1/x For the #KremlinLeaks, we joined forces with ten other media throughout Europe, to investigate manipulation and propaganda by the presidential administration of Russia, just weeks before the presidential elections. You can find all of their reporting here - THREAD 🧵: 2/x Our colleagues at @delfiEE received and shared the leak! You can read their brilliant reporting here . Also, big shoutout to @holger_r who led the team through the last months delfi.ee/artikkel/12027…
delfi.ee/artikkel/12027…

2023 comes to end .... time to look back to an exciting @paper_trail_m year with lots of impactful investigations with our partners @derspiegel @ZDFfrontal @derStandardat @Tamedia. Unroll for a best-of... 1⃣Our #VulkanFiles-investigations (with amazing partners as @washingtonpost @guardian @sz @istories_eng) exposed Putin's secret plans for cyber-warfare and lead to EU-sanctions against NTC Vulkan spiegel.de/international/…

#CyprusConfidential - the new @icijorg @occrp @paper_trail_m-investigation. It started with a source reaching out to @paper_trail_m and became an international team effort. We reveal how a prominent German journalist was paid by a Russian oligarch spiegel.de/wirtschaft/hub… #Cyprus-Confidential is based on several leaks obtained by @paper_trail_m (partner of @derspiegel @derstandardat @tamedia @zdf) @occrp #DDoSecrets @bbhorne @natsecgeek and shared with @icijorg and its partners

Several months ago we shed a light on the dirty business with timber together with @ICIJorg #DeforestationInc
Our new investigations reveal constructs that were set up in the global timber trade to circumvent sanctions
- and to bring Russian Timber illegaly in the EU. For years Russia was one of the EU's most important timber suppliers. It is an important financial source for the Russian Regime.
@aliciaprager and @TimoSchober report for our @paper_trail_m partner @derStandardat how the circumvention is supposed to work.
derstandard.at/story/30000001…

In November 2019, an anonymous Twitter account called @m4lwatch posted some tweets. He says he found hacking software belonging to Sandworm - the hackers of the Russian secret service. And he draws a connection between Sandworm and NTC Vulkan - the company of the #VulkanFiles. @m4lwatch writes about “Znatok”, a Russian name for someone who seems to know everything. "Znatok" is said to be used for cyber attacks. M4lwatch suspects that such targets could be people or embassies. Where he got this information from, he leaves open.

2019 setzt ein anonymer Twitter-Account namens @m4lwatch einige Tweets ab. Er habe eine Hacking-Software gefunden, die zu Sandworm gehört - den Hackern des russischen Geheimdienstes. Und er stellt eine Verbindung her zu NTC Vulkan – der Firma aus den #VulkanFiles. @m4lwatch schreibt über “Znatok”, ein russischer Name für jemanden, der scheinbar alles weiß. "Znatok” soll für Cyberangriffe genutzt werden. M4lwatch vermutet, Ziele könnten Personen oder Botschaften sein. Woher er diese Informationen hat, lässt er offen.

The investigative team of the #VulkanFiles was able to identify several hundred Twitter accounts based on the clues in the documents. The investigation of @christo_buschek @flornrnd and Damian Leloup @lemondefr. A Thread. The leads in the documents are often easy to miss. In one document, we found an Email address. It looks like many others, a first name, last name, a year. Next to it, we see a date.