In today’s Vatnik Soup, I’ll introduce the Russian disinformation network “Doppelgänger”. Doppelgänger is an influence and hybrid operation spreading Kremlin propaganda via AI-generated fake news websites and social media sites, especially X.
1/20
Doppelgänger is a massive influence operation that was initially exposed back in 2022. Their modus operandi is to create near-identical copies of large, legitimate Western news outlets to spread anti-Ukraine, anti-Western and anti-NATO narratives.
2/20
The operation, overseen by Putin’s top aide Sergei Kiriyenko (who’s reportedly communicated with Elon), uses Russian firms like Social Design Agency (SDA) to create fake news sites that mimick legitimate media like The Washington Post, The Guardian, Bild and Fox News.
3/20
These fake sites publish pro-Russian propaganda disguised as real news, complete with stolen trademarks, journalist bylines, and nearly identical website designs. The sites use slightly altered web addresses, tricking readers into believing they’re legitimate.
4/20
After publishing fake news, Doppelgänger amplifies the content using thousands of social media accounts, forums, and even email campaigns. The goal is to make the disinformation seem organic and credible. Much of this activity has been automated with generative AI.
5/20
Doppelgänger’s core narratives range from anti-Ukraine content to allegations of “elite governments” neglecting their own people, claims that the sanctions against Russia are ineffective, calls for peace negotiations and calls to end weapons deliveries to Ukraine.
6/20
One major narrative pushed by Doppelgänger is that Western aid to Ukraine is a waste, that it goes in the pockets of corrupt officials, or that it fuels global instability. This aligns perfectly with the Kremlin’s goal of weakening Western support for Ukraine and Zelenskyy.
7/20
Doppelgänger’s reach extends far beyond websites. The group uses fake social media profiles posing as Americans and other Western citizens to share links to their content, amplifying the impact. The campaign also buys targeted social media ads to push these narratives.
8/20
FBI investigators found records of strategy meetings where Kiriyenko (who, again, was allegedly in contact with Elon) and other Kremlin officials directed the operation, prioritizing anti-Ukraine, pro-Kremlin messaging and efforts to undermine NATO and Western governments.
9/20
In addition to the US, Doppelgänger also runs influence campaigns targeting Germany, France, Israel, and Mexico, with the intent not only of indirectly shaping US politics through diaspora communities, but also pushing pro-Kremlin policies within these countries.
10/20
EU & US officials along with cybersecurity firms, like Meta’s Threat Intelligence team, have been actively taking down Doppelgänger-linked websites, but new domains & accounts pop up constantly, keeping the operation alive. Today, the campaign is bigger than ever before.
11/20
Russia’s disinformation machine also adapts quickly. After being exposed, Doppelgänger shifted their focus to X, Telegram, WhatsApp, and fringe platforms where fact-checking is minimal or non-existent.
Today, their favorite and preferred platform is of course X.
12/20
Another key tactic the group uses is “information laundering”. Russian state media outlets like RT and Sputnik amplify Doppelgänger’s stories, making them seem more credible. But they’re also spread by large, often conspiracy theory and MAGA related social media accounts.
13/20
Doppelgänger is by no means a new operation – it was first reported on in Aug 2022, and since then, there have been over 20 reports and hundreds of articles about the group.
Yet, Doppelgänger perseveres, which just shows how difficult it is to combat this problem.
14/20
Doppelgänger’s operations often peak around major geopolitical events like NATO summits or Ukraine aid votes, when public opinion is most vulnerable to manipulation. Recently, they’ve been spreading disinformation around the German elections taking place on 23 Feb 2025.
15/20
Russian bots are flooding X with disinformation on a daily basis ahead of the election. The strategy is the same as before: use of fake news sites and AI-generated content to undermine trust in Western institutions and sway public opinion in favor of Russia.
16/20
German authorities have identified over 100 sites that were inactive for months but are now spreading Kremlin-aligned bullshit. These sites are carbon copies of real media, blending generic and false content to mislead voters on issues like Ukraine and domestic politics.
17/20
The campaign focuses on X, as almost none of its moderation policies are enforced, and there is no effective bot detection in place. Previous exposés have shown that Russians prefer X due to its inability – or its leadership’s lack of motivation – to combat bots & trolls.
18/20
Perhaps due to this campaign, German courts recently ordered X to hand over all election-related data. This order will be the first real test of the effectiveness of the EU’s Digital Services Act, which aims to shift more responsibility onto big tech giants.
19/20
To conclude: Doppelgänger isn’t the only Russian disinformation operation, but it’s one of the most dangerous due to its scale and sophistication. Their goal is simple: stop any support for Ukraine, erode trust in Western institutions and polarize societies.
20/20
You can now pre-order the 2nd edition of “Vatnik Soup — The Ultimate Guide to Russian Disinformation”! This updated version, featuring pre-order extras, will be released on the 15th of February 2025.
In today’s Vatnik Soup, I’m going to talk about Europe’s information defense against foreign influence operations & disinformation.
The EU can’t rely anymore on America’s help in geopolitical struggles, and it’s time we created a united front against information threats.
1/24
Recent news coming from the US should be the final wake-up call for European decision-makers. Recently, Trump’s rhetoric has been openly pro-Kremlin and both anti-Ukraine & anti-EU, and at the same time the US is dismantling all institutions fighting against disinformation.
2/24
So far, the Trump administration has put staffers working on disinformation as well as a team of election security advisers at the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) on administrative leave.
In today’s Vatnik Soup, I’ll discuss how Estonia deals with the Russian threat. Estonia’s Internal Security Service (KAPO) published their 2023-2024 annual review some time ago, and it’s packed with insights on Russian hybrid operations in the region.
1/17
Estonia is at the frontlines against Russia’s hybrid war, and they’ve been targeted by the Kremlin for decades. Russia’s main goal remains the same: undermine Estonia’s constitutional order. To do this, they use intimidation, propaganda & cyber warfare to stir unrest.
2/17
Like in all Baltic countries, one of their major tools is the manipulation of ethnic Russians in Estonia. The Kremlin pushes propaganda to create divisions, but recent surveys show integration is improving. The Kremlin is losing its grip.
In today’s Vatnik Soup, I talk about populism. Populism includes a range of political stances with the focus on the idea of the “common people” in opposition to the “elites”. In recent decades, populism has been on the rise around the world,and especially in the US & Europe.
1/25
At its core, populism pits “the people” against “the elites.” It’s a political approach that claims to represent the common folk, often oversimplifying complex issues and tapping into frustrations. Populism can be left-wing, right-wing, or somewhere in between.
2/25
In the US and Canada during the 19th and early 20th century, populist sentiments often came from the small independent farmers, “the people”, who were opposing the bankers and politicians, or “the elites”. The People’s Party in the US was considered…
In today’s vatnik soup, I’ll discuss how Estonia, Latvia & Lithuania cut the cord on Russian energy, further reducing their reliance on the Kremlin.
At the same time, the Baltics set an example for EU countries like Slovakia & Hungary whose leadership still worships Putin.
1/24
Moscow has long used its vast natural gas reserves as a geopolitical weapon, manipulating energy supplies to keep neighbors obedient. They’ve used the “energy weapon” several times, with the most blatant cases of Kremlin blackmail coming of course from Ukraine.
2/24
Let’s rewind back to the 1990s: The USSR dissolved, but Russia inherited the gas reserves, pipelines, and Gazprom — its political weapon. Meanwhile, the Baltic states were politically free but economically tied to Russia, heavily reliant on Russian gas.
In today’s Vatnik Soup, I’ll introduce an Estonian politician, Jana Toom (@JanaToomEE). She’s best-known for promoting pro-Kremlin viewpoints both in domestic Estonian politics and in the European Parliament.
1/22
Toom’s mother, Margarita Chernogorova, studied law in Leningrad & worked for the Communist Party. She was also a confidant to the most notorious leader of the Estonian Soviet Socialist Republic, Karl Vaino. One of Chernogorova’s tasks was to suppress the Singing Revolution.
2/22
During the early 90s Toom lived with her husband in Snezhinsk, Russia and returned to Estonia in 1994. Soon after, she joined the editorial board of Molodyož Estonii, a paper known for being a mouthpiece for the Leninist Communist Youth League during the Soviet era.
In today’s Vatnik Soup, I’ll discuss the Kremlin’s toolbox at sea. Recently, we have seen several sabotage operations allegedly conducted by Russia & its allies, especially in the Baltic Sea region. Since 2023, there have been several underwater cables cut by ships’ anchors.
1/18
Since Russia’s full-scale invasion of Ukraine,the Baltic Sea has become a hotspot for NATO-Russia rivalry. This rivalry ramped up in Sep 2022,when the Nord Stream gas pipelines were sabotaged by an unknown perpetrator (some blame a “pro-Ukraine group”, others, the Russians).
2/18
These sabotage operations in the Baltic Sea now target critical infrastructure like Internet and energy cables, links that are vital for European communication and trade. Russia and its allies allegedly use these acts to test NATO’s resilience and response.