Search

𝗜𝗿𝗮𝗻’𝘀 𝗳𝗮𝗸𝗲 𝗜𝘀𝗿𝗮𝗲𝗹𝗶𝘀 – 𝗵𝗼𝘄 𝗮 𝗳𝗼𝗿𝗲𝗶𝗴𝗻 𝗶𝗻𝗳𝗹𝘂𝗲𝗻𝗰𝗲 𝗻𝗲𝘁𝘄𝗼𝗿𝗸 𝗲𝗻𝘁𝗲𝗿𝗲𝗱 𝗜𝘀𝗿𝗮𝗲𝗹’𝘀 𝗲𝗹𝗲𝗰𝘁𝗶𝗼𝗻 𝗱𝗲𝗯𝗮𝘁𝗲 Ahead of Israel’s 27 October election, hundreds of social-media accounts have been presenting themselves as ordinary Israelis while injecting political messages into genuine domestic conversations. They appear as women, reservists, secular voters, religious activists and frustrated citizens. Some attack Benjamin Netanyahu, others have previously promoted narratives associated with the Israeli right, while many focus less on parties than on a broader message: Israel is divided, its institutions cannot be trusted and its political system is approaching crisis. A detailed investigation by the OSINT company Golden Owl has mapped this activity as a substantial Iran-linked influence network. Its October analysis identified at least 694 accounts, with 445 attributed at high or medium-high confidence to the operation. Between 11 August and 11 October, the network generated at least 4.7 million views and more than 160,000 interactions. The researchers found no evidence that these accounts were simply a group of independent Iranian commentators expressing political opinions. Their assessment rests instead on coordinated behaviour, false identities, account histories, copied content, language patterns and platform metadata linking significant parts of the infrastructure to Iran. 𝗙𝗿𝗼𝗺 𝟯𝟱 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝘀 𝘁𝗼 𝗵𝘂𝗻𝗱𝗿𝗲𝗱𝘀 𝗼𝗳 𝗳𝗮𝗸𝗲 𝗮𝗰𝗰𝗼𝘂𝗻𝘁𝘀 The investigation developed in two stages. Golden Owl’s first report, published in September, identified an operational core of 35 accounts: 32 personas presenting themselves as Israelis and three Hebrew-language media-style channels. During the 30-day period measured in that study, active accounts generated 947,322 impressions and more than 9,000 interactions. The October investigation expanded the dataset dramatically. Researchers analysed more than 560,000 data points, including tens of thousands of accounts, relationships between them and more than a quarter of a million posts. The wider network showed repeated patterns of identical texts, synchronised activity and accounts created in batches. The numbers therefore describe not a sudden explosion from 35 to hundreds of accounts, but the gradual exposure of a much larger infrastructure surrounding the original core. 𝗧𝗵𝗲 𝗳𝗮𝗸𝗲 𝗜𝘀𝗿𝗮𝗲𝗹𝗶𝘀 Some of the strongest evidence comes from the histories of individual personas. One account had spent years posting exclusively in Persian under the handle “mardeankabooti” before reappearing in August 2026 as an apparently Israeli user called “Alon Strauss”, complete with an Israeli flag and Hebrew political messaging. Other personas presented themselves as Israeli professionals, activists or ordinary citizens while X transparency information showed connections through the Iranian version of the Android application or locations inconsistent with their claimed identities. The account “Yaara Shalev” presented itself as an Israeli woman concerned with democracy and peace. Investigators found that photographs used to construct the identity were inconsistent, including borrowed and apparently AI-generated imagery. A small Hebrew-language channel called KigVoice, previously identified in Israeli government reporting as part of an Iranian influence environment, repeatedly published material that later appeared on the much more visible Yaara account. In one sample, 14 of 40 KigVoice posts subsequently resurfaced as captions or opening lines in Yaara’s content. Another persona, “Miriam Kozak”, had built an audience of more than 18,000 followers and had already been exposed as fictitious by Israeli researchers in 2024. Its political messaging changed substantially over time, moving between narratives associated with different sides of Israeli politics. That inconsistency is important: the apparent purpose was not necessarily to build a stable ideological following, but to enter whichever political argument offered the greatest opportunity to intensify division. 𝗔𝗜, 𝗰𝗼𝗽𝗶𝗲𝗱 𝗺𝗲𝘀𝘀𝗮𝗴𝗲𝘀 𝗮𝗻𝗱 𝗜𝗿𝗮𝗻𝗶𝗮𝗻 𝗳𝗶𝗻𝗴𝗲𝗿𝗽𝗿𝗶𝗻𝘁𝘀 The Iran attribution is based on more than political content. Researchers identified accounts using the Iranian version of the X Android application, repeated connections to previously identified Iranian influence assets, copied posts appearing across supposedly independent personas within minutes, and Hebrew containing unusual grammatical errors or Persian and Arabic keyboard artefacts. Generative AI also appears to have become part of the production process. Some accounts inadvertently published fragments resembling chatbot instructions, while other posts displayed patterns consistent with machine-generated Hebrew. AI-generated videos and synthetic profile imagery further reduced the cost of maintaining large numbers of apparently distinct personalities. However, none of these indicators was treated as proof on its own. Golden Owl explicitly excluded accounts where the evidence was insufficient and notes that VPNs, travel and platform location labels can create misleading signals. The attribution rests on multiple independent indicators converging across the network. 𝗧𝗵𝗲 𝗴𝗼𝗮𝗹 𝗶𝘀 𝗻𝗼𝘁 𝗻𝗲𝗰𝗲𝘀𝘀𝗮𝗿𝗶𝗹𝘆 𝘁𝗼 𝗲𝗹𝗲𝗰𝘁 𝗼𝗻𝗲 𝗽𝗮𝗿𝘁𝘆 The network repeatedly exploited issues that genuinely divide Israeli society: responsibility for the 7 October attacks, the war, the hostages, ultra-Orthodox military exemptions, economic pressure, emigration and confidence in state institutions. It also circulated misleading information about the election itself, including false voting dates, claims that voting had been postponed and posts suggesting online voting mechanisms that do not exist in Israel’s parliamentary election system. The pattern suggests a strategy broader than conventional electoral campaigning. Rather than consistently promoting one political faction, the network appears designed to weaken confidence in the government, military, democratic institutions and the electoral process itself. An influence operation does not need to persuade Israelis to support a particular candidate if it can convince different groups that defeat would prove fraud, betrayal or systemic failure. 𝗥𝗲𝗮𝗹 𝗜𝘀𝗿𝗮𝗲𝗹𝗶𝘀 𝗮𝘀 𝘂𝗻𝘄𝗶𝘁𝘁𝗶𝗻𝗴 𝗮𝗺𝗽𝗹𝗶𝗳𝗶𝗲𝗿𝘀 One of the network’s most effective characteristics is that it does not depend solely on its own followers. Fake personas enter comment sections and political discussions involving real Israeli journalists, politicians and ordinary users. Authentic Israelis then repost or interact with the material, sometimes carrying it far beyond the original account. Golden Owl does not classify those genuine users as participants in the operation. In most cases they appear to be unwitting amplifiers. But once a message passes from a fabricated Iranian-operated persona to an authentic Israeli account, its foreign origin becomes much harder for the next person to recognise. 𝗧𝗵𝗲 𝟰𝟬,𝟬𝟬𝟬-𝗯𝗼𝘁 𝗳𝗶𝗴𝘂𝗿𝗲 𝗯𝗲𝗹𝗼𝗻𝗴𝘀 𝘁𝗼 𝗮 𝗱𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝘁 𝗽𝗲𝗿𝗶𝗼𝗱 A much larger figure has also appeared in recent reporting. In the first two days after the October 2023 Hamas attack, social-media intelligence company Cyabra identified more than 40,000 fake profiles participating in online discussions across major platforms. Their content generated hundreds of thousands of interactions and had a potential reach estimated at 531 million profiles. Those numbers are important historical context, but they should not be merged with the current Golden Owl investigation. There is no public evidence demonstrating that all of those 2023 accounts and the 2026 Iran-linked election network belonged to one continuous command structure. The 531 million figure is also an estimate of potential exposure, not proof that 531 million people saw or believed the content. 𝗪𝗵𝗼 𝗶𝘀 𝗮𝗰𝘁𝘂𝗮𝗹𝗹𝘆 𝗯𝗲𝗵𝗶𝗻𝗱 𝘁𝗵𝗲 𝗼𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻? No confirmed individual operators have been publicly identified. Names such as Yaara Shalev, Miriam Kozak and Alon Strauss are personas, not verified identities of the people controlling the accounts. Golden Owl says its evidence supports an association with the Islamic Republic of Iran and with previously documented Iranian influence infrastructure, but it does not establish which Iranian institution, intelligence service, military organisation or contractor directs the network. That distinction is essential. Public OSINT supports attribution at the Iran-linked operational level. It does not currently justify naming individual Iranian officials as the people commanding this specific campaign. 𝗧𝗵𝗲 𝗱𝗲𝗲𝗽𝗳𝗮𝗸𝗲 𝗶𝘀 𝗻𝗼 𝗹𝗼𝗻𝗴𝗲𝗿 𝗼𝗻𝗹𝘆 𝘁𝗵𝗲 𝘃𝗶𝗱𝗲𝗼 The Israeli case illustrates a broader change in influence operations. The synthetic asset does not have to be a spectacular deepfake of a politician. It can be an apparently ordinary citizen who comments on politics, argues with neighbours, describes personal experiences and gradually becomes part of an authentic community. That can be more difficult to recognise because the propaganda does not arrive looking foreign. It arrives looking local. And when hundreds of fabricated citizens enter the same national conversation, they can manufacture the impression that political anger, despair or distrust is more spontaneous and more widely shared than it really is. 𝗦𝗼𝘂𝗿𝗰𝗲𝘀 Golden Owl — Exposing the Iranian Regime’s Influence Machinery Against Israeli Society https://web-dev-production-7a35.up.railway.app/resources/research/Exposing-the-Iranian-Regime-Influence-Machinery-Against-Israeli-Society Golden Owl Golden Owl — The Other Face of War: Iranian Regime–Linked Manipulation of Israel’s 2026 Election Debate https://web-dev-production-7a35.up.railway.app/resources/research/Iranian-Regime-Linked-Manipulation-of-Israel-2026-Election-Debate Golden Owl The Jerusalem Post — Iran-linked social-media accounts posing as Israelis to target election https://www.jpost.com/israel-election-2026/article-909863 The Jerusalem Post Ynet — Fake Israelis, real influence: Iran-linked network infiltrates Israel’s election debate https://www.ynetnews.com/tech-and-digital/article/syp119nqqzg ynetglobal Calcalist — Iranian influence network exposed ahead of Israel’s election https://www.calcalist.co.il/calcalistech/article/s1q0ifijzl calcalist Vesty / Ynet — Iranian fake-account network and October update https://www.vesty.co.il/main/article/rkwokjssgg vesty Israel Ministry for Diaspora Affairs — Iran’s active Hebrew-language influence campaign https://www.gov.il/BlobFolder/reports/israel-and-us-strikes-in-iran-daily-status_2_3_26/en/mashlat_Roaring_Lion_israel-and-us-strikes-in-iran-daily-status_2_3_26.pdf Government of Israel Israel Central Elections Committee — official 2026 election timetable https://www.gov.il/en/pages/time--table-26 Government of Israel Channel NewsAsia — historical Cyabra analysis of more than 40,000 fake profiles after 7 October 2023 https://www.channelnewsasia.com/singapore/how-fake-news-israel-hamas-stokes-outrage-hatred-and-potential-violence-southeast-asian-tiktok-5603221 𝗞𝗲𝘆𝘄𝗼𝗿𝗱𝘀 #DISINFORMED #Episode20 #Iran #Israel #IsraelElection2026 #IranianInfluence #IranianDisinformation #ElectionInterference #ForeignInterference #FIMI #Disinformation #InformationWarfare #InfluenceOperations #FakeAccounts #FakePersonas #SyntheticIdentity #ArtificialIntelligence #AI #AIPropaganda #SocialMediaManipulation #Astroturfing #NarrativeManipulation #PoliticalDisinformation #ElectionDisinformation #X #Twitter #Bots #BotNetwork #KigVoice #YaaraShalev #MiriamKozak #DigitalInfluence #InformationManipulation #ElectionIntegrity #GoldenOwl #OSINT #MediaManipulation #WRLD

𝗧𝗵𝗲 $𝟰𝟯 𝗺𝗶𝗹𝗹𝗶𝗼𝗻 𝗿𝗼𝘆𝗮𝗹 𝗲𝘀𝘁𝗮𝘁𝗲 𝘁𝗵𝗮𝘁 𝗭𝗲𝗹𝗲𝗻𝘀𝗸𝘆𝘆 𝗻𝗲𝘃𝗲𝗿 𝗯𝗼𝘂𝗴𝗵𝘁 A Norwegian royal residence, a $43 million price tag, an offshore company historically linked to Volodymyr Zelenskyy and a video apparently produced by the American entertainment outlet E! News. The story contained enough authentic details to look plausible. It was also fabricated. At the end of September 2026, social-media accounts began circulating a video claiming that Film Heritage Inc., a Belize-registered company with historical links to Zelenskyy and his family, had purchased the Norwegian royal estate of Skaugum for approximately $43 million. The property was described as covering 240 acres, while the supposed transaction was linked to Zelenskyy’s visit to Norway for the funeral of King Harald V. Independent investigations found no evidence that such a sale had ever taken place. 𝗔 𝗳𝗮𝗸𝗲 𝗿𝗲𝗽𝗼𝗿𝘁 𝗯𝘂𝗶𝗹𝘁 𝗮𝗿𝗼𝘂𝗻𝗱 𝗿𝗲𝗮𝗹 𝗲𝘃𝗲𝗻𝘁𝘀 The fabrication was carefully constructed around genuine information. King Harald V had died in August 2026, and Zelenskyy and First Lady Olena Zelenska travelled to Oslo for his funeral on 9 September. Skaugum is also a genuine royal estate in Asker with a long history as a residence of Norway’s heir to the throne. The false report turned those facts into a fictional property transaction. It claimed that Zelenskyy had previously attempted to buy the estate, that the Norwegian royal family had rejected an earlier approach and that the purchase had finally been completed after the property supposedly became a financial burden. No documentary evidence supporting any of these claims has emerged. Norway’s Ministry of Foreign Affairs later confirmed to fact-checkers that the allegation was false. Searches of established Norwegian and international media also produced no credible reporting about the supposed transaction. 𝗔 𝗻𝗲𝘄𝘀𝗿𝗼𝗼𝗺 𝘁𝗵𝗮𝘁 𝗲𝘅𝗶𝘀𝘁𝗲𝗱 𝗳𝗼𝗿 𝘁𝘄𝗼 𝗱𝗮𝘆𝘀 The most important part of the operation was not the property claim itself. It was the source apparently verifying it. The video was designed to resemble an E! News report, borrowing the visual language of the established American entertainment brand. But investigators found no such story on E! News’s genuine website, social-media channels or archived pages. Instead, the accompanying article appeared on eonline.news, a domain closely resembling E! News’s legitimate eonline.com address. Registration records showed that the imitation domain had been created on 27 September 2026 — only two days before the story was published. The accompanying video also showed signs of synthetic production. Fact-checkers examining the material identified indications that AI tools had been used in the narration and audiovisual elements. The operation therefore did not simply invent a news story. It created an apparently credible media environment around it. 𝗧𝗵𝗲 𝗿𝗲𝗮𝗹 𝗰𝗼𝗺𝗽𝗮𝗻𝘆 𝗶𝗻𝘀𝗶𝗱𝗲 𝘁𝗵𝗲 𝗳𝗮𝗹𝘀𝗲 𝘀𝘁𝗼𝗿𝘆 The supposed buyer was also carefully selected. Film Heritage Inc. was not invented for the fabrication. The Pandora Papers previously documented a genuine historical connection between the Belize-registered company and Zelenskyy’s former business network. Leaked documents showed that Zelenskyy and his wife had held an interest in another offshore company through Film Heritage before changes were made to the ownership structure around his 2019 presidential campaign. That authentic history gave the new fabrication an additional layer of plausibility. The same company name has previously appeared in false narratives alleging extravagant purchases by Zelenskyy, including supposed luxury-property and casino acquisitions. Those stories were also unsupported by evidence. This illustrates a recurring feature of effective disinformation: not every component has to be false. A genuine company can be combined with a genuine trip, a genuine property and a genuine media brand to manufacture an event that never occurred. 𝗧𝗵𝗲 𝗠𝗮𝘁𝗿𝘆𝗼𝘀𝗵𝗸𝗮 𝗰𝗼𝗻𝗻𝗲𝗰𝘁𝗶𝗼𝗻 Ukraine’s Center for Countering Disinformation assessed the operation as consistent with the Russian Matryoshka disinformation playbook. The technique strongly resembles previously documented Matryoshka activity: impersonating established Western media organisations, creating fabricated video reports and distributing them through coordinated or pro-Russian social-media networks. French authorities have documented Matryoshka since 2023 as a pro-Russian influence operation targeting media organisations, public figures and fact-checkers. Investigations have shown repeated use of counterfeit reports imitating major European and North American news brands. The Norwegian-estate story fits that pattern closely. The attribution nevertheless requires precision. Independent evidence establishes that the E! News report was fake, that a newly created imitation website was involved and that the story circulated through pro-Russian information channels. Publicly available forensic evidence does not yet identify a specific individual or technical operator who created this particular asset. It is therefore more accurate to describe the Matryoshka connection as a well-supported analytical attribution rather than a publicly proven chain of command. 𝗪𝗵𝗲𝗻 𝘁𝗵𝗲 𝘀𝗼𝘂𝗿𝗰𝗲 𝗯𝗲𝗰𝗼𝗺𝗲𝘀 𝘁𝗵𝗲 𝗱𝗲𝗲𝗽𝗳𝗮𝗸𝗲 The most important element of the operation is not really the $43 million figure. It is the construction of credibility around it. A genuine royal funeral supplied the timing. A genuine Norwegian estate supplied the location. A genuine offshore company supplied a documented connection to Zelenskyy. A counterfeit E! News website supplied apparent journalistic confirmation. Synthetic audiovisual material supplied what looked like additional evidence. Each element reinforced the others. This reflects a broader change in contemporary disinformation. The most sophisticated operations no longer rely exclusively on fabricating photographs, videos or statements. Increasingly, they fabricate the source that supposedly verified them. The deepfake is sometimes the entire newsroom! 𝗦𝗼𝘂𝗿𝗰𝗲𝘀 Lead Stories — investigation into the fake E! News report https://leadstories.com/hoax-alert/2026/10/fact-check-enews-did-not-publish-report-about-zelenskyy-buying-43-million-dollar-mansion-from-norways-royal-family.html Center for Countering Disinformation of Ukraine — Norwegian royal estate fabrication https://cpd.gov.ua/en/international-threats-en/europe/fake-about-zelenskyys-purchase-of-a-norwegian-royal-family-estate/ Ellinika Hoaxes — investigation and Norwegian government response https://www.ellinikahoaxes.gr/2026/10/09/agorase-o-zelenski-ektasi-240-stremmaton-apo-ti-vasiliki-oikogeneia-tis-norvigias-gia-43-ekatommyria-dolaria/ The Royal House of Norway — funeral of King Harald V https://www.royalcourt.no/news/the-funeral-of-king-harald-v The Royal House of Norway — Skaugum and the Royal Estates https://www.royalcourt.no/the-royal-court/the-departments-the-royal-court/the-royal-estates-and-parks President of Ukraine — Zelenskyy and First Lady attend King Harald V’s funeral https://www.president.gov.ua/en/news/prezident-ukrayini-ta-persha-ledi-vzyali-uchast-u-ceremoniyi-106293 OCCRP — Pandora Papers investigation into Zelenskyy’s offshore network https://www.occrp.org/en/project/the-pandora-papers/pandora-papers-reveal-offshore-holdings-of-ukrainian-president-and-his-inner-circle AFP Fact Check — previous false luxury-purchase narrative involving Film Heritage https://factcheck.afp.com/doc.afp.com.36PG6EC VIGINUM / SGDSN — Matryoshka technical report https://www.sgdsn.gouv.fr/files/files/20240611_NP_SGDSN_VIGINUM_Matriochka_EN_VF.pdf CheckFirst — Operation Overload / Matryoshka investigation https://checkfirst.network/operation-overload-an-ai-fuelled-escalation-of-the-kremlin-linked-propaganda-effort/ Keywords #DISINFORMED #Episode19 #Zelenskyy #Ukraine #Norway #Russia #RussianDisinformation #RussianInfluence #Matryoshka #OperationOverload #Disinformation #InfluenceOperations #InformationWarfare #FIMI #MediaImpersonation #FakeMedia #ClonedWebsite #FakeNewsroom #ENews #ArtificialIntelligence #AI #AIGeneratedContent #VoiceCloning #SyntheticMedia #Deepfake #SourceLaundering #NarrativeLaundering #FilmHeritage #PandoraPapers #Skaugum #NorwegianRoyalFamily #Propaganda #DigitalInfluence #FactChecking #VIGINUM #OSINT #MediaManipulation #WRLD

Operators like Vodafone are actively fighting against fraud using artificial intelligence and deepfake technologies, which are spreading among individuals and companies, and they plan to launch the Vodafone Verify application for verifying suspicious digital content on October 22. #podvody #uměláinteligence #deepfake (translated)

Operation Dark Clark – Russia built a real organisation around a false identity Most influence operations create fake people, fake websites or fake news stories. Operation Dark Clark appears to have gone considerably further: Russian operators built what looked like a functioning research organisation in Latin America, employed real people to produce genuine research and concealed from those employees who was ultimately directing their work. OpenAI disclosed the operation on 8 October after banning a cluster of accounts originating in Russia. The actors used ChatGPT while targeting countries across Latin America, principally to damage Ukraine’s reputation, manipulate domestic political debates and manage a self-described research organisation called the Social Research Center, or SRC. OpenAI assessed Dark Clark as Category Five on the six-level Breakout Scale, the first operation it has disrupted since beginning its influence-operation reporting to reach that level. A front organisation with real employees The SRC presented itself as a research platform studying subjects including Latin America’s relationship with India and the Indian diaspora. OpenAI found more than 60 articles on its website, most of them apparently original rather than plagiarised. Internal reports produced by the Russian operators discussed hiring, dismissals, salary scales, staffing and unfinished research projects, strongly suggesting that the operators controlled the organisation rather than merely collaborating with it. At the centre of the structure was “Mia Clark”, a fictitious identity reportedly used to manage social-media activity and communicate with staff. According to OpenAI, the available evidence indicates that employees working for SRC in Latin America were probably unaware that the organisation was being directed by Russian actors. They interviewed experts, conducted research and wrote papers in what appears to have been good faith. The deception therefore existed primarily at the organisational level: much of the work was real, but the identity and strategic purpose of the institution commissioning it were not. OpenAI This is one reason Dark Clark differs from the familiar model of a troll farm. A reader encountering an SRC paper might be looking at research genuinely written by a Latin American employee based on genuine interviews. The manipulation lies further upstream, in who built the institution, selected its direction and controlled its infrastructure. From forged emails to real events The operation also appears to have attempted something more ambitious than online persuasion: inducing real people to produce events that could later be turned into propaganda. In May 2026, according to the operators’ internal reports, they created an email address impersonating Lima’s regional education authorities and instructed schools to organise activities about Ukraine for a cultural-diversity event. The instructions included references to Stepan Bandera, whose historical legacy remains particularly contentious in Poland and parts of Eastern Europe. The operators claimed that some schools complied, replied to the false address and sent photographs of the events. OpenAI could not independently verify every claim contained in the operators’ reports. It did, however, find Peruvian reporting matching the story, followed by publications in Poland and an English-language outlet in Hungary. Some coverage included comments from a Polish MEP calling for people displaying what he described as anti-Polish attitudes to be declared persona non grata. OpenAI therefore concluded that the fabricated starting point appears to have entered genuine political debate across national borders. The mechanism is unusually effective because the final photographs need not themselves be fabricated. If people can be tricked into staging a real event on the basis of a forged instruction, the operation creates authentic visual evidence of something that was artificially initiated. The same method in Ecuador and Bolivia Dark Clark’s internal reports describe similar efforts elsewhere. In Ecuador, the operators claimed they used a fake education email to encourage schools to stage ceremonies involving President Daniel Noboa and Erik Prince, the former head of Blackwater. Ecuadorian media subsequently covered a matching controversy, and the country’s education minister issued a detailed denial. Other Ecuador-focused material included fabricated audio attributed to Ukraine’s consul and a false television report alleging that Noboa’s government was recruiting Ecuadorians to fight in Ukraine. Local fact-checker Lupa found that the supposed Teleamazonas report had never been broadcast, that images had been taken from Instagram, that the audio was AI-generated and that a company named in a supposed recruitment contract did not exist in Ecuador’s corporate registry. In Bolivia, an internal report described a fake audio recording supposedly made by an employee of state water company EPSAS during anti-government protests. It claimed that water supplies to La Paz would be cut and a state of emergency declared. The allegation produced a fact-check and an official denial. OpenAI says the operators explicitly described their objective as worsening the political crisis surrounding the demonstrations. Possible links to the post-Wagner influence machine Dark Clark did not emerge in a vacuum. The operators repeatedly asked ChatGPT about Politology and La Compania, names associated in previous investigations with the Russian influence apparatus that developed from structures once connected to Yevgeny Prigozhin. Forbidden Stories and its partners obtained 1,431 pages of internal documents describing a network known as “The Company”, which they reported had grown to almost 100 operatives and was conducting influence projects across roughly 30 Global South countries. Their investigation found that the organisation moved under the supervision of Russia’s Foreign Intelligence Service, the SVR, after Prigozhin’s death. Its documented budget for ten months of activity in 2024 was approximately €7.3 million. Two older Argentina campaigns claimed in Dark Clark’s internal reports — a false story about Javier Milei buying Cartier collars for his dogs and the staging of anti-Milei graffiti — had already been independently attributed by investigative journalists to Politology/La Compania. That is significant corroboration, but it is not enough to prove that every Dark Clark activity was run by the same organisational structure. AI was the back office, not the mastermind Perhaps the most important finding concerns artificial intelligence itself. In most documented cases, the Russians were not using ChatGPT to generate the propaganda seen by the public. Their principal use was administrative: drafting reports for an unknown superior, summarising operations, translating material and recording the supposed success of campaigns. Those reports also expose a weakness in the operators’ own measurement. OpenAI found instances in which they tried to claim credit for developments they had probably not caused, suggesting that they were not only attempting to manipulate Latin American audiences but also presenting an inflated picture of their effectiveness to whoever was supervising them. Dark Clark nevertheless broke further into the real world than any influence operation OpenAI had previously disrupted. Under the Brookings framework, Category Five means that an operation has escaped its original network and been amplified by high-profile individuals such as politicians. Dark Clark crossed that threshold because fabricated narratives appear to have provoked governmental denials, mainstream reporting and political comment in several countries. Its most important innovation was therefore not a particularly convincing deepfake. It was the construction of a partly genuine institution around a concealed foreign controller. The research could be real. The employees could be real. The interviews could be real. What was false was who they were ultimately working for. Sources OpenAI — Disrupting AI-enabled “false front” operations https://openai.com/index/disrupting-ai-enabled-false-front-operations/ Forbidden Stories — Propaganda Machine: Russia’s foreign influence strategy across three continents https://forbiddenstories.org/propaganda-machine-secret-documents-reveal-russias-foreign-influence-strategy-across-three-continents/ Forbidden Stories — Ghost Journalists, Cash and Kremlin Scripts: Argentina https://forbiddenstories.org/ghost-journalists-cash-and-kremlin-scripts-how-russian-operatives-tried-to-influence-argentinian-media/ openDemocracy — Russian influence operation in Bolivia https://www.opendemocracy.net/en/russia-bolivia-south-america-putin-evo-morales-wagner-prigozhin-covert-operations-propaganda-disinformation-foreign-interference/ Lupa Media — Fake Teleamazonas report about recruiting Ecuadorians for Ukraine https://lupa.com.ec/verificaciones/noboa-mercenarios-ucrania-ecuador/ Brookings Institution — The Breakout Scale https://www.brookings.edu/articles/the-breakout-scale-measuring-the-impact-of-influence-operations/ Keywords: #DISINFORMED #Episode17 #OperationDarkClark #DarkClark #Russia #LatinAmerica #RussianInfluence #RussianDisinformation #Disinformation #InformationWarfare #InfluenceOperations #ForeignInterference #FIMI #FalseFront #FrontOrganisation #FakeInstitution #SocialResearchCenter #SRC #ArtificialIntelligence #AI #GenerativeAI #ChatGPT #OpenAI #NarrativeManipulation #SourceLaundering #InstitutionalManipulation #ForgedDocuments #FakeAudio #PoliticalInfluence #CovertInfluence #Peru #Ecuador #Bolivia #Argentina #Ukraine #Politology #LaCompania #TheCompany #SVR #WagnerLegacy #PropagandaMachine #GlobalSouth #BreakoutScale #OSINT #MediaManipulation #WRLD

A new study shows that every sixth female member of the European Parliament has been a target of deepfake pornography, which has provoked a reaction from MEPs who are calling for an immediate ban and effective regulation of this issue. #Deepfake #UmjetnaInteligencija #EuropskiParlament (translated)

The federal cabinet has adopted a draft law from Federal Justice Minister Hubig aimed at improving protection against digital violence, including sexualized deepfakes and covert recordings, which is now being discussed in the Bundestag. #DigitaleGewalt #SexualisierteGewalt #Deepfake (translated)