🧵Meet Maria Adela Kuhfeldt Rivera, widow, jeweller, and socialite. The love child of a German father and a Peruvian mother, born in Callao, Peru, and abandoned in Moscow by her mother during the 1980 Olympic Games.
As she would tell her friends as an adult, she was raised by a Soviet couple her mother had befriended shortly before abandoning her. The couple treated Maria Adela badly, leading to Maria Adela seeking a better life abroad.
Between 2009 and 2011 she lived and studied in Western Europe, befriending people such as Marcelle D’Argy Smith, former editor of the UK edition of Cosmopolitan magazine, whom she met over drinks in Malta in the summer of 2010.
Maria Adela lived in Malta with her then boyfriend, but at some point moved to Ostia, near Rome, to take classes in gemology. She later moved to Paris and registered her own jewellery trademark in France under the brand Serein. marques.expert/kuhfeldt-river…
In July 2012, Maria Adela married a man who she told friends was an Italian, but tragedy struck when he died in Moscow on 13 July 2013 aged 30, the cause of death recorded in the death certificate as “double pneumonia and systemic Lupus”.
Maria Adela was not one to be kept down by life’s twists and turns, and soon moved to Naples in Italy, where she opened the Serein boutique jewellery store, building a reputation in Naples society as a trendy jewellery designer and socialite.
Maria Adela didn’t just limit herself to the Naples in crowd, but expanded her interests to become the secretary of a local charitable organisation - the Lions Club Napoli Monte Nuovo.
This was not just a regular branch of the Lions Club, an organisation that spans the globe and which generally looks to better the communities it operates in and advance civic society. It had been established by Naples-based NATO officers.
Maria Adela attended many social events, befriending a number of NATO officers, inviting them to her exclusive jewellery store and even starting relationships with a number of them.
Recollections from Ms. D’Argy Smith and social media postings on Maria Adela’s Facebook, as well as on that of her company, show that as of 2013 she regularly travelled to Bahrain, attending an annual luxury goods and jewellery expo, Jewellery Arabia.
In December 2014, her company’s FB account posted a photo in which she can be seen seemingly gifting Serein cufflinks to the country’s then prime minister, Prince Khalifa bin Salman Al Khalifa.
Suddenly, in September 2018, her social life evaporated, and she left Italy with her beloved cat, Luisa. Her friends were mystified at her sudden disappearance, but two months after her departure she posted on Facebook a message suggesting she was recovering from cancer.
But there was something else very special about September 2018. Three minutes before midnight on 14 September 2018, the phone of Maj. General Averyanov, the commander of GRU’s clandestine operations unit 29155 began to ring.
Earlier that day, Bellingcat and The Insider, had published an investigation into the cover identities of “Ruslan Boshirov” and “Alexander Petrov”, two undercover GRU spies implicated in the Novichok poisoning of Sergey and Yuia Skripal. bellingcat.com/news/uk-and-eu…
The investigation had blown the lid on a glaring hole in the GRU’s tradecraft: for nearly a decade, the GRU had furnished their spies with consecutively numbered passports, allowing investigative journalists to uncover other spies by simply tracing such batches of numbers.
Following the publication, Averyanov had received several phone calls from his top boss – the GRU’s chief Igor Kostyukov. Averyanov himself had reached out to many of his subordinates who had been travelling on such passports.
The midnight caller was the head of GRU’s Department 5, or the so-called Illegals program – a little-known department that planted military spies around the world under false identities. The two GRU officers talked for just over two minutes.
The next day, Maria Adela Kuhfeldt Rivera bought a one-way ticket from Naples, Italy, to Moscow, flying on a passport from one of the number ranges Bellingcat had outed the previous day.
The widowed jewellery designed socialite who had become part of Naples social scene, befriending and starting relationships with NATO officers serving at the nearby NATO base was in fact a deep cover GRU operative.
Bellingcat and partners have now identified her real identify as Russian citizen Olga Kolobova, born in 1982, now living in Moscow in a high end apartment bellingcat.com/news/2022/08/2…
It took months to uncover the real identity of “Maria Adela”, and as is often the case in these investigations the final piece of evidence was almost absurd; Olga’s WhatsApp profile used the same photo as Maria Adela’s Facebook profile. #opsec
I forgot my favourite part of the story, where she appears to have got her "exclusive" jewellery range from Ali Express vendors.
Christo Grozev is currently tweeting about some of the other little details that didn't make it into the final report, and how we found her in the first place
The Russian Embassy in Italy responds to our investigation with a cartoon "If you see Russian 007s everywhere, maybe you read too much la Repubblica." I guess Olga isn't going to get the Maria Butina treatment. Bad luck, Olga, 10 years of your life wasted.
If you want to hear more details about this case and the background of the investigation @christogrozev will be joined by myself and other investigators to discuss the investigation and the latest developments
It's been brought to my attention that there's videos published on social media claiming I've made various statements about the US election, related to election integrity. These are part of a Russian disinformation campaign, and the quotes are fabricated, but it's nice to know the Russians hold the value of my opinions in such high regard.
I've previously discussed other videos in this campaign in the below thread:
🧵 1/7: The European Court of Human Rights has ruled in favor of Russian NGOs and media groups (including @Bellingcat), declaring Russia's "foreign agent" legislation a violation of fundamental human rights. The court found that the law imposes undue restrictions on freedom of expression & association.
2/7: The law requires NGOs & individuals receiving foreign funds to register as “foreign agents,” facing stigma, harsh reporting requirements, and severe penalties. This label implies foreign control—without proof—and misleads the public
3/7: The Court noted that the "foreign agent" label, linked to spies & traitors, damages the reputation of those designated and leads to a chilling effect on civil society and public discourse.
It's currently 9:11am, this post has 3 views, and no retweets or likes on an account with 75 followers. Let's see how long it takes for it to get several hundred retweets, and a few tens of thousands of views.
In the last 15 minutes, that tweet just gained 15.7k views, 187 likes, with no retweets. Two other tweets with similarly fake stores, posted around the same time, with similar profiles, have also suddenly gain a couple of hundred likes and around the same amount of views. This is, in real time, how a Russian disinformation campaign is using Twitter to promote its fake stories.
The thing is, nearly all of this engagement, apart from about 10 views and none of the likes, are entirely inauthentic. This doesn't help them reach genuine audiences, it's just boosting their stats so when they report back to their paymasters they can tell them how many views, likes and retweets they got, but they're all fake. It's effectively the people running these campaigns scamming their paymasters to make them think it's working, when it's not at all.
A new fake Bellingcat story, from a fake video claiming to be from Fox News. What's interesting about this one is I viewed the tweet 10 minutes ago, and it had 5 views, and suddenly it jumped to 12.5k, then 16.2k views in less than 5 minutes, with zero retweets or likes.
To me this suggests there's a bot network being used to boost views of tweets used in this disinformation campaign.
In 90 seconds this tweet just gained 154 retweets, another sign of bot activity.
It's clear this is a coordinated attack from pro-Orban media which they really don't want being noticed outside of Hungary, but what they don't seem to realise is I'm now going to use what they did at every presentation I do on disinformation to audiences across the world.
What's notable is the accusations made against Bellingcat were all taken (uncredited) from an article publishing by MintPress claiming we've loads of intelligence agents working for us, which even the original MintPress article fails to prove.
Which to me just means I get to add a couple more slides to the presentation I'll be doing about this, to audiences made up of exactly the sort of people they didn't want to find out about this.
State actors see alternative media ecosystems as a vehicle for promoting their agendas, and take advantage of that by not just covertly funding them, but also giving them access to their officials and platforming them at places like the UN.
A recent example of that is Jackson Hinkle going to Eastern Ukraine, then getting invited to the UN by Russia to speak at a press conference, and that footage being used by state media as evidence of "experts" rejecting the "mainstream narratives" on Ukraine.
A lack of transparency around the funding of the individuals and websites that are part of these alternative media ecosystems allows for state actors to get away with their covert influence, a clear example of which we've seen over the last 24 hours.