Skip to main content

TRACKED OPERATIONS

Storm-1516RUSSIAACTIVE
GRU-linked operation running 171+ fake news websites generating 67M+ views. Produces fabricated videos and documents targeting Western democracies, particularly France and Germany.
Detected: 2024-01·europe, global
DoppelgangerRUSSIAACTIVE
Large-scale operation cloning Western media websites (Le Monde, Spiegel, etc.) to publish pro-Russian disinformation. Uses typosquatted domains and social media amplification.
Detected: 2022-06·europe
Spamouflage / DragonbridgeCHINAACTIVE
China's largest known influence operation with 330+ fake accounts detected in late 2025. Targets Taiwan, promotes CCP narratives, attacks US policy.
Detected: 2019-01·indo_pacific, global
Portal Kombat / Pravda NetworkRUSSIAACTIVE
Network of fake news portals generating millions of fabricated articles. Uses automated content generation and cross-linking to boost SEO.
Detected: 2023-01·europe, global
Endless MayflyIRANACTIVE
Iranian influence operation creating fake news articles impersonating legitimate media, targeting Saudi Arabia, Israel, and US interests.
Detected: 2019-05·middle_east, global
Africa Corps (ex-Wagner)RUSSIAACTIVE
Russian paramilitary information operations in the Sahel and Central Africa. Anti-France narratives, promotion of Russian military partnerships. SVR took control after Wagner dissolution.
Detected: 2018-01·africa_sahel
Indian ChroniclesINDIADORMANT
15-year Indian influence operation using 750+ fake media outlets and NGOs to influence EU and UN institutions on Kashmir and Pakistan.
Detected: 2020-12·south_asia, europe
RRN / Reliable Recent NewsRUSSIAACTIVE
Network of fake news portals mimicking legitimate media outlets across Europe and Africa. Part of the Doppelganger ecosystem. Sites include reliable-recent-news domains in multiple languages.
Detected: 2023-06·europe, africa_sahel
Africa Politology / The CompanyRUSSIAACTIVE
Russian influence operation specifically targeting sub-Saharan Africa. Creates pro-Russian, anti-Western content through fake grassroots organizations and social media campaigns. Linked to Prigozhin network.
Detected: 2019-01·africa_sahel
Operation Sindoor Info WarINDIADORMANT
Massive cyber and information warfare operation during the 2025 India-Pakistan crisis. 1.5M+ cyberattacks, coordinated deepfakes, and social media manipulation from both Indian and Pakistani state actors.
Detected: 2025-05·south_asia
Storm-1516 Africa ExtensionRUSSIAACTIVE
Extension of the GRU's Storm-1516 operation specifically targeting African francophone countries. Uses fabricated videos and documents to undermine French and Western presence in the Sahel.
Detected: 2024-06·africa_sahel
MatriochkaRUSSIAACTIVE
Russian information operation targeting Western journalists and fact-checkers by flooding them with fabricated content on social networks, forcing them to waste investigative resources on false leads. Named by Viginum after the nested-doll tactic of layered decoys.
Detected: 2023-09·europe, global