Spilnota Detector Media

Disclosure Russians pass off last year's footage of Moscow strike as footage of attack on Israel

A video of a drone hitting one of the towers of the Moscow City business center on July 30, 2023 was distributed in the Russian segment of the Internet, and this attack was presented as a strike on the Israeli city of Eilat on October 1, 2024. To make the video more believable, Hebrew text was added to the video.

To verify that this is a still frame of the explosion in the Moscow City business center area, it is enough to use Google's reverse image search tool. Thus, it was possible to find out that the corresponding video appeared online in July 2023 after the attack on Moscow.

It should be noted that this is not the only ancient video that has been passed off as an Iranian attack on Israel on October 1, 2024. Logically Facts fact-checkers have recorded and debunked a number of other similar cases.

Thus, the propagandists are trying to exaggerate the consequences of the recent attack on Israeli cities. Israel, in turn, admits that some Iranian missiles did hit air bases, but assures that this did not cause significant damage to infrastructure or weapons.

We previously analyzed the Russian message that the wars in Ukraine and Israel are “not an accident”, since the United States is allegedly creating unstable zones with its own hands.

Disclosure The Kremlin has stepped up “disruption” measures in the occupied territories

The Center for Countering Disinformation reports that a large number of propaganda events are taking place in the occupied territories of Ukraine, where Russia draws parallels between the present and the events of World War II. In particular, the DPR court recognized the crimes of the Nazis in the region during World War II as genocide. Russia is presented as the heir to the “great victory” over Nazism, and its aggression against Ukraine is portrayed as a continuation of this struggle.

Also, in the occupied territories, thematic events to attract the public are constantly organized, propaganda films are released and broadcast. The Center for Countering Disinformation writes that in this way, Kremlin propaganda seeks to change the historical memory and consciousness of the residents of the occupied territories, drawing them into a single Russian socio-cultural space.

The Kremlin uses manipulations on the topic of World War II to consolidate support among the population and create the image of an “external enemy”. By speculating on the topic of the “heroic past”, the occupation authorities seek to distract the attention of the local population from economic and social difficulties, as well as from the repressions that “unreliable” residents of the occupied territories systematically experience.

Disclosure How Russia “covers up” its crimes in the occupied territories with a “reunification holiday”

Kremlin propaganda has launched a large-scale information campaign for the anniversary of the pseudo-referendums in the occupied territories. This was reported by the Center for Counteracting Disinformation.

Pro-Russian resources on the Internet cite statements by Putin and Kremlin-controlled Gauleiters regarding the so-called “reunification holiday”. Propaganda mass actions are also being held to create a “festive atmosphere”.

The Kremlin promotes the “happy occupation” narrative, constantly emphasizing how the occupied territories are supposedly “flourishing” under the Russian flag. In this way, Russia justifies the war against Ukraine.

The CPD adds that in reality all the Kremlin's statements about “improving life” in the occupied territories are outright and cynical lies, the purpose of which is to distract the population from the war crimes of the Russian army in Ukraine. The occupied territories are in a humanitarian crisis due to Russian aggression, destruction of infrastructure and violation of human rights. Life in the occupied territories is accompanied by repression and violence against the local civilian population.

Disclosure How RT Balkan spreads Russian propaganda in the region

Thanks to the Serbian government's control over media and a favorable political environment, RT (formerly Russia Today) uses its office in Belgrade to adapt Kremlin narratives and spread them throughout southeastern Europe. Reporters Without Borders (RSF), in its explanation of RT Balkan, calls on the European Union and its member states to hold Serbia accountable for hosting the video.

In September 2024, RSF approached RT with questions about the purpose of the new Balkan bureau and its relationship with the Russian government. RT immediately responded sarcastically: “We created RT Balkan with the sole purpose of annoying Reporters Without Borders”. This response underlines the provocative political nature of RT, which positions itself as a counterweight to organizations defending a free, independent and pluralistic press. However, this response also shows that RT is unwilling to be open about its goals or its ties to the government, as would be expected from a truly independent media outlet.

RT Balkan was officially launched on November 15, 2022, as an online broadcaster and multimedia website in the Serbian language. Although the TV channel never operated, RT Balkan quickly became the main tool of Russian propaganda in the Balkans. RT chose Serbia because of historical ties, shared Slavic culture and Orthodox religion, which created a favorable environment for Kremlin propaganda. Also importantly, the Serbian government controls a significant part of the media market, which it uses to spread its own propaganda. RT Balkan employs tactics such as “information laundering”, where disinformation published by RT is turned into “news” and distributed by mainstream media in the region. Through its presence in Serbia, RT actively amplifies Kremlin narratives across the region, particularly through social media and popular Serbian TV channels and newspapers.

Disclosure Deepfake Dmytro Kuleba had a provocative conversation with an American senator

An unknown person created a deepfake of Dmytro Kuleba to hold a conversation with a US senator via Zoom, posing as the former Ukrainian Foreign Minister. According to The New York Times, the attacker was able to communicate with the head of the US Foreign Affairs Committee Benjamin Cardin, asking politically provocative questions, including about support for the launch of long-range missiles at Russia. The behavior of “Kuleba” aroused the senator's suspicions, and he ended the conversation. Later, the US State Department confirmed that the senator had dealt with a fraudster using deepfake technology. This was reported by the Center for Strategic Communications and Information Security.

The purpose of such a deepfake was likely to obtain confidential information, stir up political controversy, or discredit the Ukrainian government and its international partners. Although the Kremlin’s involvement in this incident has not yet been confirmed, the questions raised during the conversation were clearly of interest to the Russian side.

Such technologies are increasingly being used for manipulation and disinformation. For example, on September 17, Russian propagandists released a deepfake with the former deputy head of the Presidential Office Rostyslav Shurma, in which he allegedly called for ending the war on Russia's terms. Also, before the Paris Olympics, Russian hackers spread deepfakes and disinformation about these competitions, trying to sow chaos and mistrust.

Disclosure Hackers from the occupied territories of the Luhansk region carry out cyber attacks on the Armed Forces of Ukraine

According to the State Special Communications Service, cybercriminals are sending Ukrainian military personnel emails with fake information about the latest weapons. The emails are accompanied by a file containing a RARSFX archive, which contains an EXE installer with the SPECTR malware. This virus collects confidential information, including passwords. In addition, hackers carry out attacks through the Signal messenger, where they send shortcut files that infect devices and allow remote access to the victims' data.

The Center for Strategic Communications and Information Security notes that this cyber group was created before Russia's full-scale invasion of Ukraine and consists of collaborators and former employees of Ukrainian law enforcement agencies.

The purpose of such cyber attacks is to undermine the ability of the Armed Forces of Ukraine to effectively defend the country and destabilize the situation at the front by breaking information systems. By collecting confidential data, including passwords and other important information, hackers can gain access to military plans, unit locations and other critical information, which can jeopardize both military operations and the lives of Ukrainian servicemen. In addition, Russia actively uses cyber attacks for information warfare to discredit Ukraine's defense capabilities in the eyes of the international community, presenting these breaks as weaknesses in the protection of critical infrastructure.

Disclosure What methods does the sanctioned Russian organization ASD use to spread Russian propaganda?

German media outlets Süddeutsche Zeitung, NDR and WDR, as well as the Estonian online publication Delfi, have gained access to leaked internal documents of the Agency for Social Design (ASD), an organization under EU and US sanctions. According to US law enforcement agencies, this agency works on behalf of the Russian presidential administration.

Journalists from Schemes (Radio Liberty), together with a number of European editorial offices, examined thousands of files obtained as part of the leak. As part of the Fake Factory project, they found out that ASD, under the leadership of Russian political strategist Illia Gambashidze, is engaged in disseminating disinformation to discredit Ukraine, its leadership and citizens, as well as Western leaders who support Ukraine. At the same time, the agency promotes Russian interests and supports European politicians who promote these interests.

Some of the documents from this leak were published by American law enforcement in early September, when they filed a motion to seize Internet domains associated with ASD. According to anonymous sources in Western intelligence, the files obtained by journalists are authentic.

ASD positions itself as an organization providing customers with full media support, including analysis of the Western information space, identification of potential threats, proposal of solutions and their implementation. The leak contains a video presentation of the company, presumably created for customers, where its director, Illia Gambashidze, appears. In the presentation, Gambashidze takes off his glasses and hood, stating that there is no point in hiding anymore, since the Doppelganger campaign was exposed by French intelligence.

The Doppelganger campaign involved creating fake websites of well-known publications, such as France's Le Monde and Germany's Der Spiegel, to discredit Ukraine. The fake news also covered Germany, the US, and Israel. Meta called Doppelganger the largest Russian information operation since 2017.

American law enforcement directly accuses ASD of working for the Kremlin and names its activities as being supervised by Serhii Kiriienko, deputy head of the administration of Russian President Volodymyr Putin. In addition, Sofiia Zakharova, an employee of the Putin administration, who, according to American intelligence agencies, took part in planning disinformation campaigns, was also involved in the Doppelganger campaign.

According to the documents, the ASD’s activities are carried out in three main areas:

Monitoring – analysis of the media space and opinions of more than 1000 public opinion leaders in six languages.

Analytics – studying the target audience and creating topics for further use.

Creative – creating fake articles and visual content that looks authentic to the target audience.

According to the leak, between January and April 2024 alone, the SDA created 39,899 pieces of content, including posts, videos, articles, memes, and special messages that are part of disinformation campaigns. The agency is also involved in distributing fake official documents.

In the leak, the journalists of Schemes found examples of forgeries of Ukrainian government documents. Among them are orders allegedly from the Office of the President of Ukraine and the Ministry of Defense, which were aimed at discrediting the Ukrainian government and military, accusing them of censorship and concealment of information.

Disclosure How Russia Uses Anti-War Movements to Legitimize Aggression Against Ukraine

The experts of the fakenews.pl portal, together with analysts from GLOBSEC (Slovakia) and Political Capital (Hungary), with the support of the Open Information Partnership, conducted a study of the activities of pro-Russian anti-war movements in Poland, the Czech Republic, Slovakia and Hungary. It describes the messages, connections of these movements, the background of their leaders and how the Kremlin manipulates pacifist ideas to legitimize the war in Ukraine.

The Kremlin's main trick in this case, according to the above-mentioned experts, is to use anti-war appeals to justify Russia's armed aggression against Ukraine. Instead of real peace, these movements spread ideas that shift part of the blame to the victim of aggression - Ukraine.

They also came to the following conclusions:

Pro-Russian “anti-war” movements cover a wide range of political forces, from parties in power to opposition and small political movements

In some countries (Slovakia, Hungary) anti-war rhetoric was successfully used to gain political advantages.

Almost all the movements studied have direct or indirect links with Russian officials or structures.

Anti-war movements use the same set of pro-Russian messages, adapted to the local context, but maintaining the general pro-Russian line.

The Visegrad Group organizations (Poland, Hungary, Slovakia, Czech Republic), as well as Germany, Bulgaria and Romania, cooperate, mutually promoting Russian propaganda.

Left- and right-wing movements are willing to cooperate if they are united by a pro-Russian narrative.

“Anti-war” movements that sympathize with Russia oppose supporting Ukraine in its defense against Russian aggression. Although they hide behind ideas of pacifism, their rhetoric strengthens the Kremlin’s position and contributes to disinformation. Using fear and emotion, these movements try to influence public opinion, creating a false image of the world, which in fact involves concessions to the aggressor.

Disclosure Russians create fake pages of the Coordination Headquarters

Russians are creating fake pages of the Coordination Headquarters for the Collection of Confidential Information. This was reported by the Center for Strategic Communications and Information Security.

Fraudsters create so-called “doubles” of official resources, promising Ukrainians alleged “help” in finding relatives who have been captured by the enemy or “assistance” in obtaining information about them. These fake sites and pages are created with the aim of misleading citizens and forcing them to voluntarily provide their personal data.

According to the Coordination Headquarters for the Treatment of Prisoners of War, such actions by the Russian side are aimed not only at collecting information, but also at having more dangerous consequences. The enemy seeks to gain access to private data for further blackmail and recruitment of Ukrainians, using the vulnerability of the families of prisoners of war. In addition, the enemy can manipulate public sentiment, creating an atmosphere of fear and mistrust.

The purpose of these fraudulent actions is to destabilize Ukrainian society by using the families of defenders for psychological pressure. The enemy can also use the information obtained to threaten the safety of prisoners of war and conduct reconnaissance on military operations.

The Coordination Headquarters reminds: never provide your personal data, phone numbers, bank accounts or data of your loved ones through unverified resources, as well as third-party applications and anonymous sources. Disclosure of such information on fake sites can seriously harm not only Ukrainian prisoners of war, but also endanger the lives of their fellow prisoners. Do not give the enemy the opportunity to manipulate emotions and use you for their own purposes.

Disclosure The messages Russia is promoting in response to the ban on the Russian Orthodox Church in Ukraine

After the adoption of bill No. 8371 in August 2024 on the ban on the activities of religious organizations whose leadership center is located in the aggressor country, Russian propagandists began to spread more disinformation about the religious situation in Ukraine.

The Ukrainian Crisis Media Center has highlighted recent key messages on this topic.

“Data on Ukrainians’ support for the ban on the UOC (MP) is fake”

In fact, according to a poll by the Kyiv International Institute of Sociology (KIIS) in April 2024, 83% of Ukrainians believed that the state should interfere in the activities of the UOC to some extent. In particular, according to 63% of respondents, the Ukrainian Orthodox Church should be completely banned in Ukraine. That is, Ukrainians, on the contrary, express significant support for the relevant measures.

“Pope Francis has sharply condemned the Church's law”

The Pope did comment on the new Ukrainian law on the activities of religious organizations linked to Russia. However, his words were different from those cited by propagandists. Pope Francis stated that “not a single Christian church should be abolished in Ukraine”. He expressed concern about religious freedom, but did not “harshly condemn” the law, as Russian sources claim.

It should be noted that the Vatican seeks to maintain dialogue with all parties, including Moscow. This often leads to cautious formulations that are distorted by propagandists.

“There is a persecution of religion in Ukraine”

In reality, Ukraine is taking action against religious organizations associated with the aggressor country, not against religion in general. The Ukrainian Orthodox Church is historically linked to the Russian Orthodox Church and has proven ties to Russia. A study by the State Service for Ethnopolicy and Freedom of Conscience found that the UOC remains an organization centered in Russia. Therefore, the ban on religious organizations with a leadership center in the aggressor country is aimed at preventing foreign interference through these institutions, not at “persecuting believers”.

“All who are for are enemies, all who are against are friends”

Boxer Oleksandr Usyk, once “praised” by Russian propagandists as a “bearer of the Orthodox faith”, has supported Ukraine's policy of countering Russian influence. The propagandists' messages are now aimed at discrediting Usyk as a person who allegedly changes his beliefs and actions depending on circumstances and influence, thereby undermining his authority among the audience.

Read also: After nine months, the parties will only take up positions for battle. How the law banning religious organizations linked to Russia will work – MediaSapiens – Detector Media.

Disclosure The Center for Countering Disinformation discovered Polish anti-Ukrainian TikTok profiles

Recently, the Polish segment of the TikTok social network has stepped up the distribution of anti-Ukrainian materials, the Center for Countering Disinformation reports.

Among the large number of TikTok accounts duplicating narratives in line with Russian propaganda, the following can be highlighted:

Martwyobywatel – the profile contains many videos discrediting Ukrainian refugees, as well as videos directed against the Ukrainian language. Narratives about the “Ukrainization of Poland” and the “displacement” of Polish culture by Ukrainians are spread here.

19_illegal_06 (SIEWCA_PRAWDY) – the page spreads anti-Ukrainian messages and memes to humiliate Ukrainians and discredit the Ukrainian political leadership. They fuel the narrative of the “Banderization of Poland” and promote hatred towards Ukrainian refugees.

Asherbur (Asher Burov-Şǔraev) – the page is run by a Russian citizen who lived in Lublin and now probably lives in Israel. The profile publishes videos on the topic of resistance to the “Ukrainization of Poland”, and also tries to portray Ukrainians in the worst possible light. There are also videos praising Putin and justifying Russia’s aggression against Ukraine.

Polakpatriotaa – the profile contains narratives that are beneficial to Russia, directed against the Polish leadership, EU politicians and Ukrainians. Some publications by the account's authors try to intimidate Poles with the possibility of Poland's participation in the war against Russia. They spread the slogan “This is not our war” and call not to help Ukraine.

Previously, we wrote about how far-right movements in EU countries use TikTok to support Russian propaganda messages.

Disclosure The US FBI has blocked a website where Russians were spreading their propaganda in six languages

The administrators of one of the anonymous Telegram channels complained that the US Federal Bureau of Investigation blocked the site they created for a foreign audience. On it, propagandists in six languages spread Russian propaganda, especially about Russian attacks on civilians and critical infrastructure in Ukraine. The administrators called it a “crime against freedom of speech” and an attempt to “shut the mouths” of everyone who “tells the truth” about the events in Ukraine. They say that the fact that the FBI blocked them confirms that they are “on the right track”.

In reality, however, blocking the site is an important step in the fight against disinformation, not a restriction on free speech. Instead of providing “objective information”, as the site’s authors claim, it has been manipulating facts in an attempt to justify Russia’s aggression against Ukraine and discredit the actions of Western countries supporting Ukraine in the war. Disinformation spread by sites like this undermines international security, incites hatred, and destabilizes the situation.

The US actions are aimed at protecting truthful information and preventing the influence of fake news that threatens public order and security. Blocking such resources helps reduce the influence of propaganda campaigns aimed at distorting real events and misleading people.

Disclosure How operation Doppelganger works from the inside

The FBI has uncovered one of the Kremlin's largest networks for spreading disinformation and propaganda. This was reported by the Telegram channel Ukrainian Offensive based on a published document prepared by federal agents to support a lawsuit to confiscate a number of Internet domains. It describes an extensive network of clone sites and one-day news resources, such as the fictitious BBC California. The agents also managed to identify and translate into English Russian guidelines for bots and distributors of fake information.

According to their information, the network is headed by one of the most influential Kremlin officials, Serhii Kyryienko, First Deputy Head of the Presidential Administration of the Russian Federation. With the help of organizations such as ANO Dialog and the Institute for Internet Development, Russia has created a huge network of sites-clones of large media outlets in different languages. These sites publish fictitious news along with copies of real materials, creating the impression that the source is reliable. The methods pay special attention to the dissemination of fake information in the Ukrainian language with reference to Ukrainian resources, emphasizing the importance of the language issue. The network does not even limit itself to publishing materials that are unfavorable for the Russian Federation, since the main goal is to create the illusion of division and polarization of society.

Researchers at the Detector Media Research Center have joined the Alliance4Europe report, created by an international group of disinformation experts, which provides information on how Operation Doppelganger continues to operate, especially on social media.

Disclosure New fakes about the operation in Kursk

Russian propaganda continues to produce new fakes about the events in the Kursk region. The Center for Countering Disinformation has discovered another wave of false publications aimed at discrediting Ukraine.

“Ukrainian Nazism”. One of the fakes concerns a supposedly British TV channel, which counted 1000 cases of the use of Nazi symbols by Ukrainian soldiers in the Kursk region. This is a completely fabricated story, since no British media resource has published such information. The purpose of this fake is to reinforce old Kremlin narratives about the “Nazi” character of the Ukrainian army and to create an image of an enemy that allegedly poses a threat to civilization.

“Torture of Russian prisoners”. This is a fake video in which Ukrainian soldiers are accused of abusing Russian prisoners. Such materials have repeatedly proven to be fakes, and they are aimed at demoralizing the Ukrainian military and justifying the cruelty of the Russian army. It is also supposed to intimidate Russian soldiers so that they do not surrender.

“Stolen Headphones”. Propagandists are spreading a story about looting by Ukrainian soldiers, claiming that a “resident of the Kursk region” allegedly tracked her stolen headphones to the Sumy region. This fake is aimed at creating a negative image of the Ukrainian military, but there is no evidence to support its veracity.

“Training of the military in school”. The enemy claims that Ukrainian military personnel were trained in a school in the Zhytomyr region for operations in the Kursk region. This information is part of a strategy aimed at destabilization and preparation of the information base for possible missile strikes on peaceful targets.

“Civilian atrocities”. Russian media are spreading “testimonies of refugees” from Kursk, where they accuse Ukrainians, without evidence, of mass murder and abuse of civilians. The propaganda fabrication even mentions the French flag raised by “foreign mercenaries”. This is another attempt to denigrate the Ukrainian Armed Forces and frighten both the Russian population and the international audience.

Disclosure New Russian inventions about the events in Kursk

The Center for Countering Disinformation continues to monitor the Russian information space and expose new fake news and manipulations that the enemy is spreading regarding the events in the Kursk region.

So, the Center for Countering Disinformation has recorded another wave of disinformation around the following topics:

“Shoot your own soldiers”. In order to undermine the fighting spirit of Ukrainians and discredit the Ukrainian Armed Forces, Russian propaganda reports that Ukrainian commanders in the Kursk region are executing their subordinates for refusing to carry out orders.

“Attack on pensioners”. Propagandists created a story about the work of combat medics in the Kursk region, where it is about saving two pensioners after an alleged attack by a Ukrainian drone on their car. However, the story only shows assistance to wounded Russian soldiers, not pensioners.

“Genocide”. Russian propaganda continues to spread eyewitness accounts of Ukrainian war crimes in Sudzha in the Kursk region. In the video, “eyewitnesses” talk about “Ukrainian Nazis who shoot everyone indiscriminately” and allegedly seek to exterminate the Russian people. The operation in the Kursk region has been going on for almost a month, but no evidence of these “Ukrainian atrocities” has been provided.

“Looting in Kursk region”. A video of a Ukrainian-language blogger is being distributed, claiming mass looting in the Kursk region, citing reports from a wounded Ukrainian soldier. This information operation is aimed at the Ukrainian audience in order to sow doubts about the actions of our military leadership. The video uses narratives that have long been actively promoted by Russian propaganda - that the Kursk operation is a “conspiracy” and that Ukrainian Armed Forces soldiers should fight not in the Kursk region, but in Donbas.

Disclosure The so-called CCORC as a tool of Russian propaganda

The so-called Coordinating Councils of Organizations of Russian Compatriots or CCORC operate in many countries around the world. This is a Russian initiative aimed at uniting and strengthening communities founded by Russian emigrants abroad. 

The study by the Civil Awareness Center team of the Prytula Foundation presents the deanonymization of 92 leaders of CCORC with a brief description of their activities, and with the first material devoted to Europe.

In some countries, CCORC activities are already banned or restricted, such as in the United States, Sweden and Ukraine. The study provides a rationale for considering banning their activities in other countries as well.

Each CCORC states that their main goal is “strengthening the ties of compatriots with their historical homeland”. However, the founding documents also contain other propaganda goals, such as:

support for the efforts of compatriots in promoting an objective image of Russia in the public life of the host country;

popularization of the achievements of Russian culture and history, traditions and customs of the peoples of Russia through all available information resources;

promoting the development of Russian-language media in the host country;

dissemination of information about the achievements of Russia's multinational culture.

Most CCORC do not have legal status. This is written in their principles as a separate point: “CCORC is a public institution, preferably without the creation of a legal entity”.

CCORC is actively used to spread Russian propaganda among foreigners in order to form a positive perception of Russia and its actions. One of the official goals of the activity is “actively attracting young people”, which is the main means of influence. The leaders of these associations mostly support Putin's policies. Some CCORC delivered humanitarian aid to the territories occupied by Russia during the full-scale invasion.

Disclosure Pro-Russian bots use UK anti-migrant protests to reduce support for Ukraine

Riots break out in several UK cities after three children are killed in the north-west The unrest, which involved hundreds of anti-immigration protesters, began after false information was spread on social media that the suspect in the Southport attack was a radical Muslim migrant. The protests in English cities have escalated into clashes between protesters and police, and between anti-immigrant protesters and their opponents. Shops have been smashed and police officers have been attacked.

Although police said the suspect, 17-year-old Axel Rudakubana, was born in Britain, anti-immigration and anti-Muslim protests continued, turning violent, arson and looting.

The Royal United Services Institute has published research claiming that the Kremlin has actively exploited the theme of mass unrest using bots. An analysis of typical provocative terms associated with protests and unrest (#twotierkier, #twotierpolicing.) showed clear signs of Kremlin interference.

Some of the accounts that reposted this content were created back in 2022, during the full-scale invasion, but now these boots have moved from attacking Ukraine to criticizing the government for “allowing refugees, particularly Ukrainians, into Britain”. That is, they are trying to demonstrate, one way or another, that Ukrainians are to blame for such mass unrest.

Thus, Russian propaganda tries to present Ukrainian refugees as criminals or terrorists, as a cultural and economic threat to the EU in order to reduce support for Ukraine. We mentioned this in our own research. Since the beginning of the great war in Ukraine, Russian propaganda has been trying to discredit refugees who were forced to leave Ukraine to save their lives.

Disclosure Fake Telegram channel of the 46th Brigade of the Armed Forces of Ukraine spreads Russian disinformation

While monitoring the information space, the Center for Countering Disinformation discovered a fake Telegram channel illegally using the name of the 46th Separate Airmobile Brigade of the Airborne Assault Troops of the Armed Forces of Ukraine.

This fake Telegram channel actively spreads false messages aimed at discrediting the Ukrainian military. In particular, the channel spreads manipulative information about the situation on one of the front lines in the Donetsk region.

It is important to note that this channel has nothing to do with the 46th Brigade. Official representatives of the brigade stated this on their official pages, noting that the information on the fake channel is manipulation and disinformation.

The purpose of spreading such fake news is to undermine confidence in the Armed Forces of Ukraine and sow panic among the Ukrainian population. Propagandists are trying to demoralize citizens, raise doubts about the effectiveness of defense and the ability of the military to protect the country. In addition, such disinformation may be part of a broader information war aimed at creating chaos and destabilizing society, which may ultimately weaken national resistance to the aggressor.

Disclosure New Russian fakes about events in Kursk

The Center for Countering Disinformation continues to monitor the Russian information space, identifying new fakes and manipulations that the enemy is spreading about the situation in the Kursk region. Detector Media writes about the latest of them.

“Chemical attacks”: Propagandists are spreading a photo of a downed drone, claiming that the Ukrainian military planned to use it to spray chemical or biological weapons in the Kursk region. However, this information is not true. Ukraine strictly adheres to the Chemical Weapons Convention, while Russian troops have repeatedly used gas attacks on the front, which is confirmed by numerous reports even from their own war correspondents.

“Civilian Murders”: Russian propaganda has come up with a new story about “murders of people” trying to evacuate from Kursk region. One version tells of a man who allegedly drove 100 kilometers with his dead wife in the car after the car was fired upon by Ukrainian soldiers. However, this information is also untrue.

“Ukrainians against the operation in Kursk”: the enemy launched an information and psychological operation (IPSO), claiming that the Ukrainian population allegedly massively opposes the operation in Kursk. Materials with the narrative “we do not need Kursk” are being distributed in social networks, the purpose of which is to create the illusion of discontent among Ukrainians regarding the situation at the front.

“Overcrowded morgues in Khmelnytskyi”: false information is being spread that 215 bodies of Ukrainian soldiers killed in Kursk have allegedly been delivered to Khmelnytskyi. No evidence has been provided for this information.

Russian propaganda is also spreading disinformation about looting allegedly committed by Ukrainian soldiers in the Kursk region. A new, probably staged, video has appeared about the trident brand” with which Ukrainian soldiers allegedly planned to brand civilians in the Kursk region. In addition, a significant number of manipulative publications concern the so-called “failure of the Kursk adventure”, which Russian propagandists are trying to attribute to the words of both the Commander-in-Chief of the Armed Forces of Ukraine Syrskyi and an American fighting on the side of Ukraine.

This wave of disinformation is aimed at discrediting Ukraine and its military, increasing panic among the population, and attempting to sow doubts about the success of Ukrainian military operations.

Disclosure How Russians create copies of websites and spread their propaganda through them on the social network X

Russia's Operation Doppelganger, discovered in September 2022, aims to undermine support for Ukraine and promote Russian propaganda. Within its framework, propagandists create copies of media sites and government agencies to distribute their content on social networks. In December 2022, Meta linked the campaign to Russian companies Struktura and Social Media Agency, which led to EU sanctions. Subsequent investigations revealed that the fake sites targeted different audiences, including French-speaking, English-speaking and German-speaking social media users. The continuation of this campaign demonstrates a strategy to exploit political and social vulnerabilities at the global level.

The Reset Tech research team monitors current events within the operation on the social network X (formerly Twitter). In June 2024, they noticed an increase in activity, including a new tactic: the use of trending hashtags to promote video content in tune with Russian propaganda. They often use hashtags that are not related to the content being shared, such as those related to the Euro 2024 football championship. This tactic is focused on increasing the organic visibility of the content.

Since June 3, a network of 250 anonymous and inauthentic accounts on X has been activated to amplify Kremlin messages, marking a new phase in a long-running campaign on the platform. These accounts belong to several distinct groups, each of which shows signs of coordinated behavior, such as content similarity, simultaneous activation, and overall similar appearance. Some of these accounts were created recently, others are old accounts that have been modified to suit the needs of the campaign. They publish content in German, French, English, Turkish and Russian. Earlier in 2024, Reset Tech discovered groups of accounts that posted similar content in Hebrew and Arabic.

A new aspect of the operation involves the use of verified accounts. In this phase of the campaign, 119 verified X accounts were identified. This raises serious concerns about the platform's monetization practices and the potential abuse of verified account status to enhance coordinated disinformation efforts. This is particularly relevant in light of the European Commission's preliminary findings that the practice is inconsistent with the EU Digital Services Directive (DSA), indicating that “there is evidence that fraudsters are abusing the status of verified accounts to mislead users”.

Disclosure Photos with signs of manipulation are being circulated online, allegedly demonstrating the “current state” of Ukraine

On social networks and anonymous telegram channels they distributed a photo with the caption “in one photo one can see the whole of Ukraine in miniature” and describe the photo:

“Pensioners are starving and forced to beg. People are trying to live their old lives and survive. The “people catchers” [propagandists called the Territorial center of recruitment and social support in such a way - Ed. DM] are looking for the next victim. There is a swastika on the fence. There are drug advertisements on the asphalt”.

However, as the InVid photo service interference analysis tool shows, there is interference in the image in the area: the names of the resource where drugs can be removed; swastikas and legs of military personnel.

It was not possible to determine the source of the photo publication. The oldest example of photo distribution provided by the TinEye tool is June 14, 8 am. This is later than the date of publication on anonymous and pro-Russian telegram channels.

Disclosure Unknown people are spreading a fake story allegedly from the French publication Le Figaro, which talks about a “Ukrainian refugee killer”

Anonymous telegram channels are distributing a video story supposedly from the French publication Le Figaro, which tells about the murder of a twenty-year-old woman on the closing day of the Olympic Games at the “hands of a Ukrainian refugee”. A screenshot of news material from the publication’s website is added to the publications.

However, this video is fake. In the original story there is no insertion that the suspect for committing the crime is a “Ukrainian refugee”. In general, the nationality of the accused is not indicated in the video material. There is only information that this is a forty-nine-year-old man who does not speak French. No additional information was added in the interests of the investigation.

Thus, Russian propaganda is trying to present Ukrainian refugees as criminals or terrorists, as a cultural and economic threat to the EU - in order to reduce support for Ukraine. We mentioned this in our own research. Since the beginning of the big war in Ukraine, Russian propaganda has been trying to discredit refugees who were forced to leave Ukraine in order to save their lives. Propagandists regularly spread fake news about them; call refugees dependents; they claim that they went abroad not for safety, but for profit; they convince that residents of countries that have accepted Ukrainian refugees are dissatisfied with the behavior of Ukrainians. Propagandists need this in order to stake out the opinion that Ukrainians are pagans who do not value the help that residents of other countries provide them; take advantage of the kindness of people in other countries.

Disclosure How Russia spreads messages about alleged crimes of the Armed Forces of Ukraine in the Kursk region

Russian propagandists continue to spread new disinformation about the operation of the Ukrainian Armed Forces in the Kursk region. This time, a story began to actively spread on social networks that the Ukrainian Armed Forces allegedly shot a pregnant 24-year-old woman in front of her husband and little son.

On August 7, a multimillion-dollar Russian propaganda channel published a story that “Ukrainian soldiers” allegedly shot at the car of a pregnant civilian woman who was trying to evacuate with her family from the territory of Sudzha (Kursk region). No evidence was shown that directly indicated the veracity of this news or the involvement of the Ukrainian Armed Forces in the incident. A few hours later, another telegram channel decided to present an audio telephone conversation with the man of the deceased, in which he stated that he allegedly saw “one AFU military” and “clearly remembered the blue electrical tape on his helmet” before this soldier opened his phone, his and his wife's cars were under direct fire.

Also, immediately after this audio recording, a video was released from the father-in-law of a 24-year-old girl, who decided to remove the damage left on the car after the shelling. However, it is clear that all 4 windows of the car were completely broken, and the glass on all sides was smashed to pieces towards the inside of the passenger seats, which is not natural if the shelling was carried out from one side, as the man stated in a telephone conversation.

Military defeats at the front and, as a consequence, the transfer of hostilities from the territory of Ukraine to the territory of the Kursk region significantly shook up the political elite of the Russian Federation, calling into question many of the myths that propagandists “fed” the entire Russian population for many years.

In addition, according to the Center for Countering Disinformation, the Russian military and political command is very concerned that the fighting in the Kursk region is not accompanied by violence against civilians by the Ukrainian army. Therefore, today Russian propaganda is actively trying to shift the emphasis from the defeats and mistakes of the leadership of their country. on the Ukrainian Armed Forces, creating an external and internal message that the Ukrainian army is allegedly killing civilians in the Kursk region. Thus, on August 12, the Center for Countering Disinformation and the Security Service of Ukraine already warned that the Russians would try to stage war crimes in the Kursk region by dressing in the uniform of the Ukrainian Armed Forces.

Disclosure The Ukrainian Red Cross warned about the creation of a fake telegram channel

Administrators of the fake telegram channel “Red Cross of Ukraine” encourage people to leave their personal data in an online application to supposedly “receive cash assistance in the amount of 6,500 UAH”. The Ukrainian Red Cross warned about this on its official Facebook page.

The organization noted that it does not collect personal data or bank card data through social networks and bots, and also emphasized that all official communication channels of the Ukrainian Red Cross are verified, that is, “recognized by social networks and have a blue circle with a tick next to the name, which confirms this status”. If suspicious information is found, they encourage people to write to the Ukrainian Red Cross support service sos@redcross.org.ua or check the information in the Information Center at 0 800 332 656.

On August 6, it was already reported about scammers who sent out fake letters from the tax office in order to break the mail of Ukrainian organizations.

Disclosure Harmful software disguised as a message from the Security Service of Ukraine

Hackers send emails disguised as messages from the Security Service of Ukraine. This was reported by the Center for Countering Disinformation.

According to the government response team CERT-UA, more than 100 infected computers have already been detected, including those belonging to government agencies and local governments. The State Committee for Special Communications reported this.

The emails contain a link to download a file called Documents. But in fact, this link downloads a file that activates the malicious software ANONVNC, allowing attackers to gain hidden, unauthorized access to the victim’s computer.

The State Committee for Special Communications notes that urgent measures have already been taken to reduce the risk of a cyber threat.