Loading signal...
Signal
Submitted
Apr 28, 2026, 14:51 UTC
Since Russia's 2022 invasion of Ukraine, a covert Russian disinformation campaign using fake 'doppelgänger' news websites has persisted in Germany, primarily targeting social media platforms like X and Facebook to spread propaganda and misinformation.
Following Russia's invasion of Ukraine in 2022, a covert Russian disinformation operation has been identified that uses 'doppelgänger' websites—fake copies of reputable news outlets—to spread pro-Russian propaganda and misinformation in the German-speaking sphere. Initially crude, these fake sites have improved in quality and are promoted via paid adverts on social media, notably X (formerly Twitter) and Facebook. Investigations traced much of the campaign to a Russian company linked to the Kremlin. Efforts to shut down many of these sites, including actions by a Ukrainian hosting provider that terminated services after learning about their Ukraine-hostile content, achieved some success but did not end the campaign. A recent CeMAS study notes the thematic focus remains largely unchanged, emphasizing the discrediting of Ukraine and the German government and stoking social fears, with only minimal adaptation to political events. The campaign employs multiple coordinated social media accounts to post and amplify content. The study also highlights platform X's inconsistent response to reports of misinformation, including significant delays and partial account suspensions. Political and societal impacts continue as observers monitor ongoing pro-Russian disinformation activities in Europe. This campaign exemplifies persistent hybrid warfare tactics involving information operations and psychological manipulation against European audiences.
Confidence: High
The article clearly describes an active Russian disinformation campaign using cloned news websites and coordinated social media amplification in Germany, supported by direct evidence from leaked documents and expert studies.
Source URL
https://tagesschau.de/faktenfinder/kontext/russland-desinformation-analyse-102.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "00ba7697-902a-44e5-905c-9dbcc8d0782f",
"url": "https://tagesschau.de/faktenfinder/kontext/russland-desinformation-analyse-102.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Propaganda & disinformation campaigns",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"Russian disinformation",
"Doppelgänger campaign",
"propaganda",
"X platform",
"social media",
"SDAleaks",
"CeMAS",
"information operations",
"Germany"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": "Russian Disinformation Campaign 'Doppelgänger' Continues in Germany",
"description": "The article details an ongoing covert Russian disinformation campaign named 'Doppelgänger' operating since the 2022 invasion of Ukraine. This operation relies on cloned websites mimicking reputable German news portals to spread false and pro-Kremlin narratives. The campaign's quality improved over time, now often promoted by paid ads on platforms such as X and Facebook. Most of these sites have been traced to a Russian organization working under Kremlin direction via leaks known as 'SDAleaks'. Despite successes in shutting down many fake sites, notably after a Ukrainian host ceased service due to the hostile nature of content, the campaign remains active. A recent study by CeMAS (Center for Monitoring, Analysis and Strategy) highlights the unchanged core themes focusing on discrediting Ukraine and the German government while fueling social anxieties. Social media platforms, especially X, demonstrate inconsistent moderation, with some accounts only temporarily suspended and many misinformation posts remaining accessible for weeks. Platform operators gain financially by marking such content as advertising. The study further reveals coordinated groups of social media accounts posting and amplifying messages. The campaign persists despite regulatory efforts and public exposure, underscoring Russian continued use of information warfare in the digital space against Germany and the EU. Notably, platform responses to reported misinformation remain problematic, impeding effective containment.",
"summary_short": "Since Russia's 2022 invasion of Ukraine, a covert Russian disinformation campaign using fake 'doppelgänger' news websites has persisted in Germany, primarily targeting social media platforms like X and Facebook to spread propaganda and misinformation.",
"summary_extended": "Following Russia's invasion of Ukraine in 2022, a covert Russian disinformation operation has been identified that uses 'doppelgänger' websites—fake copies of reputable news outlets—to spread pro-Russian propaganda and misinformation in the German-speaking sphere. Initially crude, these fake sites have improved in quality and are promoted via paid adverts on social media, notably X (formerly Twitter) and Facebook. Investigations traced much of the campaign to a Russian company linked to the Kremlin. Efforts to shut down many of these sites, including actions by a Ukrainian hosting provider that terminated services after learning about their Ukraine-hostile content, achieved some success but did not end the campaign. A recent CeMAS study notes the thematic focus remains largely unchanged, emphasizing the discrediting of Ukraine and the German government and stoking social fears, with only minimal adaptation to political events. The campaign employs multiple coordinated social media accounts to post and amplify content. The study also highlights platform X's inconsistent response to reports of misinformation, including significant delays and partial account suspensions. Political and societal impacts continue as observers monitor ongoing pro-Russian disinformation activities in Europe. This campaign exemplifies persistent hybrid warfare tactics involving information operations and psychological manipulation against European audiences.",
"actor_primary": "Russian company publishing content on behalf of the government",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.165691,
"location_coordinates_lon": 10.451526,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly describes an active Russian disinformation campaign using cloned news websites and coordinated social media amplification in Germany, supported by direct evidence from leaked documents and expert studies.",
"event_time_utc": "2024-11-19T08:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:51:00.838Z",
"updated_at": "2026-11-10T02:40:48.686Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Nov 19, 2024, 08:00 UTC
Event time confidence
exact
Location
Germany
Primary actor
Russian company publishing content on behalf of the government
Country
Germany
Countries
Germany
Tags
Russian disinformation, Doppelgänger campaign, propaganda, X platform, social media, SDAleaks, CeMAS, information operations, Germany
Nodes
Node 2: 5th Column
Signal
Submitted
Apr 28, 2026, 14:51 UTC
Since Russia's 2022 invasion of Ukraine, a covert Russian disinformation campaign using fake 'doppelgänger' news websites has persisted in Germany, primarily targeting social media platforms like X and Facebook to spread propaganda and misinformation.
Following Russia's invasion of Ukraine in 2022, a covert Russian disinformation operation has been identified that uses 'doppelgänger' websites—fake copies of reputable news outlets—to spread pro-Russian propaganda and misinformation in the German-speaking sphere. Initially crude, these fake sites have improved in quality and are promoted via paid adverts on social media, notably X (formerly Twitter) and Facebook. Investigations traced much of the campaign to a Russian company linked to the Kremlin. Efforts to shut down many of these sites, including actions by a Ukrainian hosting provider that terminated services after learning about their Ukraine-hostile content, achieved some success but did not end the campaign. A recent CeMAS study notes the thematic focus remains largely unchanged, emphasizing the discrediting of Ukraine and the German government and stoking social fears, with only minimal adaptation to political events. The campaign employs multiple coordinated social media accounts to post and amplify content. The study also highlights platform X's inconsistent response to reports of misinformation, including significant delays and partial account suspensions. Political and societal impacts continue as observers monitor ongoing pro-Russian disinformation activities in Europe. This campaign exemplifies persistent hybrid warfare tactics involving information operations and psychological manipulation against European audiences.
Confidence: High
The article clearly describes an active Russian disinformation campaign using cloned news websites and coordinated social media amplification in Germany, supported by direct evidence from leaked documents and expert studies.
Source URL
https://tagesschau.de/faktenfinder/kontext/russland-desinformation-analyse-102.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "00ba7697-902a-44e5-905c-9dbcc8d0782f",
"url": "https://tagesschau.de/faktenfinder/kontext/russland-desinformation-analyse-102.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Propaganda & disinformation campaigns",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"Russian disinformation",
"Doppelgänger campaign",
"propaganda",
"X platform",
"social media",
"SDAleaks",
"CeMAS",
"information operations",
"Germany"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": "Russian Disinformation Campaign 'Doppelgänger' Continues in Germany",
"description": "The article details an ongoing covert Russian disinformation campaign named 'Doppelgänger' operating since the 2022 invasion of Ukraine. This operation relies on cloned websites mimicking reputable German news portals to spread false and pro-Kremlin narratives. The campaign's quality improved over time, now often promoted by paid ads on platforms such as X and Facebook. Most of these sites have been traced to a Russian organization working under Kremlin direction via leaks known as 'SDAleaks'. Despite successes in shutting down many fake sites, notably after a Ukrainian host ceased service due to the hostile nature of content, the campaign remains active. A recent study by CeMAS (Center for Monitoring, Analysis and Strategy) highlights the unchanged core themes focusing on discrediting Ukraine and the German government while fueling social anxieties. Social media platforms, especially X, demonstrate inconsistent moderation, with some accounts only temporarily suspended and many misinformation posts remaining accessible for weeks. Platform operators gain financially by marking such content as advertising. The study further reveals coordinated groups of social media accounts posting and amplifying messages. The campaign persists despite regulatory efforts and public exposure, underscoring Russian continued use of information warfare in the digital space against Germany and the EU. Notably, platform responses to reported misinformation remain problematic, impeding effective containment.",
"summary_short": "Since Russia's 2022 invasion of Ukraine, a covert Russian disinformation campaign using fake 'doppelgänger' news websites has persisted in Germany, primarily targeting social media platforms like X and Facebook to spread propaganda and misinformation.",
"summary_extended": "Following Russia's invasion of Ukraine in 2022, a covert Russian disinformation operation has been identified that uses 'doppelgänger' websites—fake copies of reputable news outlets—to spread pro-Russian propaganda and misinformation in the German-speaking sphere. Initially crude, these fake sites have improved in quality and are promoted via paid adverts on social media, notably X (formerly Twitter) and Facebook. Investigations traced much of the campaign to a Russian company linked to the Kremlin. Efforts to shut down many of these sites, including actions by a Ukrainian hosting provider that terminated services after learning about their Ukraine-hostile content, achieved some success but did not end the campaign. A recent CeMAS study notes the thematic focus remains largely unchanged, emphasizing the discrediting of Ukraine and the German government and stoking social fears, with only minimal adaptation to political events. The campaign employs multiple coordinated social media accounts to post and amplify content. The study also highlights platform X's inconsistent response to reports of misinformation, including significant delays and partial account suspensions. Political and societal impacts continue as observers monitor ongoing pro-Russian disinformation activities in Europe. This campaign exemplifies persistent hybrid warfare tactics involving information operations and psychological manipulation against European audiences.",
"actor_primary": "Russian company publishing content on behalf of the government",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.165691,
"location_coordinates_lon": 10.451526,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly describes an active Russian disinformation campaign using cloned news websites and coordinated social media amplification in Germany, supported by direct evidence from leaked documents and expert studies.",
"event_time_utc": "2024-11-19T08:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:51:00.838Z",
"updated_at": "2026-11-10T02:40:48.686Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Nov 19, 2024, 08:00 UTC
Event time confidence
exact
Location
Germany
Primary actor
Russian company publishing content on behalf of the government
Country
Germany
Countries
Germany
Tags
Russian disinformation, Doppelgänger campaign, propaganda, X platform, social media, SDAleaks, CeMAS, information operations, Germany
Nodes
Node 2: 5th Column