives without immediately triggering the scepticism associated with Russian state outlets. There is no evidence that every African journalist, freelancer or publication carrying such material knowingly participates in Russian influence activity. Meta explicitly notes in its investigations that some local contractors may not know who ultimately commissioned their work. That distinction is essential. The operation's effectiveness partly depends on precisely this ambiguity between deliberate participation, commercial content placement and unwitting amplification. The objective is to make Russian narratives look African The significance of this network is therefore not its 30,000 Facebook followers or its $7,000 advertising budget. Those figures are small compared with the audiences of major African media organisations. What matters is the distribution model. Traditional foreign propaganda asks an audience to trust a foreign source. These operations attempt to remove the foreign source from the equation altogether. A Russian geopolitical narrative can be generated with AI, attributed to an expert who does not exist, published by a media organisation that does, amplified through a Facebook Page presenting itself as local, and then rediscovered elsewhere as apparently independent African analysis. By the time the reader encounters it, Moscow may have disappeared completely from the chain of attribution. The resulting information operation is therefore less about making Russian propaganda more persuasive than about making it look as though it is no longer Russian propaganda at all. In an increasingly fragmented African media environment, that may be the more important evolution to watch. SOURCES: Meta Threat Research https://threatresearch-team.github.io/indicators/meta-h1-2026-russia-based-cib-network-1/ OpenAI — Operation “No Bell” https://openai.com/index/disrupting-malicious-uses-of-ai-no-bell/ Graphika — Umbrae Ex Machina https://www.graphika.com/reports/umbrae-ex-machina News24 https://www.news24.com/southafrica/news/ai-expert-exposed-fake-kremlin-linked-analyst-planted-stories-in-african-media-20260318-0560 Vanguard https://www.vanguardngr.com/2026/03/ai-expert-exposed-fake-kremlin-linked-analyst-planted-stories-in-african-media/ Meta — Russian Coordinated Inauthentic Behaviour, 2019 https://about.fb.com/news/2019/10/removing-more-coordinated-inauthentic-behavior-from-russia/ Meta — Russian Coordinated Inauthentic Behaviour, 2020 https://about.fb.com/news/2020/03/removing-coordinated-inauthentic-behavior-from-russia/ Meta Threat Research — Russian Use of Authentic Operators in Sub-Saharan Africa https://threatresearch-team.github.io/indicators/meta-h2-2025-russia-based-cib-network-2/ KEYWORDS: #DISINFORMED #Episode7 #Russia #Africa #RussianDisinformation #RussianInfluence #Disinformation #InformationWarfare #InfluenceOperations #ForeignInterference #FIMI #CoordinatedInauthenticBehaviour #CIB #FakeNews #FakeMedia #FakeNewsrooms #MediaImpersonation #GrassrootsManipulation #Astroturfing #ArtificialIntelligence #AI #AIPropaganda #SyntheticMedia #FakeInfluencers #SocialMediaManipulation #Facebook #Meta #OperationNoBell #AfricanMedia #MediaManipulation #Propaganda #DigitalInfluence #Angola #Ghana #Kenya #SouthAfrica #OSINT #WRLD

Elke dag land ik op websites van overheidsgerelateerde organisaties, waar ik me steeds weer verbaas over het aantal mensen die daar werken, en wat hun functies allemaal zijn. In de private sector zou daar wellicht 80% minder personeel werken, en toch meer output leveren. Dat is de realiteit vandaag. #overheid #werk #efficiëntie

Storm-1516 – Russia’s information war arrives early in France’s 2027 election France will not elect its next president until April 2027, but the information operations surrounding the campaign have already begun. In late July and August 2026, fabricated stories targeted several prominent figures associated with the presidential race, including Raphaël Glucksmann, Gabriel Attal and former prime minister Édouard Philippe. The methods included fake news websites copying established French media, impersonated journalists, AI-generated voices and manipulated video. French authorities identified the Russian operation known as Storm-1516 behind several of these campaigns. Other attacks were linked to Matryoshka, another Russia-aligned influence network. The timing is significant. Storm-1516 began targeting the French presidential environment roughly nine months before the first round, scheduled for 18 April 2027. Rather than a single disinformation campaign, the activity demonstrates how Russian influence networks can establish narratives and infrastructure long before an election reaches its decisive phase. A fake scandal targeting Raphaël Glucksmann One of the clearest examples appeared at the end of July. A website impersonating the French independent outlet Blast published a fabricated investigation claiming that journalist Léa Salamé had attempted to bribe media organisations in exchange for favourable coverage of her partner, Raphaël Glucksmann. The operation went beyond copying the appearance of a legitimate news site. The identities of real journalists were appropriated and a manipulated video used an AI-generated imitation of the voice of Edwy Plenel, founder of Mediapart, supposedly confirming the allegations. The accusation was false. On 4 August, Glucksmann said France's General Secretariat for Defence and National Security, the SGDSN, had informed him that he had been targeted by Storm-1516. Two days later, the Paris prosecutor's office opened an investigation into suspected Russian interference. The importance of the operation was not the quality of one particular deepfake but the construction of several mutually reinforcing elements: a fake media organisation, impersonated journalists, synthetic audio and social-media accounts distributing the material. Together they created the impression that the allegation had been independently corroborated. Different candidates, overlapping Russian networks Édouard Philippe was also targeted by fabricated stories claiming that he suffered from dementia and was medically incapable of running for president. VIGINUM attributed the operation to Storm-1516. Gabriel Attal faced another wave of false content, including fabricated stories mimicking the identities of French outlets such as RFI, BFM TV, France 24, AFP, Le Parisien, Libération and Le Monde. Some claimed that Attal had symptoms of Parkinson's disease or links to drug trafficking. Attribution here is more complicated. French reporting connected at least part of the campaign against Attal to Matryoshka, rather than Storm-1516. A later digitally manipulated video, apparently associated with Storm-1516, used genuine LCI footage from an August debate but added a white earpiece to Attal, suggesting that someone had secretly been feeding him answers. NewsGuard compared the circulating clip with authentic LCI footage and found no earpiece in the original. The distinction is important. France is not facing a single Russian propaganda operation but several overlapping networks using similar techniques and narratives. Treating every manipulation as Storm-1516 would obscure how this ecosystem actually functions. The real weapon is media impersonation The most interesting feature of Storm-1516 is not artificial intelligence itself. It is the systematic appropriation of the credibility of established journalism. Instead of relying only on anonymous Telegram channels or social-media profiles, operators create material that looks as though it originated from organisations audiences already recognise. A fabricated investigation can resemble Blast, a manipulated television report can borrow LCI's visual identity, while fake journalists and social-media accounts provide additional layers of apparent confirmation. VIGINUM has documented this architecture extensively. Its 2025 investigation analysed 77 Storm-1516 information operations and described a mature Russian system using fabricated media, websites and distribution networks to promote anti-Ukrainian and anti-Western narratives. The European External Action Service found that the infrastructure continued to expand. According to its 2026 FIMI Threat Report, Storm-1516 almost doubled its output during 2025. Five networks created that year to target French, German, American, Moldovan and international audiences comprised 453 websites, including fictional news organisations and sites impersonating genuine media or political platforms. A typical operation therefore follows a recognisable pattern: a fabricated allegation is supported by synthetic or manipulated evidence, published through an apparently legitimate source and then distributed by networks of accounts that create the appearance of wider discussion. AI makes this process faster and cheaper, but the fundamental objective remains the same – to manufacture credibility. Why begin nine months before an election? VIGINUM concluded that Storm-1516 is capable both of reacting rapidly to current events and of conducting longer campaigns aimed at discrediting Western institutions and public figures, particularly around elections and other major political events. This provides important context for France. Storm-1516 activity around the presidential race became visible in July 2026, approximately nine months before voting begins. There is no public evidence of a predetermined Russian “nine-month plan”, and the timing should not be presented as such. Early activity nevertheless provides operational advantages: narratives can be tested, websites and accounts established, audience reactions measured and the responses of journalists, authorities and fact-checkers observed. The first operations may therefore also provide information about which themes and techniques are most effective before the campaign enters its decisive months. This remains an analytical interpretation rather than a demonstrated statement of the operators' intentions. Russian operation, but what about the GRU? Attribution requires similar precision. VIGINUM explicitly describes Storm-1516 as a Russian information operation, and French authorities have attributed individual campaigns to it with high confidence. Connections with Russian military intelligence have also been reported. Glucksmann said the SGDSN informed him that the network targeting him was controlled by Russia's GRU, while French media have repeatedly described Storm-1516 as linked to Russian military intelligence. However, VIGINUM's publicly available technical documentation describes Storm-1516 primarily as a Russian information modus operandi, rather than identifying it as a formally established GRU unit. It is therefore well supported to describe Storm-1516 as a Russian influence operation with reported links to military intelligence. Saying simply that Storm-1516 is a GRU unit would go beyond what France's published technical evidence currently establishes. An early warning for the French election There is also no evidence that the operations have so far had a significant effect on French voters. Some of the fabricated material generated only limited engagement, and measuring the real impact of foreign information operations remains extremely difficult. Even a video attracting hundreds of thousands of views does not establish how many viewers believed it or whether it changed political attitudes. The significance of Storm-1516 lies instead in the infrastructure already being deployed. Months before the election, Russian influence networks have been able to test fake newsrooms, synthetic voices, manipulated television footage, candidate-specific narratives and systems for distributing them. The French case illustrates a broader evolution in election interference. The objective is no longer simply to place false claims on social media. Modern operations can manufacture an entire chain of apparent evidence in which a fake journalist cites a fake investigation, synthetic audio appears to confirm it and networks of accounts give the impression that an authentic controversy is unfolding. France still has months to go before its presidential election. The information environment surrounding it is already being contested. Sources: VIGINUM / SGDSN — Storm-1516 analysis https://www.sgdsn.gouv.fr/publications/analyse-du-mode-operatoire-informationnel-russe-storm-1516 VIGINUM / SGDSN — Full Storm-1516 technical report https://www.sgdsn.gouv.fr/files/files/Publications/20250507_TLP-CLEAR_NP_SGDSN_VIGINUM_Technical%20report_Storm-1516.pdf VIGINUM / SGDSN — Storm-1516 operation targeting Emmanuel Macron https://www.sgdsn.gouv.fr/publications/storm-1516-detection-dune-operation-dingerence-numerique-etrangere-ciblant-emmanuel EEAS — 4th Report on FIMI Threats https://www.eeas.europa.eu/sites/default/files/2026/documents/EEAS%204th%20Threat%20Report_web.pdf Le Monde — Russian interference targeting Philippe, Glucksmann and Attal https://www.lemonde.fr/politique/article/2026/08/07/presidentielle-2027-glucksmann-attal-philippe-les-ingerences-russes-s-invitent-dans-la-campagne_6740451_823448.html Le Monde — Storm-1516 and Matryoshka analysis https://www.lemonde.fr/pixels/article/2026/08/06/ingerences-russes-pourquoi-il-ne-faut-pas-nourrir-le-troll_6739956_4408996.html NewsGuard Risk Briefing — Russian activity targeting the French election https://newsguardriskbriefing.substack.com/p/russia-targets-french-elections-iran Euronews — Operation targeting Raphaël Glucksmann https://fr.euronews.com/my-europe/2026/08/04/presidentielle-de-2027-raphael-glucksmann-vise-par-une-operation-de-destabilisation-russe Télérama / AFP — Glucksmann deepfake investigation https://www.telerama.fr/debats-reportages/presidentielle-2027-raphael-glucksmann-vise-par-un-deepfake-d-origine-russe-7032318.php Le Parisien — Operation targeting Gabriel Attal https://www.leparisien.fr/elections/presidentielle/presidentielle-2027-gabriel-attal-a-son-tour-vise-par-une-ingerence-en-provenance-de-russie-05-08-2026-I3Z67Z7ZUBDUVBXUNDARI5KGPA.php Euronews — Paris prosecutor investigations into suspected Russian interference https://fr.euronews.com/my-europe/2026/08/18/soupcons-dingerence-russe-visant-attal-et-philippe-le-parquet-de-paris-ouvre-dune-enquete Keywords: #DISINFORMED #Episode6 #Storm1516 #France #FrenchElection2027 #Disinformation #InformationWarfare #InfluenceOperations #ForeignInterference #FIMI #RussianInfluence #RussianDisinformation #Propaganda #Deepfakes #ArtificialIntelligence #AI #SyntheticMedia #FakeNews #MediaImpersonation #FakeMedia #DigitalManipulation #ElectionInterference #PoliticalDisinformation #Matryoshka #VIGINUM #OSINT #CyberInfluence #DigitalInfluence #MediaManipulation #EuropeanSecurity #Democracy #WRLD