It spoofs known media websites with a Russian propaganda twist – calling for an end of support for Ukraine or peace negotiations dictated by Russian terms. They use some facts, take them out of context and mix them with falsehoods. Targets are Germany, France, and Israel.
This new stage went a step further and additionally spoofed official government websites. They spoofed the website of the German BMI, intending to stoke resentment against Ukrainian refugees. We found forged documents with the branding of the BMI as well.
The campaign uses several redirections to hide the spoofed media websites. Innocuous links are shared via FB ads or Twitter and which redirect multiple times to the final spoofed media sites. Assets are further disseminated on Russian Telegram channels, VK, and Instagram.