Matryoshka op: Pedro Pascal deepfake hails Trump shooter
In April 2026, the Kremlin-linked Matryoshka bot network deployed nine variants of false claims following the 25 April assassination attempt on Donald Trump, including a deepfake of actor Pedro Pascal praising the shooter. The operation framed the attacker as a pro-Ukrainian radical to inflame US domestic tensions.
The narrative claims that the assassination attempt against Donald Trump on April 25, 2026 (during the White House Correspondents' Dinner) was orchestrated by a pro-Ukrainian activist and publicly supported by Hollywood figures. The Matryoshka bot network spread at least nine types of fabricated claims, including a deepfake of actor Pedro Pascal saluting the shooter. The actual shooter, Cole Tomas Allen, has no link to Ukraine.
Executive summary
In April 2026, the Matryoshka bot network, reportedly Kremlin-linked, conducted a multi-faceted disinformation campaign following the assassination attempt against Donald Trump, including a deepfake featuring actor Pedro Pascal appearing to endorse the attack and attributing the crime to a pro-Ukrainian radical.
What is observed
Nine categories of false allegations spread between April 25 and subsequent days. Detection of synthesized video artifact featuring Pedro Pascal addressing the shooter. Coordinated amplification via bot accounts identified using automated behavior patterns (mass sharing, uniform activity times, template recycling). Convergent narrative attributing responsibility to a named or described pro-Ukrainian activist. Account metadata showing temporally clustered creation/activation.
What this does not prove
Detection of coordinated campaign does not confirm direct Russian government involvement, only institutional connection with operators. Use of anti-Ukrainian narratives does not prove authors operate from Russian territory or under state control. Limited effectiveness of bot campaign on Francophone or Hispanophone audiences does not guarantee primary target was not English-speaking audiences. Presence of deepfake does not determine technical tool used or its origin.
Confidence level
Presumed attribution based on known technical signatures and narratives of Matryoshka network, but absence of public confirmation from third-party security agencies and increasing sophistication of mimetic campaigns limits certainty of direct affiliation with identified Kremlin structures.
Methodological limits
This brief relies on the analysis of publicly accessible content (OSINT). Attribution is based on converging technical and editorial indicators, without access to the internal communications of designated actors. Volume data reflects content captured by our 567-source pipeline and does not constitute an exhaustive census.
How to cite this investigation
DisInfo Monitor (2026), "Matryoshka op: Pedro Pascal deepfake hails Trump shooter", independent publication, disinfo-monitor.com/en/narrative/campagne-matryoshka-avril-2026-faux-videos-pedro-pascal-pro-attentateur-trump-mor0hemh, first detected May 4, 2026, last updated May 4, 2026, accessed May 19, 2026.