More
November 2024
Seizing the Win: Navigating Competition and Hands-on Learning through Cyber 9/12
Competitors and judges from the inaugural Cyber 9/12 Strategy Challenge in Costa Rica share their perspectives on how to leverage teamwork and interdisciplinary skills to address tomorrow’s cyber challenges.
November 2024
Pro-Hezbollah accounts orchestrated digital smear campaign against Lebanese journalists
The X campaign sought to discredit five Lebanese media workers with edited media, gender-based violence, and threats
November 2024
The Role of Data in Improving Cyber Insurance Pricing
In order to improve cybersecurity through cyber insurance, the private sector should aggregate cyber incident data to inform risk models and in turn, more accurately price cyber premiums.
November 2024
Take the Bribe but Watch Your Back: Why Russia Imprisoned a Security Officer for Taking Cybercriminal Payoffs
Russia imprisoned a security service officer for taking bribes from cybercriminals—showing not a willingness to crack down on cybercrime, but instead just how much the Kremlin wants to maintain its cybercrime protection racket.
November 2024
How mainstream Georgian media shaped perceptions of the foreign agent law protests
Georgian media promoted opposing views, with TV channels critical of the law outperforming pro-government channels
October 2024
A Conversation with Věra Jourová: Lessons from EU Election Interference
Assessing lessons learned from information interference operations during the European Parliament elections.
October 2024
Georgia’s ruling party using Facebook ads to claim Western interference in the country’s election
Facebook ads increased sharply over the course of September 2024 just ahead of the pivotal vote scheduled for October 26
October 2024
Statement on the home raids of two Atlantic Council staff in Georgia
Washington DC – The Atlantic Council
October 2024
DFRLab launches the 2024 Foreign Interference Attribution Tracker
FIAT dashboard documents allegations of foreign malign information operations in the 2024 US general election
October 2024
The 5×5—The evolving role of CISOs and senior cybersecurity executives
For the Cybersecurity Awareness Month, senior cybersecurity executives share their insights into the evolution of their roles.
October 2024
Malign interference in Moldova ahead of presidential election and European referendum
Pro-Russian influence tactics exploit divisive issues to undermine Moldova’s October 2024 election and EU referendum
October 2024
Iranian election interference: When you’re broke, at least be flashy
How Iran’s influence operations playbook targeting US elections has – and hasn’t – changed over time
October 2024
Analysis: Why Moldova is a make-or-break moment to combat Russian interference
Moldova upcoming presidential election and referendum on joining the EU is an urgent test for Russia’s ability to interfere globally for its own geopolitical gain
October 2024
Mysterious cross-border influence campaign sparks election controversy in Moldova
The campaign posed as Ukrainians and portrayed the Moldovan government as enforcing censorship
October 2024
The challenges of identifying deepfakes ahead of the 2024 Brazil election
The proliferation of deepfakes will be difficult to measure as Brazil prepares for municipal elections in October 2024
October 2024
Analysis: a brave new reality after the UN’s Global Digital Compact
Resident Senior Fellow Konstantinos Komaitis describes global internet governance negotiations as “convoluted” and “out of reach”
September 2024
Crypto-scam hosts pop-up livestream featuring a deepfaked Elon Musk
‘Traveling Circus’ livestream raked in $50,000 over the course of two hours by featuring a deepfake of Musk to solicit investments
September 2024
How the Venezuelan regime weaponized video and messaging apps to persecute dissidents
Maduro promotes app that encourages users to report critics of the regime amid widespread demands for election transparency
September 2024
Explainer: the Russian influence operations targeting the 2024 US elections
The September 2024 deplatforming of Operation Doppelganger demonstrates how US voters are being targeted by Russian influence operations
September 2024
Mythical Beasts and Where to Find Them: Mapping the Global Spyware Market and its Threats to National Security and Human Rights
The Mythical Beasts project pulls back the curtain on the connections between 435 entities across forty-two countries in the global spyware market.
September 2024
Mythical Beasts and Where to Find Them: Data and Methodology
Learn more about the methodology and dataset behind Mythical Beasts and Where to Find Them: Mapping the Global Spyware Market and its Threats to National Security and Human Rights
September 2024
Mythical Beasts and Where to Find Them
Mythical Beasts and Where to Find Them: Mapping the Global Spyware Market and its Threats to National Security and Human Rights is concerned with the commercial market for spyware and provides data on market participants.
August 2024
Pro-Russia, pro-Wagner activity surges following Mali and Wagner forces’ defeat in battle
An inauthentic network of YouTube channels pushed pro-AES and anti-Ukraine narratives after the Tinzaouaten confrontation
August 2024
TikTok accounts target West Africa with AI-generated content promoting Putin and regional leaders
TikTok accounts with thousands of followers spread pro-Russia and anti-France narratives
August 2024
How AI tools fueled online conspiracy theories after Trump assassination attempt
Deepfakes, cheapfakes, and AI-fueled scams spread online following the shooting; in other instances, real footage was dismissed as fake
August 2024
AI in Cyber and Software Security: What’s Driving Opportunities and Risks?
This issue brief discusses the drivers of evolving risks and opportunities presented by generative artificial intelligence (GAI), particularly in cybersecurity, while acknowledging the broader implications for policymakers and for national security.
August 2024
Russia uses video games in Africa to spread anti-Western propaganda
A Hearts of Iron IV mod exemplifies how video games can become propaganda tools
August 2024
Pro-Russian Facebook pages spread anti-French, anti-UN content in West Africa
Network of inauthentic pro-Russian pages spread false claims targeting elections, France, and the UN peacekeeping mission in CAR
July 2024
Inauthentic Chinese X accounts amplifying Trump shooting and Biden withdrawal conspiracy theories
Spreading false and misleading anti-US narratives, the network highly resembles operation known as Spamouflage Dragon
July 2024
Russia’s Digital Tech Isolationism: Domestic Innovation, Digital Fragmentation, and the Kremlin’s Push to Replace Western Digital Technology
Russia’s technological isolation is both a reality and a desired goal for Moscow. This piece explores the impacts of this phenomenon and offers recommendations for how to deal with that evolving digital ecosystem.
July 2024
OT Cyber Policy: The Titanic or the Iceberg
Current policy does not address the issue of cyber-physical security with a systemic approach, instead focusing with tunnel vision on specific events. This analysis uses the iceberg model for systems thinking to address policy gaps in the OT ecosystem, detailing recommendations for the Cybersecurity and Infrastructure Security Agency (CISA).
July 2024
Fake Cameroonian news sites spread pro-Russia, anti-France content
Fake Cameroonian outlets disseminated AI-generated voiceovers across Facebook and other social media platforms
July 2024
Anti-Ukraine narratives spread following Kyiv children’s hospital attack
Narratives blamed Ukraine for the incident, accusing it of targeting itself or deploying air defense systems ineptly
July 2024
How Kenya’s tax bill protests spread online
After the bill’s withdrawal, online conversations continued to call for President Ruto’s resignation
July 2024
AI tools usage for disinformation in the war in Ukraine
How and what technology Russia used to spread disinformation after the full-scale invasion of Ukraine
July 2024
Inauthentic Facebook ad campaign spreads anti-EU messages
Facebook pages disguised as neutral news sources sponsored ads to promote anti-EU narratives ahead of Moldova’s referendum on EU integration
July 2024
Spambots continue to suppress speech and enable harassment of the Chinese community on X
Networks of Chinese-language spambots risk the censoring of posts during politically sensitive events, repeating past oversights
July 2024
Operation targets French snap elections using AI-generated content
Operation uses AI to rewrite articles to adopt a more ‘conservative stance’
July 2024
The Impact of Corruption on Cybersecurity: Rethinking National Strategies Across the Global South
As the Global South prepares for the next stage in ICT development, governments must prioritize policies that reduce corruption in critical network software procurement to protect those countries’ developing cyberspace.
June 2024
User in the Middle: An Interoperability and Security Guide for Policymakers
When technologies work together, it benefits users and the digital ecosystem. Policymakers can advance interoperability and security in tandem by understanding how each impacts the other.
June 2024
In Sub-Saharan Africa, China embraces Russian messaging against Ukraine
Russian narratives thrive in Sub-Saharan Africa with the help of Chinese media networks, localization expertise, and infrastructure
June 2024
“Reasonable” Cybersecurity in Forty-Seven Cases: The Federal Trade Commission’s Enforcement Actions Against Unfair and Deceptive Cyber Practices
The FTC has brought 47 cases against companies for unfair or deceptive cybersecurity practices. What can we learn from them?
June 2024
Online tool helps social media accounts amplify pro-Israel messages
“Words of Iron” represents a shift in the evolving approach to digital propaganda during times of war
June 2024
Another battlefield: Telegram as a digital front in Russia’s war against Ukraine
In this new report, the DFRLab investigates the role of Telegram in Russia since the February 2022 invasion of Ukraine
June 2024
Remarks at the International Telecommunication Union’s World Summit on the Information Society Forum
Democracy + Tech Initiative Director Rose Jackson on connectivity, human rights, and the future of the internet
June 2024
Doppelganger targets US audience on X to discredit Georgian protests
The latest iteration of the Russia-attributed campaign discredits pro-democracy protests in Georgia
June 2024
Tailored Russian disinformation targets Polish farmer protests
Kremlin-backed actors attempt to sow division between Poland and Ukraine
May 2024
Regulating the use of AI for Brazilian elections: what’s at stake
Brazil’s implementation of rules regarding AI in upcoming local elections will serve as a major test case
May 2024
Websites of Moldovan politicians linked to local pro-Russia news outlets
Website infrastructure links Moldovan pro-Russia news outlets to far-left political parties
May 2024
Online conspiracies proliferate following the attack on Slovakian PM Robert Fico
Anti-Western and anti-Ukraine narratives circulated online after the assassination attempt on the Slovakian prime minister.
May 2024
Russian information operations targeted Ukraine and NATO during the battle for Avdiivka
Pro-Kremlin Telegram channels and state media pushed multiple narratives to undermine Ukraine and its western partners
May 2024
International Cyberspace & Digital Policy Strategy: AC Tech Programs Markup
On May 6, the Department of State released the United States International Cyberspace & Digital Policy Strategy. Read along with AC Tech Programs staff, fellows, and experts for commentary and analysis.
May 2024
Lessons Learned from the Cyber 9/12 Strategy Challenge
Students from Tufts University tell us their greatest lessons learned from competing in the Cyber 9/12 Strategy Challenge.
May 2024
Targeting Taiwan: China’s influence efforts on the island
Chinese state media experimented on how to better reach Taiwanese audiences online around the January 2024 election
May 2024
Pro-government Facebook ads target protests against foreign agents bill in Georgia
Dozens of Facebook ads targeted Georgian protesters with anti-Western and anti-LGBTQ+ narratives
May 2024
Russian-language Telegram channels foment tensions in Georgia
Telegram channels posting unverified content exacerbate political grievances between pro-Western and pro-Russian Georgians
May 2024
The 5×5—The XZ Backdoor: Trust and Open Source Software
Open source software security experts share their insights into the XZ backdoor, and what it means for open source software security.
April 2024
Analyzing Egyptian and Qatari media coverage of Menendez bribery allegations
Selective coverage from Egyptian and Qatari media avoids mention of links to Menendez bribery allegations.
April 2024
Markets Matter: A Glance into the Spyware Industry
The Intellexa Consortium is a complex web of holding companies and vendors for spyware and related services. The Consortium represents a compelling example of spyware vendors in the context of the market in which they operate—one which helps facilitate the commercial sale of software driving both human rights and national security risk.
April 2024
O$$ Security: Does More Money for Open Source Software Mean Better Security? A Proof of Concept
A proof-of-concept study looking for correlation between open source software project funding and security practices at scale.
April 2024
The GDC zero draft: the good, the bad, and the ugly
DFRLab Senior Resident Fellow for Global and Democratic Governance Konstantinos Komaitis takes a look at the Global Digital Compact’s zero draft
April 2024
Kremlin-linked Telegram channels seed anti-Ukraine and anti-West narratives in Bulgaria
Pro-Kremlin Bulgarian Telegram channels amplify disinformation seeded by Kremlin-run channels
March 2024
Inauthentic campaign amplifying Islamophobic content targeting Canadians
Accounts used AI-generated photos and inauthentic accounts to amplify Islamophobic account claiming to be a new Canadian nonprofit
March 2024
Suspicious Facebook assets amplify pro-Kremlin Bulgarian ‘mushroom’ websites
More than one hundred Facebook assets promoted links to external websites sharing pro-Kremlin propaganda in Bulgaria
March 2024
Unpacking the Kremlin media blitz surrounding Gagauzia leader’s Russia visit
Eugenia Gutul’s meeting with Vladimir Putin drives Kremlin news cycle positioning Russia as “protector” of Gagauzia and Moldova as its “oppressor”
March 2024
How to consume information in times of conflict
Unverified information can exacerbate conflicts. Recognizing and scrutinizing it should become reflexive for all of us
March 2024
Stalin lionized on Georgian TikTok
TikTok videos promote myths about late Soviet dictator Joseph Stalin, portraying him as a religious, well-educated strongman
March 2024
Doppelganger targets Ukrainian and French audiences via Facebook ads
The latest iteration of the Russian information operation reveals an increasing sophistication in tactics against Ukraine and other audiences
March 2024
Advancing the narrative: analyzing the maturation of Palestinian militant videos
Gaza militants increasingly use collaborative releases, advanced editing, and narrative-driven storytelling when sharing battlefield footage
March 2024
Online campaign targeted Egyptian economist after his death in custody
Suspicious accounts on Facebook and X amplified state narratives about Ayman Hadhoud as human rights groups raised questions about his death
March 2024
Second Statement of Konstantinos Komaitis to the United Nations on the Global Digital Compact
Delivered before the United Nations on the topic of the Global Digital Compact, identifying opportunities it presents
February 2024
First Statement of Konstantinos Komaitis to the United Nations on the Global Digital Compact
Delivered before the United Nations on the topic of the Global Digital Compact, addressing successes and lessons learned
February 2024
The 5×5—Alumni perspectives on Cyber 9/12 Strategy Challenge
Alumni of Cyber 9/12 Strategy Challenge share their experiences, and discuss the impact of such simulated exercises to prepare for real life cyber attacks.
February 2024
Arms sale claim heightened tensions ahead of 2023 Armenia-Azerbaijan peace talks
Online narratives claimed Iran or Russia might exploit French weapons that were allegedly bound for Armenia
February 2024
French prime minister faces onslaught of online attacks
Investment scam promoted via Meta Ads, AI-fueled smear campaigns on X, and a Russian-led disinformation operation, and ignite a social media frenzy around Gabriel Attal
February 2024
Hacking with AI
Can generative AI help hackers?
By deconstructing the question into attack phases and actor profiles, this report analyzes the risks, the realities, and their implications for policy.
February 2024
Suspicious accounts on X amplify allegations against UNRWA
More than 130 X accounts exhibiting hallmarks of inauthentic coordination targeted US politicians with messaging critical of the UN agency in Gaza
February 2024
Future-Proofing the Cyber Safety Review Board
The Cyber Safety Review Board seeks to examine and learn from complex failures in cyberspace. As Congress considers how to design its next iteration, there are ways to make it more effective and adaptable for the increasing challenges to come.
February 2024
Pro-Kremlin campaign promotes “anti-Maidan” movement in Georgia
Georgian far-right party Alt-Info conducted a cross-platform social media campaign claiming the West was fomenting a coup against the country
January 2024
The Great Despiser: The BSA, Memory Safety, and How to Make a Good Argument Badly
Memory-safe programming languages are in the cyber policy mainstream, but some hesitation remains. Looking at the arguments around memory safety is informative for larger cyber policy debates too.
January 2024
The 5×5—Forewarned is forearmed: Cybersecurity policy in 2024
Members of the Cyber Statecraft Initiative team discuss the regulatory requirements and emerging technology they are closely following in 2024, and forewarn of the year ahead.
January 2024
How Ukraine fights Russian disinformation: Beehive vs mammoth
Best practices in countering Russian disinformation, propaganda and information aggression, based on interviews with nearly two dozen Ukrainian practitioners
January 2024
Wagner communities continue to thrive on VK despite Russian government crackdown
VK pages temporarily removed “Wagner” from their names and used other tactics to avoid the Kremlin’s wrath following the failed June 2023 mutiny
January 2024
Gang violence and hostage-taking sow fear across Ecuadorian social media
Graphic content related to violent incidents in Ecuador has garnered millions of views on X, the platform formerly known as Twitter
January 2024
Design Questions in the Software Liability Debate
Software liability—resurgent in the policy debate since its mention in the 2023 US National Cybersecurity Strategy—describes varied potential structures to create legal accountability for vendors of insecure software. This report identifies key design questions for such regimes and tracks their discussion through the decades-long history of the debate.
December 2023
DFRLab research highlights from 2023
From the war in Ukraine to the ongoing crisis in the Middle East, the DFRLab’s international team of researchers investigated information operations and online harms around the world
December 2023
Russian War Report: Putin to run for re-election in annexed regions of Ukraine
The Central Election Commission confirmed the possibility of holding presidential elections in illegally annexed Ukrainian territories.
December 2023
Massive Russian influence operation targeted former Ukrainian defense minister on TikTok
Joint DFRLab-BBC Verify investigation exposes the largest information operation ever uncovered on the platform
December 2023
How Palestinian militants use Telegram videos in the Mideast conflict
Palestinian militant factions appear to be operating with a high degree of technical coordination, producing uniformly branded propaganda videos with regularity.
December 2023
Deceptive marketing ads used fake images of Polish politician
Digitally altered photos deployed as clickbait in Facebook ads drew users to promotional campaign for sketchy cryptocurrency operation
December 2023
Russian and Azerbaijani pro-government outlets exploit Georgian USAID narratives
Outlets exploited Georgian government claims to push narratives blaming the US for organizing civil unrest in Georgia and running spies in Azerbaijan
December 2023
Learning more about platforms from the first Digital Services Act transparency disclosures
An analysis of platform reporting on content moderation teams’ language skills
December 2023
Indian Twitter accounts exploit Mideast conflict to attack journalist
Accounts potentially coordinated to portray journalist Barkha Dutt as a security threat to Israel and urged action against her
December 2023
Egyptian social media reacts to calls for evacuating Gaza residents into Sinai
Narratives calling for displacement of Gaza Palestinians into the Sinai Peninsula met with rejection in Egyptian social media
December 2023
#AtlanticDebrief – How will the OSA be implemented? | A Debrief from Melanie Dawes
An #AtlanticDebrief with Ofcom Chief Executive Dame Melanie Dawes covering the Online Safety Act and regulatory guidance on illegal harms. In partnership with the Atlantic Council’s Europe Center.
November 2023
Russian War Report: Pro-Kremlin surrogates accuse the US of using ‘climate weapons’ in Crimea
Following a severe storm in the Black Sea heavily impacted Crimea, pro-Kremlin sources circulated a conspiracy suggesting the US used a weather weapon.
November 2023
Pro-Kremlin actors amplify video to target multinational military exercises in Moldova
A video featuring a local Moldovan farmer accosting military personnel participating in multinational exercise was used as a pretext to attack the West
November 2023
Nontransparent network of pro-opposition Polish Facebook pages coordinates its attacks
Network pushed similar or identical pro-opposition and anti-ruling party content, often in a way by which their coordination, authenticity, and provenance was obscured
November 2023
Russian War Report: Desperate for recruits, Russia offers one million rubles to join its military
The Russian army is struggling to fund equipment and recruit as they host fundraisers and recruitment drives offering pledges of one million rubl
November 2023
This Job Post Will Get You Kidnapped: A Deadly Cycle of Crime, Cyberscams, and Civil War in Myanmar
In Myanmar, cybercrime has become an effective vehicle through which nonstate actors can fund and perpetuate conflict.
November 2023
How information travels during Gaza’s communications blackouts
People in Gaza turn to eSIMS and other solutions amid cellular and internet outages
November 2023
Russian War Report: Russia just lost the most troops in a single battle so far in 2023
In Ukriane, fighting over the strategically important town of Avdiivka has led to heavy Russian losses. In Armenia, Russian propaganda is targeting the Armenian government.
November 2023
Accounts on Facebook, TikTok spread ISIS call for violence against Jewish targets
Accounts openly shared publication advocating offline violence, which continues to circulate on both platforms
November 2023
Hacker collectives take sides in the Mideast crisis
Telegram feeds of hacker groups document alleged attacks targeting Israel
October 2023
Homogeneity and Concentration in the Browser
Web browsers are the gateway to the internet. As browser developers replicate design features and concentrate around shared underlying technologies, they create cybersecurity risks with the potential to impact many internet users at once.
October 2023
The 5×5—The Cybersecurity Implications of Artificial Intelligence
A group of experts with diverse perspectives discusses the intersection of cybersecurity and artificial intelligence.
October 2023
As Israel and Hamas go to war, the Digital Services Act faces its first major test
The EU’s first actions in the context of the conflict will inevitably set standards for this landmark law’s long-term impact
October 2023
Russian War Report: Ukraine inflicts heavy damage on Russian positions
Ukraine used US-provided ATACMS missiles to strike two Russian-occupied airfields in Zaporizhzhia oblast and Luhansk.
October 2023
In Israel-Hamas conflict, social media become tools of propaganda and disinformation
An endless flood of false, misleading, and unverified information risks inflaming the conflict.
October 2023
Driving Software Recalls: Manufacturing Supply Chain Best Practices for Open Source Consumption
Product recalls require practices that can help software vendors move toward better component selection and tracking and better relationships with customers, all while making software vendors responsible for OSS security instead of maintainers.
October 2023
Quiet part out loud: Rules of the internet and the 2023 Internet Governance Forum
A breakdown of the 2023 Internet Governance Forum (IGF) and the competing factions vying for the future rules of the internet.
October 2023
Russian War Report: Civilian cafe attacked and a fake Ukrainian news site is exposed
A suspicious website impersonating a Ukrainian news agency accused Ukrainian President Volodymyr Zelenskyy and Ukrainian leadership of corruption and misusing aid provided by the United States.
October 2023
Suspicious Twitter accounts promote Saudi Arabia, call for reinstating Saud Al-Qahtani
Network amplified content calling for Twitter to reinstate Saud Al-Qahtani, accused of orchestrating Jamal Khashoggi’s killing in 2018
October 2023
How selective Russian targeting effectively blockaded Ukraine’s Black Sea grain exports
Evidence from the Odesa region shows retaliatory Russian strikes destroyed harbor infrastructure, silos, and industrial farms
October 2023
Georgian travel company behind inauthentic network promotes health-related clickbait content
Inauthentic network disseminated unreliable health-related content to promote travel company and increase sales
September 2023
Russian War Report: Competing claims about the possible death of Russia’s Black Sea Fleet commander
Following an attack by Ukrainian forces on the Russian Black Sea Fleet in Crimea, rumors swirled about the potential death of Russian Admiral Viktor Sokolov.
September 2023
Kink in the Chain: Eight Perspectives on Software Supply Chain Risk Management
Software supply chain attacks are popular, impactful, and are used to great effect by malicious actors. To dive deeper on this topic, we asked eight experts about these threats and how policymakers can help protect against them.
September 2023
Software Supply Chain Security: The Dataset
Want to dive deeper into the Breaking Trust database? You have come to the right place.
September 2023
Armenian and Azerbaijani Telegram channels incite violence against each other
Telegram channels routinely publish graphic footage and hate speech, fueling online outrage in a decades-old conflict
September 2023
Pro-Kremlin groups mobilize online supporters to attack Tbilisi Pride Festival
Pro-Kremlin actors stormed the Tbilisi Pride Festival in July 2023, burning rainbow and Ukrainian flags
September 2023
Russian War Report: Ukraine’s Black Sea offensive retakes oil rigs near Crimea
Ukrainian soldiers board what appears to be the Tavrida oil drilling rig near the waters of Crimea. Russia protests actions by Armenia.
September 2023
Panda exchange program targeted by misinformation, driving anti-US narratives in China
Chinese media capitalized on emotionally resonant rumors about alleged panda abuse in the United States amid deteriorating US-China relations
September 2023
Russian media spread rumors accusing Baltic states of drone attack
Unsupported claims from Russian media and Telegram blamed Latvia and Estonia for perpetrating August 29 attack on Pskov airport
September 2023
Russian War Report: A new recruitment push for fighters from Russia to Hungary
The Russian National Guard and a private Hungarian foreign legion have launched campaigns to recruit soldiers to fight in Ukraine.
September 2023
Anti-LGBTQ+ narratives connect disparate neo-fascist groups
Neo-Nazi groups are taking their online collaborations offline as they continue to threaten LGBTQ+ and Jewish communities
September 2023
BRICS narratives critical of US influence spread in Brazil prior to summit
Discussion on social media platforms focused on de-dollarization and waning US influence
September 2023
Anti-Ukraine Telegram network targets audiences in nine languages
Network is linked to a former member of the Security Service of Ukraine
September 2023
Former Jordan MP promotes anti-LGBTQ+ Twitter campaign
Escalation in anti-LGBTQ+ activity takes place as Jordan adopts draconian amendments to cybercrime law
August 2023
Far-right Twitter network targets Guatemala’s presidential election
Twitter network backed Guatemala’s Public Ministry amidst attempts to suspend political party Movimiento Semilla
August 2023
Prigozhin-owned media outlets experienced narrative whiplash during and after Wagner mutiny
Online outlets operated by Prigozhin’s Patriot Media Group initially supported his actions, but switched to pro-Putin rhetoric once the mutiny ended
August 2023
How Russian pro-war Telegram channels addressed the Wagner mutiny
Wagner-affiliated Telegram channels saw tremendous growth as some pro-war channels vacillated on which side to support
August 2023
Russian War Report: Tensions escalate in the Black Sea as the Russian navy forcefully inspects a civilian cargo ship
Russia escalated tensions beyond Ukraine again this week when its navy forcibly inspected and fired warning shots at a civilian cargo ship.
August 2023
Protecting point-to-point messaging apps: Understanding Telegram, WeChat, and WhatsApp in the United States
A year-long project on protecting users’ data and privacy that analyzes the growing use of point-to-point messaging platforms in the United States and the implications their design and governing policies have for user privacy and free speech.
August 2023
Russian War Report: Co-founder of Russia’s most popular search engine condemns war in Ukraine
A co-founder of Yandex, Russia’s primary search engine, issued a public statement of opposition to the war in Ukraine and acknowledging his “share of responsibility.”
August 2023
A US agenda for action in Sudan’s information environment
A brief on how the United States and Sudan can collaborate on combatting disinformation and building up the African nation’s democratic potential.
August 2023
Sudan’s precarious information environment and the fight for democracy
An examination of the time from December 2018, when protests against then-president Omar al-Bashir first broke out, and December 2022, when a framework agreement between civilian and military leaders came into play.
August 2023
UK murders spur xenophobic narratives and conspiracy theories
The murders, allegedly committed by an immigrant of West African descent, led to broader campaign of dehumanization of migrants and calls for closed borders
August 2023
Russian War Report: Drones target central Moscow skyscrapers
Drone strikes hit central Moscow this week killing none but damaging a skyscraper. Meanwhile, TGStat has restricted access to a Telegram channel that tracks Russian casualties.
August 2023
Chinese discourse power: Capabilities and impact
An examination of China’s online and offline channels for the dissemination of “discourse power” and the mechanisms of oversight on which such communications rely.
August 2023
Suspicious network’s copypasta replies to Sudanese paramilitary group’s tweets
Network of potentially hijacked Twitter accounts copy and pasted positive replies to accounts associated with Rapid Support Forces
August 2023
Clickbait Facebook pages trick Ukrainians into following dubious Telegram channels
Pages employ bait-and-switch tactics and cascading subscription requests to lure people to join more channels
July 2023
The most profound social media ban that never happened
France’s recent flirtation with social media crackdowns undermines Europe’s moral high ground regarding internet governance
July 2023
Russian War Report: Kremlin seeks stronger ties in Africa as Wagner eyes Niger coup
As Russian president Vladimir Putin attends the Russia-Africa Summit, he and his government are making moves to solidify regional cooperation. Amid this, Wagner seeks to capitalize on the coup in Niger.
July 2023
Pro-Russia actors target Armenia with anti-Ukraine propaganda
Suspicious quotes magnified by pro-Russian sources used to undermine Ukraine’s reputation in Armenia
July 2023
Russia moves conscription and contract soldier recruitment online
Russian public services portal Gosuslugi becomes cornerstone for military recruitment, including delivering online conscription notifications
July 2023
Russian War Report: Wagner is still in business in Africa
Despite their Russia-based forces being relocated to Belarus after their failed mutiny, Wagner Group is still alive and active in Africa, including ahead of a referendum in the Central African Republic.
July 2023
Why Do SBOM Haters Hate? Or Why Trade Associations Say the Darndest Things
SBOMs are an important step forward for software supply chain security, so despite pushback and opposition, industry and government should take a page out of Taylor Swift’s book and just keep cruisin’, don’t let SBOM haters get in the way.
July 2023
The National Cybersecurity Strategy Implementation Plan: A CSI Markup
On July 13, the White House released the Implementation Plan for the 2023 US National Cybersecurity Strategy. Read along with CSI staff, fellows, and experts for commentary and what the NCSIP means for the Strategy.
July 2023
Russian War Report: Russian airstrike hits humanitarian aid station
Russian offensives in Donetsk and Luhansk left several villages damaged from shelling while a Russian airstrike destroyed an aid station in Zaporizhzhia.
July 2023
Inauthentic Facebook campaign promoted pro-Russian Shor Party messaging in Moldova
The campaign sponsored ads in support of convicted oligarch Ilan Shor and used fake accounts to target Moldova’s pro-European government
July 2023
Cross-platform kompromat campaign targets detained activist Bakhtiyar Hajiyev and several female Azerbaijani activists
Kompromat campaign against Azerbaijani activists disseminated on Telegram and amplified on other platforms
July 2023
Chinese social media messaging downplays significance of Wagner mutiny
Beijing promoted the view that Yevgeny Prigozhin’s mutiny was a one-off event and emphasized Russia’s “return to normal,” lending further legitimacy to its support for Russia and their deepening partnership
July 2023
Critical Infrastructure and the Cloud: Policy for Emerging Risk
Critical infrastructure increasingly depends upon cloud computing. Policy must adapt its approach to risk management accordingly.
July 2023
Russian War Report: Russian conspiracy alleges false flag at Zaporizhzhia nuclear plant
Allegations of a supposedly US and Ukraine-planned false flag operation on the Zaporizhzhia nuclear power plant spread across social media ahead of the NATO Summit.
July 2023
Egyptian human rights defender repeatedly targeted by suspicious Twitter network
Campaign attempted to harass and discredit activist Gamal Eid
July 2023
Saudi Arabia’s execution of two Bahrainis sparks competing hashtags on Twitter
Arabic hashtag condemning the execution significantly more popular than hashtag supporting the execution
June 2023
Russian War Report: Kremlin denies that it targeted civilians in a missile attack on a pizza restaurant
A deadly Russian missile strike on a cafe in Kramatorsk leaves a dozen dead and more injured. Post-mutiny, Wagner’s future in Africa is up in the air.
June 2023
The disinformation landscape in West Africa and beyond
A look at West Africa’s information environment, with particular emphasis on local and international disinformation campaigns targeting the region and beyond.
June 2023
Yevgeny Prigozhin: A history of violence and propaganda around the world
Yevgeny Prigozhin captured global attention with his mutiny in Russia; the DFRLab has tracked his efforts around the world for over half a decade.
June 2023
Shaping the global spyware market: Opportunities for transatlantic cooperation
The United States and its allies can do more to improve their position on spyware. Further policy action should, through greater collaboration with marketplace operators and allies and partners, work on furthering the development of norms and common understanding of what spyware can and cannot be used for.
June 2023
How “Putin’s chef” undermined the Kremlin’s case for invading Ukraine
Yevgeny Prigozhin’s pre-mutiny remarks exposed Putin’s lies to the Russian public. They may be of interest to investigators as well.
June 2023
Russian War Report Special Edition: Prigozhin and Wagner forces mutiny against Moscow
A special edition of the Russian War Report on Wagner Group’s mutiny against the Russian military and occupation of Rostov.
June 2023
Ongoing Russian-Belarusian drills keep up the pressure on northern Ukraine
Joint military drills repeatedly extended by Russia and Belarus put Ukraine’s northern border within missile range
June 2023
Russian War Report: Wagner attempts to draft gamers as drone pilots
Russian PMC Wagner Group is encouraging gamers to apply to serve as drone pilots in the war against Ukraine while Ukrainian forces advance on the eastern front.
June 2023
Mexico’s president weaponizes narratives against media to combat criticism
AMLO’s morning press conferences foster a polarized environment encouraging mistrust in media and electoral institutions
June 2023
Task Force for a Trustworthy Future Web launches final report Scaling Trust on the Web
Press Release: Task Force for a Trustworthy Future Web launches final report Scaling Trust on the Web
June 2023
Russian War Report: Anti-Ukrainian counteroffensive narratives fail to go viral
As the Ukrainian counteroffensive continues in Ukraine’s south and east, false narratives calling it unsuccessful fail to gain traction on Twitter.
June 2023
Who’s Afraid of the SEC?
The SEC wants to require fast, public disclosure of cybersecurity incidents. These rules could benefit investors—and the cyber ecosystem.
June 2023
Russian War Report: Satellite imagery analysis captures flood threat after dam’s destruction
Satellite imagery of the Nova Kakhovka dam’s collapse reveals the extent of the damage caused by extreme flooding in Kherson Oblast.
June 2023
A snapshot of Turkey’s information environment prior to the presidential election
Rumors, misinformation, and unsupported allegations swirled ahead of the first round of voting
June 2023
Russian War Report: Moscow is on edge after the latest drone attack
Drone strikes in Moscow have the Kremlin on high alert. In Georgia, the pro-Russia Prime Minister blamed NATO for Russian invasion of Ukraine.
June 2023
Coordinated Telegram channels aggregate anti-Ukrainian news from around the globe
Network promotes anti-Ukrainian news from multiple countries while heavily amplifying content from a Telegram channel allegedly affiliated with Yevgeny Prigozhin’s RIA FAN news agency
May 2023
Pro-government Twitter accounts push hashtag promoting Egypt’s support for human rights
Twitter accounts identified as part of a network promoting pro-government content initiated a hashtag in support of government actions
May 2023
Russian War Report: Belgorod incursion brings deluge of online mockery of Russia’s defenses
After an anti-Putin Russian volunteer military unit attacked Belgorod, trolls and bloggers online viciously ridiculed Russian defenses.
May 2023
Russian War Report: Russia fires barrage at Kyiv while UK promises ‘kamikaze’ drones
A series of Russian missile strikes directed at Kyiv were largely intercepted while the UK promises hundreds of drones. In Poland, a missile “cover up” controversy.
May 2023
Reports of alleged weapons deal between Egypt and Russia heighten conspiracy theories on Arabic social media
Leaked US intelligence document alleging secret weapons deal between Egypt and Russia sparks conspiracy theories about America’s interests in Egypt
May 2023
What is driving the adoption of Chinese surveillance technology in Africa?
When examining the proliferation of Chinese surveillance systems and cyber capabilities in Africa, research disproportionately focuses on the motivations and ambitions of the supplier. This perspective, while it highlights Chinese diplomatic ambitions and corporate opportunities, ignores local features that drive the adoption of Chinese surveillance tools.
May 2023
Russian War Report: Russia wages an invisible war with radar waves and Russian music across borders
Russian surveillance has increased on Ukraine’s border. Meanwhile a museum in Estonia hung a large poster depicting Putin as a war criminal.
May 2023
A Russian footprint in Moldovan regional elections
Pro-Russian Telegram channels attempt to influence the voting process in Moldova’s Gagauzia Autonomous Territory
May 2023
Dubious Moroccan Facebook and Twitter accounts boost content critical of journalist Omar Radi and European Parliament
European Parliament’s condemnation of Morocco’s media crackdowns results in suspicious cross-platform amplification of pro-Moroccan response
![creenshot of May 4 Telegram video showing Wagner Group financier Yevgeny Prigozhin standing in front of dozens of dead soldiers {blurred] and excoriating Kremlin military leadership for not providing Wagner with adequate ammunition supplies. Warning: original source video contains graphic footage. (Source: Kyepka Prigozhina/archive)](https://dfrlab.org/wp-content/uploads/sites/3/2023/05/image-45.png)
May 2023
Russian War Report: Prigozhin threatens Wagner withdrawal from Bakhmut
Wagner Group leader Yevgeny Prigozhin threatened to withdraw forces from Bakhmut following conflict with Russian military leadership over resources.
May 2023
Jordan’s digital crackdowns target media and human rights activists
Jordanian authorities monitor and harass journalists and activists to control the information environment
April 2023
Russian War Report: Updated Google Earth imagery details destruction in Mariupol
New satellite imagery reveals the extent of the Russian bombing of Mariupol that occurred in late March 2022.
April 2023
Iran-linked website targets Georgia’s ethnic Azerbaijani community with anti-West content
Iran-based website aimed at ethnic Azerbaijanis in Georgia publishes narratives supporting Russia and Hezbollah
April 2023
Facebook sources targeting Georgia’s Azerbaijani minority reflect pro-West outlook
A DFRLab review of Facebook pages popular among Georgia’s Azerbaijani ethnic minority finds pro-West sentiments, including towards the EU, NATO and Ukraine
April 2023
حسابات تويتر مشبوهة تضخم بشكل مصطنع صورة زعيم الميليشيات السودانية وسط النزاع المسلح
شبكة حسابات استخدمت محتوى منسوخ للترويج لسرديات مساندة لقوات الدعم السريع ومحمد حمدان “حميدتي” دقلو
April 2023
حسابات تويتر يشتبه بأنها مسروقة تروّج للقوى السودانية شبه العسكرية
اكثر من ٠ ٠ ٩ حساب تدعم تغريدات قوة الدعم السريع السودانية وقائدها محمد حمدان “حميدتي” دقلو، مع اندلاع الصراع المسلح في السودان
April 2023
Russian War Report: Russia cancels Victory Day parades and moves “Immortal Regiment” marches online
Russia continues ramping up its attacks in eastern Ukraine while canceling its Victory Day parade in areas bordering Russian-annexed Ukrainian territory.
April 2023
State-controlled media experience sudden Twitter gains after unannounced platform policy change
Twitter accounts run by Russia’s RT, China’s CGTN and Iran’s PressTV suddenly began to gain followers; Twitter acknowledged a change in policy regarding state media accounts three weeks later
April 2023
Suspicious Twitter accounts artificially amplify Sudanese paramilitary leader amid armed conflict
Network of accounts routinely copy-pastes content to promote pro-RSF narratives and its leader, Mohamed Hamdan “Hemedti” Dagalo
April 2023
Potentially hijacked Twitter accounts promote Sudanese paramilitary force
Over 900 accounts appear to boost tweets from the RSF and its leader, Mohamed Hamdan “Hemetdi” Dagalo, as armed conflict sweeps across Sudan
April 2023
Russian War Report: Russian army presses on in Bakhmut despite losses
Bakhmut remains a major conflict zone with dozens of attacks on Ukrainian forces there, despite Russian forces sustaining heavy losses.
April 2023
Russian War Report: Belarus accuses Ukraine of plotting terrorist attack
Belarus’ KGB accused Ukraine of plotting an attack on a Russian consulate in the Belarusian city of Grodno. Belarus also confirmed it would accept Russian tactical nuclear weapons.
April 2023
Anti-LGBTQ+ campaigns spread on Arabic social media
The World Cup fueled online and offline campaigns promoting anti-LGBTQ sentiment and hateful rhetoric
April 2023
Advertising campaign recruits contract soldiers from across Russia to fight in Ukraine
Online job postings emphasize recruiting soldiers from regions with ethnic minorities
March 2023
Anti-Taiwan influence operation shows shift in tactics
Inauthentic assets amplified content to more than 1,300 Facebook groups, with the apparent goal of dividing Taiwanese society and undermining its democracy
March 2023
What to expect from the world’s democratic tech alliance as the Summit for Democracy unfolds
Ahead of the Biden administration’s second Summit for Democracy, stakeholders from the Freedom Online Coalition gave a sneak peek at what to expect on the global effort to protect online rights and freedoms.
March 2023
Wendy Sherman on the United States’ priorities as it takes the helm of the Freedom Online Coalition
US Deputy Secretary of State Wendy Sherman outlined the priorities for the world’s democratic tech alliance, from protecting fundamental freedoms online to building resilience against digital authoritarianism.
March 2023
TikTok in the dock
Whether or not the US bans TikTok, the real issue is the danger presented by all social media platforms as they currently operate, argues Atlantic Council Nonresident Senior Fellow Seth Stodder.
March 2023
Russian War Report: Kremlin edits footage of Mariupol visit to remove women shouting at Putin
After Putin was yelled at in Mariupol, the Kremlin cut the exchange from their official video. RIA Novosti published the whole interaction.
March 2023
Russia-friendly media outlets in Global South frame French anti-government protest as anti-NATO
Russian state media coverage of protest in Paris picked up by outlets across the Global South
March 2023
Egyptian Twitter network amplifies pro-government hashtags, attacks fact-checkers
Twitter network targeted the fact-checking organization Saheeh Masr while also promoting the Egyptian government and military
March 2023
Suspicious Twitter accounts promote hashtag attacking Egyptian human rights defender
Veteran activist George Ishak targeted by disinformation campaign after criticizing Egyptian government
March 2023
Russia builds a “special information operation” around Transnistria
Rhetoric increasingly pushes idea of military conflict in the separatist region of Moldova
March 2023
Russian War Report: DFRLab confirms aerial strikes on industrial plants north of Bakhmut
As Russian forces continue their offensive on Bakhmut, the DFRLab examined satellite imagery to reveal the potential of missile attacks.
March 2023
How the Kremlin misrepresented a video to claim Georgian protesters seek war with Russia
Footage from a protest in Tbilisi was presented with false context to accuse protesters of seeking war in the Russian-occupied Georgian region of Abkhazia
March 2023
Russian War Report: Russian army advances toward Bakhmut, but its offensive capabilities remain unclear
The Russian army advances toward Bakhmut while a large-scale russian air attack targets civilian infrastructure.
March 2023
The Kremlin and Georgian Dream spread similar narratives about protests in Georgia
Narratives attempt to discredit protesters, blame the West for public dissent
March 2023
Seven steps to spread a conspiracy: How Russia promoted weapons trade allegations
Kremlin sources planted and amplified fake stories about Western weapons destined for Ukraine being sold in Germany
March 2023
Russian War Report: DFRLab confirms increased Russian air force activity as Kremlin strives to achieve air dominance
Russia intensified its air power in recent weeks across airfields in Crimea and Rostov Oblast. Elsewhere, Russia continues to pressure Bahkmut.
February 2023
A Parallel Terrain: Public-Private Defense of the Ukrainian Information Environment
The information environment is a key domain through which the war in Ukraine is being contested. By better understanding the key role that private tech companies play in this domain, the USs and Ukraine can better prepare for future threats.
February 2023
Russian War Report: DFRLab releases investigations on Russian info ops before and after the invasion
On the week of the one year anniversary of Russia’s invasion of Ukraine, the DFRLab released two new reports on narratives tracked used to justify the war both pre- and post invasion.
February 2023
Russian War Report: Failed Russian push on Vuhledar results in losses as Moscow increases troops
Vuhledar, a town connecting the northern and southern flanks, has been under an unsuccessful attack from Russian forces for two weeks.
February 2023
Russia takes next step in domestic internet surveillance
Oculus surveillance system goes live as the Kremlin tightens public sector access to Google services.
February 2023
Russian War Report: DFRLab confirms Russia’s push to encircle Bakhmut
Wagner Group soldiers are attempting to encircle Bakhmut, Ukraine. Meanwhile on the southern flank, Russian armed forces are trying to consolidate their progression towards Ivaniske.
February 2023
Data leak suggests crackdown on anti-war social media posts by Russia’s telecom regulator
Roskomnadzor reportedly deleted 150,000 anti-war posts and intends to deploy bot farms to censor anti-war content
January 2023
How Russian YouTube copycat RUTUBE promotes pro-Kremlin narratives
RUTUBE’s mix of Kremlin narratives and entertainment has seen a surge of referral traffic since Russia’s February 2022 invasion of Ukraine.
January 2023
Russian War Report: Pro-Kremlin sources amplify forged diplomatic letters targeting Ukrainian refugees
As Russian shelling of Ukranian forces and civilian infrastructure continues, Ukraine receives the first of many tanks promised by NATO allies.
January 2023
Pro-Kremlin Telegram channels try to convince Latvians their government is ‘fascist’
Newly created pro-Kremlin Telegram channels target Russian speakers in Latvia
January 2023
Russian War Report: Wagner Group fights French ‘zombies’ in cartoon propaganda
Plus, more on Wagner’s power struggles with the Russian defense ministry and Russia’s apparent use of incendiary munitions in Kherson.
January 2023
How China funds foreign influence campaigns
CCP financial statements reveal details of influence operations, from news programming to documentaries to feature films
January 2023
Russian War Report: Russian military bloggers criticize Putin’s Orthodox Christmas ceasefire announcement
In the first days of 2023, Russia shelled civilian infrastructure in Ukraine before Russian President Putin called for a 36 hour ceasefire to observe Orthodox Christmas.
December 2022
2022 at the DFRLab: a year in review
In 2022, the Digital Forensic Research Lab investigated online harms and documented stories of resilience from Ukraine to Uvalde.
December 2022
Russian War Report: Fierce fighting in Donetsk despite the onset of winter
While many had hoped Winter would slow the fighting in Ukraine, the conflict has continued and, in some cases including in Donetsk, intensified.
December 2022
Russian War Report: Pro-Kremlin Telegram channels promote news of TV Rain losing broadcasting license in Latvia
The Latvian National Electronic Media Council revoked the broadcasting license of TV Rain, an independent Russian television channel, citing threats to Latvian national security.
December 2022
The White House’s new deputy cyber director: Tech’s challenges are society’s challenges
Camille Stewart Gloster, the inaugural deputy national cyber director for technology and ecosystem security, spoke at the DFRLab’s 360/StratCom about her newly created office’s ambitious agenda to address a wide scope of cyber challenges.
December 2022
The call for coordinated action for a free, open, and interoperable internet
The DFRLab, as part of its annual 360/StratCom event, convened a discussion about the FOC, including the need to coordinate action to protect a free, open, secure, and interoperable internet.
December 2022
An introduction to the Freedom Online Coalition
The Freedom Online Coalition (FOC) is comprised of thirty-four member countries committed to advancing Internet freedom and human rights online.
December 2022
Russian War Report: Russian Telegram channel spreads digitally modified photo of Poland’s prime minister
Russian Telegram channels disseminated a manipulated photo showing Polish Prime Minister Mateusz Morawiecki at a monument during his visit to Ukraine.
November 2022
Analizando el volumen de las narrativas del Kremlin dirigidas al mundo hispanohablante
La interacción con los contenidos de RT en español disminuyó en Facebook, pero continúa floreciendo en Twitter
November 2022
Analyzing the volume of Kremlin narratives targeting the Spanish-speaking world
Engagement with RT en Español content decreased on Facebook but continues to flourish on Twitter
November 2022
Russian War Report: Russia defends ‘traditional values,’ criminalizes LGBTQ ‘propaganda’
After two Polish citizens were killed by a missile, Poland and NATO both say the hit was not a Russian attack.
November 2022
Election fraud narratives surge on Brazilian Twitter following Bolsonaro defeat
#BrazilWasStolen hashtag spreads across Twitter and other platforms.
November 2022
How inauthentic Facebook accounts targeted detained Moroccan journalists
Facebook removed a network of user accounts with potential links to Morocco-based campaign de-platformed in 2021
November 2022
Russian War Report: Ukrainians celebrate in Kherson as Russia evacuates the city
As Russian forces retreat from Kherson, Ukrainians celebrate online and in-person. While the overall status of the withdrawal remains in flux, today’s footage shows Russia is no longer in control of the central parts of Kherson.
November 2022
China spearheads social media campaign to attack civil society in Zimbabwe
Zimbabwe’s ruling ZANU-PF party targets opposition figures with Chinese government assistance.
November 2022
How the September 2022 Azerbaijan-Armenia clashes played out online
Inorganic Twitter activity, graphic Telegram footage of war crimes, and TikTok bans all surfaced in wake of recent clashes.
November 2022
Russian War Report: Kremlin-controlled outlet rehashes narrative that Poland plans to annex western Ukraine
Once again, Kremlin media alleged that Poland was preparing to annex western Ukraine. In April, the site responsible for the reporting was blocked in Poland.
November 2022
Facebook pages used bait-and-switch to exploit sympathies for Ukraine war
DFRLab found emotionally charged Facebook posts about the Ukraine war were later edited to promote clickbait articles.
October 2022
Russian War Report: Heavy fighting expected in Kherson as Prigozhin aims to boost Wagner operations
Heavy fighting expected in Kherson, while disinformation on Facebook continues. The Polish Senate also declares Russia a terrorist regime.
October 2022
Pro-Kremlin media praise Putin’s leadership overseeing nuclear drills
Kremlin media emphasized Putin’s leadership role conducting annual Grom nuclear drills.
October 2022
What Russia reads on Telegram
Nine out of the top ten political Telegram channels in Russia spread Kremlin pro-war propaganda
October 2022
Russian War Report: Wagner sends vehicles to Kherson while Iran increases military support
Wagner Group has been reported in Ukraine assisting Russian forces in fighting and fortifying positions in the Donbas.
October 2022
Chinese state media, content farms spread anti-UK narratives to halt Hong Kong emigration
Narratives amplified UK’s COVID challenges and presented its Hong Kong visa program as a scam.
October 2022
Footage raises additional questions about Wagner presence in Sudan
Videos allegedly show Wagner personnel training Sudanese Army and RSF paramilitary forces.
October 2022
Pro-Kremlin influencers reignite Zelenskyy “green screen” theory
Narrative recycles old footage of the Ukrainian president recording a hologram to allege he fled the country
October 2022
Russian War Report: Russia escalates war by targeting cities across Ukraine
Russia escalated its war against Ukraine this week with missile attacks and airstrikes on cities across the country, including the first serious attack in the capital Kyiv in months.
October 2022
Analysis: Why Iranian protesters are embracing Anonymous
The decentralized hacker movement has vowed to free the people of Iran, mirroring chants of protesters on the street
October 2022
Russian War Report: Ukraine recaptures territory as Russia uses Iranian drone near Kyiv
Russia has began its use of Iranian-made drones to try and slow the Ukrainian counter-offensive, a mass grave found near Lyman, and Russian Telegram praises the “pro-Russia” coup in Burkina Faso.
September 2022
Russian War Report: Putin illegally annexes Ukrainian territory
On September 30, Russian President Putin officially annexed four Ukrainian oblasts, incorporating them into Russia. The announcement was met with swift global condemnation.
September 2022
Russia-based Facebook operation targeted Europe with anti-Ukraine messaging
A network of inauthentic assets uncovered by the DFRLab promoted Kremlin narratives in Germany, France, Italy, Ukraine, Latvia and the UK.
September 2022
Notorious hate group website displayed prominently in Google search results
Google displays Patriot Front URL in search results sidebar despite blocking other racist website URLs from appearing there.
September 2022
How Chinese social media reacted to Nancy Pelosi’s Taiwan visit
Interest in Pelosi visit skyrocketed on Weibo before news fatigue set in.
September 2022
Russia-aligned hacktivists stir up anti-Ukrainian sentiments in Poland
Russian Telegram channels possibly linked to Ghostwriter amplified forged letters published by hacktivist assets.
September 2022
Russian War Report: Ukraine counterattacks in Kherson as Russia prepares new deployments
Ukrainian forces targeted Russian military command-and-control elements in northwestern Kherson, while Russian forces attempted a limited ground assault in the same area.
September 2022
Pro-Kremlin Wikipedia alternative off to a rough start
Member-only pages, restrictive content policies, and a lack of transparency: Runiversalis is a wiki in name only.
August 2022
How CSSAs reinforce official narratives to expat Chinese students on WeChat
The DFRLab analyzed WeChat articles from Chinese Students and Scholars Associations across the US, UK, Canada and Australia.
August 2022
WeChat channels keep Chinese students in US tied to the motherland
How Chinese government perspectives are reinforced among Chinese students at US universities via WeChat.
August 2022
Twitter campaign pushes anti-Ukraine hashtag into Poland’s trending list
Largely inauthentic campaign pushed #StopUkrainizacjiPolski to the top of Poland’s trending list over the course of four days.
August 2022
Chinese discourse power: Ambitions and reality in the digital domain
The CCP has embarked on a concerted strategy to gain control over the global digital and information environment. Its goal: create an alternative global order with China at its heart.
August 2022
Russian War Report: Satellite imagery confirms destruction of aircraft at Crimea airbase
Satellite imagery confirms the destruction of Crimea’s Saki airbase and debunking “Ukraine sells weapons” narratives.
August 2022
Colombian PR firms used Facebook ads to spread disinfo on presidential candidates
Facebook ads, websites, and fringe media spread disinformation about several candidates, including President Gustavo Petro.
July 2022
Russia War Report: Russia accuses Ukraine of creating ‘monster’ troops in biolabs
Russian officials are spreading the newest iteration of the conspiracy that suggests the United States is running secret biolabs in Ukraine, this time suggesting that Ukraine has created experimental “monster” troops.
July 2022
How Russia promoted the claim that Ukraine re-sold French howitzers for profit
Kremlin media amplified narrative until mainstream coverage on the risk of weapons smuggling allegedly gave it credence.
July 2022
Twitter campaign targeting detained Indian activist based on misleading tweet
Teesta Setalvad, arrested for probing Modi’s role in 2002 Gujarat riots, targeted online by BJP supporters and other Hindu nationalists.
July 2022
Transphobic misinformation trends on Twitter after Highland Park shooting
Right-wing accounts spread harmful narratives associating transgender people with violent behavior and mental illness.
July 2022
Wagner Group continues involvement in Russian operations in Eastern Ukraine
Russian mercenaries maintaining a relatively low profile in Ukraine, unlike their presence in Africa and Syria.
July 2022
Pro-Kremlin Telegram channel linked to inauthentic Facebook assets from Côte d’Ivoire
Alleged NGO from Côte d’Ivoire ran inauthentic Facebook assets that promoted its expanding pro-Russia Telegram channel.
July 2022
Russian War Report: Ukraine uses HIMARS effectively to hit Russian ammo dumps
As Russia continues its assault on Ukraine, the Atlantic Council’s Digital Forensic Research Lab (DFRLab) is keeping a close eye on Russia’s movements across the military, cyber, and information domains. With more than seven years of experience monitoring the situation in Ukraine—as well as Russia’s use of propaganda and disinformation to undermine the United States, NATO, and the European Union—the DFRLab’s global team presents the latest installment of the Russian War Report.
July 2022
Cracks emerge in Russia’s ‘Digital Iron Curtain’
Kremlin-controlled outlets maintain presence on Facebook and Twitter despite the platforms being banned in Russia.
June 2022
US right-wing influencers stoke fears of left-wing mass violence after Supreme Court ruling on abortion
Contextualizing narratives about political violence surrounding the Dobbs v. Jackson ruling.
June 2022
Newly elected Colombian congressperson spread falsehoods on his YouTube channel prior to election
Elected congressman Jonathan Ferney Pulido Hernández posted misleading videos targeting Colombian President Iván Duque and Venezuelan President Nicolás Maduro.
June 2022
Russian War Report: Pro-Kremlin Russian outlet refers to Russian troops in Mariupol as ‘occupiers’
News outlet Moskovsky Komsomolets published an article that referred to Russian soldiers in Mariupol as “occupiers,” but it was quickly deleted. Meanwhile, fires strike Russian oil and power plants, and Chinese media report on Russia-Lithuania dispute.
June 2022
Russian War Report: Russian governor accuses Ukraine of launching multiple attacks on Kursk
The governor of Russia’s Kursk Oblast accused Ukrainian forces of opening fire on two locations in the region. Meanwhile, pro-Kremlin Telegram channels recycle narratives about Western weapon sales again.
June 2022
Latinos in the US turn to WhatsApp groups for information on the Uvalde shooting
Spanish-language WhatsApp groups discussed solutions to school shootings and shared information from Latin American media sources.
June 2022
Russian War Report: Signs of renewed Belarusian troop movements towards Ukrainian border
Belarusian troops seem to be on the move again toward their border with Ukraine while the Kremlin spreads claims of killed NATO officers and blames the West for global food shortages.
May 2022
Polish-language Telegram channels spread anti-refugee narratives
The DFRLab identified 27 Telegram channels spreading anti-refugee disinformation as Ukrainians flee to Poland.
May 2022
Russian War Report: Pro-Kremlin Telegram channels claim Ukraine is building a “dirty bomb”
Pro-Kremlin Telegram channels misrepresented comments by the International Atomic Energy Agency (IAEA) to claim Ukraine was producing a “dirty bomb.”
May 2022
Chinese netizens accuse Biden of using gaffes as a “strategic advantage”
Chinese social media accounts disparaged the US president by claiming Biden intentionally weaponizes his verbal gaffes.
May 2022
Allegations of platform manipulation stir tensions in online white nationalist movement
Former associates of white nationalist podcaster Nicholas Fuentes allege Cozy TV manipulates view counts, though the truth is unclear.
May 2022
Russian War Report: Russian forces use incendiary munitions in Mariupol
New photo and video evidence suggests that the Russian military continues to use incendiary and cluster munitions against Ukrainian forces.
May 2022
Op-Ed: Making the Americas resilient to information operations against democracy
Leaders attending the Summit of the Americas must define actionable policies to promote resilience to disinformation and foreign influence.
May 2022
Russian War Report: Drone footage confirms failed Russian military pontoon crossing
The DFRLab geolocated drone footage that showed the obliteration of the Russian unit that tried to cross the Siversky Donets in the Donbas region.
May 2022
Pro-Kremlin Telegram channels in Russia outperforming channels critical of Kremlin
Top pro-Kremlin channels gain followers faster, reach more people, and have more subscribers than those critical of the Kremlin.
May 2022
Russian War Report: Russia accidentally honors Bonnie and Clyde during Victory Day celebration
During a Victory Day celebration, Kremlin TV featured a photo of infamous American criminals Bonnie and Clyde during a slideshow of alleged Soviet WWII veterans.
May 2022
Russian War Report: Belarus launches “combat preparedness test”
The Belarusian military began unannounced combat drills, the Kremlin drops the term “denazification,” and a Latin American RT influencer resigns.
May 2022
Pro-Kremlin Telegram channels promote narrative that Poland will annex western Ukraine
Narrative relies on forged documents and fake images of billboards in Poland.
May 2022
How Russia employs fake fact-checking in its disinformation arsenal
Kremlin-aligned outlets embrace open-source research and fact-checking tropes to make disinformation more convincing.
May 2022
Russian War Report: New fires and alleged sabotage operations across Russian territory
Over the past week, numerous strategic facilities on Russian territory have caught fire drawing accusation of sabotage.
May 2022
Russian gamer banned after drawing the letter Z during esports competition
Russian team Virtus.pro was competing against Ukrainian players during Dota 2 tournament at the time of the incident.
April 2022
Russian War Report: Geolocating fires in Bryansk
On April 25, large fires were reported in Bryansk, Russia, just 100 kilometers from the Ukrainian border. DFRLab geolocated the fires to confirm an armed forces fuel depot was damaged.
April 2022
Russian War Report: Forged document claims Ukraine is selling surplus weapons to African countries
A Kremlin-tied Telegram channel published a forged document claiming that Ukraine was selling surplus weapons to African countries.
April 2022
Russian War Report: Google refutes misleading claims about blurring Russian military assets
Thousands of posts online claim Google Maps unblurred satellite images of Russian military installations. Meanwhile, Russia hesitates to ban YouTube and a troll campaign distracts from Bucha.
April 2022
China’s discourse power operations in the Global South
An overview of China’s discourse power activities in the Global South, including the regions of Sub-Saharan Africa, Latin America, and the Middle East. It outlines the processes through which China leverages its diplomatic, media, and political positions in these regions to gain influence, and assesses the impacts of these activities for democratic resilience worldwide.
April 2022
Russian War Report: Russia falsely accuses Ukraine of provoking conflict even after it knew war was coming
Russia has rehashed several old narratives in their continued attempts to justify the war in Ukraine including misrepresented statements from Ukrainian officials.
April 2022
Russian War Report: Competing narratives about the sinking of Russia’s Moskva warship
Following Ukraine’s alleged sinking of Russia’s Moskva warship just off the coast of Odesa, the Kremlin’s narrative as to why has continued to shift.
April 2022
Russian War Report: Russia promotes misleading video accusing Ukraine of using mannequins as casualties
Kremlin-controlled TV network Rossiya 24 broadcast a misleading video claiming that mannequins were being used in Ukraine to stage war casualties.
April 2022
Russian War Report: Facebook takes down inauthentic networks targeting Ukraine
Facebook removed an online Russian and Belarusian network targeting Ukrainians named Ghostwriter while more Russian Twitter accounts turn to VK and Telegram.
April 2022
Russian War Report: Russia makes false claims while blaming Ukraine for Kramatorsk railway station attack
After missiles struck near Kramatorsk, Ukraine railway station, Russia tried to blame Ukraine for attacking its own people, a narrative pro-Kremlin media ran with.
April 2022
Russian War Report: Ukraine accuses Georgia of allowing Russian smuggling through its territory
Ukraine has accused Georgia of facilitating Russian smuggling out of Ukraine. Meanwhile, Alexei Navalny calls for Kremlin propaganda to be treated as a war crime.
April 2022
Russian War Report: Kremlin claims Bucha massacre was staged by Ukraine
Civilians have been found dead, many with their hands bound and simply left on the street, in Bucha. Despite the evidence, the Kremlin is trying to cover it up through disinformation and confusion.
April 2022
Russian War Report: Videos appear to show missiles striking Russian oil depot
Video surfaced showing a possible attack on a Russian oil depot in Belgorod. Elsewhere, a Russian official threatened Azerbaijan with nukes.
March 2022
Russian War Report: Contradictory reports of Russian vehicles returning to Belarus
Russian forces seen returning to Belarus, Telegram channels undermining peace talks with Ukraine, and how Russians continue using banned social media.
March 2022
Russian War Report: Additional units from Georgian breakaway regions join Russian offensive
Soldiers from the Georgian breakaway region of Abkhazia are confirmed to be providing military support for Russian forces in Ukraine.
March 2022
Russian War Report: Russia produces “evidence” claiming Ukraine will attack Crimea
A pro-Kremlin Telegram channel published suspect photos of alleged medals and certificates to reward Ukranian troops for recapturing Crimea.
March 2022
Russian War Report: Russian Duma members falsely claim Ukraine is creating ethnicity-targeting bioweapons
Members of the Russian Duma accused Ukraine and the US of creating bioweapons and researching “regional infections aimed at Russian regions.”
March 2022
Understanding Telegram’s ecosystem of far-right channels in the US
DFRLab analysis of nearly 6,000 Telegram channels identified distinct “communities” ranging from MAGA supporters to QAnon
March 2022
Russian War Report: Meta officially declared “extremist organization” in Russia
Russia labeled Meta an “extremist organization,” VKontakte got hacked, railways were sabotaged, and the Kremlin put on a concert to support the “military operation.”
March 2022
Sudanese protester run over by anti-riot police near local police station
Eyewitness footage shows unmarked transport vehicle carrying police running over protester north of Khartoum.
March 2022
Russian War Report: Russia sends military contractors from Georgian breakaway region to Ukraine
Military contractors from South Ossetia, Belarus’ hesitancy to send troops, VPN’s, the dilemma US tech companies face over Russian citizens’ access, and more.
March 2022
Fake posts recruiting Syrians to fight in Ukraine flood Facebook groups
Scammers exploit dire economic conditions by promising high salaries to Syrians who join Russian forces in Ukraine.
March 2022
RT and Sputnik in Spanish boosted by Russian embassy tweets and suspicious accounts
RT en Español and Sputnik News catapulted by diplomatic Twitter accounts and inauthentic activity after Russia invaded Ukraine.
March 2022
Telegram channels amplified document falsely justifying Russian invasion
Channels began circulating the 48-page document two days after Russia invaded Ukraine.
March 2022
Russian War Report: Hacked news program and deepfake video spread false Zelenskyy claims
A deep fake of President Zelenskyy, Russia threatens to block YouTube, and an information fog surrounding the Russian TV journalist who conducted on-air protest.
March 2022
Russian War Report: Russian false-flag operation seeks to drag Belarus into Ukraine war
Ukrainian media reported that Russia attacked a Belarusian village from Ukrainian airspace in an attempt to make it appear that Ukraine had attacked Belarus and provoke Belarusian President Lukashenka to move troops into Ukraine.
March 2022
Russian War Report: Putin endorses plan to bring 16,000 “volunteers” from the Middle East to fight in Ukraine
Russia’s Defense Minister announced that more than 16,000 “volunteers” from the Middle East had expressed interest in joining Russia’s “liberation movement” for the People’s Republics of Donetsk and Luhansk.
March 2022
False reports incite attacks on non-Ukrainian refugees in Poland
Polish right-wing party calls for extremist groups to protect citizens from “immigrants from outside Europe.”
March 2022
Russia’s domestic internet talk isn’t new – but it’s ramping up
The size and scope of the ongoing crackdown is unprecedented.
March 2022
Divisive ad campaign targets candidates ahead of Colombian presidential primary
Two Facebook pages promoted paid campaigns sharing homophobic, manipulated, and false content.
March 2022
IStandWithPutin hashtag trends amid dubious amplification efforts
Over the week of February 28, 2022, the hashtag #IStandWithPutin trended in several regions, but a deeper look at the origin and amplification of the hashtag suggested this support was artificial.
March 2022
Russian War Report: Russia escalates nuclear and chemical false-flag allegations
On March 9, Russia escalated their claims that Ukraine intended to use nuclear or biological weapons against Russia and that capturing nuclear power plants were to “prevent” such attempts.
March 2022
Russian Telegram channel embraces fact-checking tropes to spread disinformation
The War on Fakes Telegram channel pushes false and misleading content in defense of Russia’s invasion of Ukraine.
March 2022
Russian War Report: Kremlin recycles old narratives to claim Ukraine is constructing dirty bombs and bioweapons
In a further attempt to justify its invasion of Ukraine, the Kremlin once again accused Ukraine of provoking Russia by developing dirty bombs and biological weapons.
March 2022
Russian War Report: Global crackdown on Russian state-affiliated media continues as Russia blocks Facebook
In response to the invasion of Ukraine, governments and corporations have implemented new regulations and policies to mitigate the reach of Russian state-affiliated media within their borders and on their services.
March 2022
Fake Telegram group urges Africans in Ukraine to wear armbands used by combatants
Misleading and racist Telegram groups emerge as accusations of racism by border authorities go viral on Twitter.
March 2022
Russian War Report: Social platforms crack down on Kremlin media as Kremlin demands compliance
Google, Meta, and Twitter are taking action against Russian state-owned media accounts to limit the spread of harmful information online.
March 2022
Top comments on Chinese social media criticize the West while supporting Putin
Most popular comments on Weibo and Bilibili express support for Russia invading Ukraine.
March 2022
Mapped: Russia’s shelling of civilians in Kharkiv
The DFRLab analyzed and geolocated available imagery of the attack, identifying three main neighborhoods affected by shelling.
February 2022
Kharkiv neighborhood experienced ongoing shelling prior to February 28 attack
Russian forces shelled the residential neighborhood of Saltovka for several days, causing deaths and destroying homes.
February 2022
Russian War Report: Russia retaliates against anti-war celebrities as social platforms crack down on Russian media
Meta, Patreon, and Twitter are taking action against Russian accounts, while Russian celebrities are facing pushback for their views, according to the Council’s open-source researchers.
February 2022
Geolocating Russia’s indiscriminate shelling of Kharkiv
February 28 shelling from Russia into Kharkiv resulted in at least eleven deaths in three separate neighborhoods.
February 2022
Kremlin media used claims of Ukraine creating a dirty bomb to justify invasion
The narrative was amplified by various Russian outlets and circulated on multiple social media platforms prior to Putin invading Ukraine.
February 2022
Polish social media accounts revive anti-Ukrainian sentiments
Poland expects to host around one million Ukrainian refugees amid Russia’s invasion of Ukraine.
February 2022
Lukashenka regime undermines Belarusian opposition prior to referendum
Government critics lack a unified strategy as constitutional referendum gets underway.
February 2022
Russian War Report: Belarus joins conflict against Ukraine
The Council’s open-source researchers break down the Kremlin’s latest moves online and on the battlefield in its war in Ukraine.
February 2022
Russian outlets steadily increased claims that Ukraine will start a war
Russian media mentions of “Ukrainian aggression” narratives increased 50 percent in January 2022 compared with the two prior months.
February 2022
Russian War Report: Despite debunking of false flags, Putin recognizes breakaway republics
The Council’s open-source researchers break down how the Kremlin is seeking to justify incursions in Ukraine, and where the troops are moving.
February 2022
Russian War Report: Evacuations begin in Ukrainian breakaway regions
The Atlantic Council’s Digital Forensic Research Lab tracks Kremlin allegations of mass graves in Donbas, troop movements, and more.
February 2022
How ten false flag narratives were promoted by pro-Kremlin media
Russian media actively portrays the self-proclaimed Donetsk and Luhansk People’s Republics as victims of Ukrainian aggression.
February 2022
Local support for Russia increased on Facebook before Burkina Faso military coup
Pro-Russian support increased in the Sahel, with residents of Burkina Faso holding Russian flags while celebrating recent coup.
February 2022
Pro-Russian Facebook assets in Mali coordinated support for Wagner Group, anti-democracy protests
Coordinated network promoted military junta in months leading up to France’s decision to withdraw from the country.
February 2022
Financing & genocide: Development finance and the crisis in the Uyghur Region
A joint report that reveals how the World Bank’s International Finance Corporation (IFC) has significant investments in China’s Xinjiang Uyghur Autonomous Region, where indigenous peoples have been subjected to what international legislators, legal scholars, and advocates have determined to be a genocide.
February 2022
DFRLab releases Financing & genocide: Development finance and the crisis in the Uyghur Region
The DFRLab releases a joint investigation revealing how the World Bank’s private lending arm has several investments in China’s Xinjiang Uyghur Autonomous Region.
February 2022
Russian War Report: Military camps close in on border as Kremlin accelerates false-flag narratives
While the Kremlin announced that some units have begun loading equipment onto trains to return to their bases, the DFRLab continues to observe other units positioning themselves closer to Ukraine’s northeast border with Russia.
February 2022
A moment of truth for China’s vaccine diplomacy in Iran
Iranian officials echoed Chinese messaging while touting vaccines and criticizing the United States.
February 2022
Russian War Report: Belarus threatens to arm firefighters as military exercises kick off
The Council’s Digital Forensic Research Lab tracks the latest Russian troop movements and Kremlin-pushed narratives around NATO, Germany, and more.
February 2022
Tracing the myth that COVID-19 vaccines alter human DNA
Incorrect claims falsely attributed to public health experts were later amplified by anti-vax doctors and activists
February 2022
Russian War Report: Missile battalion confirmed in Belarus
The Council’s Digital Forensic Research Lab tracks the latest Russian military movements and other developments in the Kremlin’s hybrid war against Ukraine.
February 2022
Russian War Report: New evidence of accelerated military build-up near Ukraine
The Council’s open-source researchers reveal the latest Russian troop, aircraft, and weapons movements around Ukraine, along with new Kremlin disinformation efforts.
February 2022
DC anti-mandate rally leveraged to broaden audience for anti-vax narratives
January 23 anti-vax rally softened messaging and utilized support from anti-mandate doctors to reach broader audiences.
February 2022
Russian War Report: Will Moscow provide weapons and passports to breakaway Ukrainian regions?
The Council’s Digital Forensic Research Lab is tracking the latest on Russia moving blood and food supplies to the front, narratives in Kremlin-tied media, and more.
January 2022
Russian War Report: Kremlin pushes claims about Ukrainian offensive, ‘junk’ weapons from West
The Council’s Digital Forensic Research Lab is tracking the latest from Russian troop movements to social media conspiracy theories to Duma debates.
January 2022
Russian equipment flows into Belarus
Russia continues to move tanks and other materiel into Belarus along Ukraine’s northern border, as far west as Brest.
January 2022
Pro-China messaging amplified in Venezuela’s “hashtag of the day”
Hashtag trended on Venezuelan Twitter alongside messages praising China for donating its vaccine and attacking US for sanctions.
January 2022
Russian War Report: A push to recognize Ukrainian regions as independent states
Amid a legislative push to recognize the regions of Donetsk and Luhansk as independent states, Russia is spinning narratives of NATO aggression and continuing to mass troops and materiel near Ukraine.
January 2022
Russian War Report: Troops arrive in Belarus as propaganda narratives heat up
The Digital Forensic Research Lab’s global team presents the first installment of the Russian Hybrid Threats Report.
January 2022
Russian military equipment spotted in Belarus as tensions heighten with Ukraine
BM-27 220mm multiple rocket launchers spotted on trains in Belarus, some within range of the Ukrainian border.
January 2022
Missile systems and tanks spotted in Russian far east, heading west
Newly geolocated social media footage suggests redeployment began prior to US-Russia negotiations in Geneva.
January 2022
Twitter’s Ethiopian interventions may not have worked
Twitter’s decision to deactivate trending topics in Ethiopia did not reduce the volume or toxicity of tweets about the civil war.
January 2022
Belarus strengthening its borders with Ukraine and Lithuania
OSINT reveals new Belarusian outpost near Ukrainian border, joint air patrols with the Russian Air Force near Lithuania.
January 2022
Twitter accounts disproportionately amplified Chilean presidential candidate hashtags
Analysis of hashtags supporting both presidential candidates shows activity highly concentrated among a small percentage of accounts.
January 2022
Social media and security dynamics in the ongoing India-China border dispute
False narratives underline dangers posed by disinformation as a means of stoking hostility between nuclear-armed neighbors.
January 2022
Experts react to the year since January 6
Domestic extremism experts weigh in on the year since the January 6 attack and their perspectives on continuing threats to US democracy.
January 2022
After the insurrection: How domestic extremists adapted and evolved after the January 6 US Capitol attack
This report by the Digital Forensic Research Lab (DFRLab) provides an overview and analysis of the shifts observed in domestic extremist movements since the 2021 Capitol attack.
December 2021
Russia’s not-so-subtle policy update raises specter of mass burials
Russian policy document describes new procedures for the mass burial of corpses amidst rising tensions with Ukraine and NATO.
December 2021
China’s COVID-19 messaging makes its way to South Africa
China leverages its investment in the South African media space to push Beijing-approved narratives and conspiracies.
December 2021
Pro-Russian outlets promote misleading story about US Army howitzers moving through Poland
Belarusian Telegram channel pushed inaccurate claim, leading to anti-Western coverage by Russian and Belarusian outlets.
December 2021
First Russian mercenary statue in Africa identified in the Central African Republic
Newly surfaced photos confirm a new statue commemorating Russian mercenaries in the heart of Bangui, CAR’s capital city.
December 2021
2021: DFRLab’s year in review
The DFRLab’s 2021 year in review: disinformation campaigns, troll farms, troop buildups, vaccine rumors, a failed insurrection, and more.
December 2021
Influential Ethiopian social media accounts stoke violence along ethnic lines
Proliferation of hate speech on social media has the capacity to cause real-world harm amidst an increasingly violent civil war.
December 2021
Russia continues to expand military presence near Ukraine border
Satellite imagery and open-source evidence reveals ongoing Russian buildup along their border with Ukrain
December 2021
Scammers use Telegram and Facebook ads to sell fake COVID certificates in Ukraine
Telegram hosts Ukrainian channels and accounts claiming to sell legitimate vaccine certificates, while FB ads are exploited to promote them.
December 2021
Ukrainian Facebook account-renting scheme migrates to TikTok and Telegram
Ukrainian TikTok, Telegram, and Instagram accounts offer easy money to Facebook users willing to rent their accounts for advertising.
December 2021
Evidence shows Russia and Belarus holding paratrooper drill near Lithuanian border
The DFRLab geolocated the joint military drill as taking place just 15 kilometers from the Lithuanian border.
December 2021
Democracy + Tech Initiative Director Rose Jackson Testifies to Senate
Rose Jackson, Director of the Atlantic Council’s Digital Forensic Research Lab (DFRLab)’s Democracy & Tech Initiative testified to the Senate Subcommittee on Communications, Media, and Broadband’s Thursday hearing on Disrupting Dangerous Algorithms: Addressing the Harms of Persuasive Technology.
December 2021
Written testimony of DFRLab’s Rose Jackson at Senate hearing on disrupting dangerous algorithms
Delivered before the US Senate Committee on Commerce, Science, and Transportation Subcommittee on Communications, Media, and Broadband.
December 2021
How Russia is placing troops and equipment near the Ukraine border
Open-source evidence throughout 2021 shows Russian military buildup along Ukraine’s eastern borders and in Crimea.
December 2021
How the Chilean elections unfolded on Twitter
“Far-right” and “far-left” were among the most used terms, with pro-Kast hashtags prevailing.
November 2021
How RT DE spread COVID misinformation on YouTube
YouTube banned RT DE in September 2021 after the Russian network revived an old channel to avoid an initial suspension.
November 2021
Anti-government activists in Latvia openly recruit anonymous trolls
Previous activities involved active amplification of COVID-19 disinformation and conspiracies.
November 2021
Multi-platform troll farm linked to Nicaraguan government
Inauthentic network targeted domestic audiences in the lead-up to Nicaragua’s November 2021 general election
October 2021
Sudanese Facebook network promoting paramilitary group removed month before coup
Inauthentic FB assets linked to Sudan’s Rapid Support Forces operated for years; some admins based in Saudi Arabia and the UAE
October 2021
Geolocated footage capture chaotic scenes following Sudan military coup
Sudanese citizens protest military coup and dissolution of transitional government following arrest of civilian leadership
July 2021
Information defense: Policy measures taken against foreign information manipulation
A joint report from the Atlantic Council’s Digital Forensic Research Lab and Europe Center on the policy measures government and private sector can take against foreign information manipulation.
July 2021
Iranian accounts promote anti-Israel hashtags in the wake of the Israel-Hamas war
The campaign, promoted on Telegram, is linked to an Iranian conspiracy theorist previously suspended from Twitter.
June 2021
Atlantic Council’s Digital Forensic Research Lab Launches Democracy + Tech Initiative
Initiative to advance digital agenda focused on human rights and democratic values; programing kicks off with high-profile event featuring Katherine Maher on June 22.
June 2021
Inauthentic Facebook assets promoted Russian interests in Sudan
Network with links to Russia’s Internet Research Agency promoted oligarch Yevgeny Prigozhin and Russian naval presence in Sudan
April 2021
Ethiopian diaspora groups organize click-to-tweet Tigray campaigns amid information scarcity
Social media campaigns promoted pro-government and anti-conflict narratives to capture attention from an international audience.
April 2021
Fighting for the hearts and minds of Sakartvelo: The Georgian information environment during the 2020 parliamentary election
Georgian information environment report
April 2021
Digital Autocracy: Maduro’s control of the Venezuelan information environment
A 16-month monitoring report that analyzes the information environment in Venezuela, exploring the Maduro regime’s tactics when promoting influence operations in the country and abroad.
February 2021
Weaponized: How rumors about COVID-19’s origins led to a narrative arms race
A joint research project from the Digital Forensic Research Lab and the Associate Press on information environments during the first six months of COVID-19.
December 2020
Countering Chinese disinformation reports
A series of reports on countering Chinese disinformation campaigns around the globe from the Digital Forensic Research Lab and Asia Security Initiative, housed in the Scowcroft Center for Strategy and Security.
December 2020
Pro-government accounts use old images to depict Ugandan protesters as hooligans
Twitter campaign ensured anti-protester hashtag trended in Uganda after protests broke out following arrest of a presidential candidate
November 2020
Satellite imagery shows environmental damage of reported white phosphorus use in Nagorno Karabakh
Images show extensive burn marks, traces of likely white phosphorous use on forested areas by Azerbaijan
October 2020
Atlantic Council’s DFRLab releases first in a series of reports looking at China’s activity in the information space
The Atlantic Council’s Digital Forensic Research Lab (DFRLab) is proud to announce the release of Chinese Discourse Power: China’s Use of Information Manipulation in Regional and Global Competition, the first of four reports to look at the country’s strategy in the information space.
July 2020
#DFRLabCoffeeBreak with Latvian Foreign Minister Edgars Rinkēvičs
A #DFRLabCoffeeBreak with Latvian Foreign Minister and ally of the Atlantic Council, Edgars Rinkevics.
August 2019
How a “Political Astroturfing” App Coordinates Pro-Israel Influence Operations
Pro-Israel messages broadcast during May 4–5 Hamas terror attacks and IDF air strikes offer new insights into reach of the Act.IL app’s social media manipulation
June 2019
Operation Secondary Infektion
A Russian-based information operation used fake accounts, forged documents, and dozens of online platforms to spread stories.
