Russian individuals in a Telegram chat were planning protests against Finland's border closure, with involvement of a known Stalin admirer and an IT specialist who left Russia in 2022.

Cyber & Information WarfarePsychological WarfareNarratives to erode public trust

Aggressor

Summary

On November 17, 2023, a Telegram group chat involving Russian nationals planning protests against the border closure in Finland was disclosed. Notably, participants included Savinova, identified as a committed communist and admirer of Stalin, and Gleb Kudryavtsev, an IT specialist who left Russia in May 2022 and has had no official position in Finland since October 2022. This episode illustrates ongoing organized societal pressure and agitation against Finnish border policies. The chat was highlighted on Twitter by a user monitoring pro-Russian activities, emphasizing the political-cultural undercurrents involved in opposition to Finnish border controls. The event reflects covert cultural influence and protest organization by Russian actors in Finland’s border context.

Classification

Confidence: High

Clear evidence of coordinated Russian-linked actors organizing protests targeting Finnish border policy was presented, indicating active aggressor societal and cultural pressure. There is no indication of defensive allied preparations described in the source.

Source URL

https://x.com/i/web/status/1725617028420042866

Open source

Provenance

Publisher: csv-import
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 8, 2026, 23:52 UTC
Event time: Nov 17, 2023, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "5d468a39-a308-415f-a1d6-e54a2c1b339e",
  "url": "https://x.com/i/web/status/1725617028420042866",
  "source": "csv-import",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Psychological Warfare",
  "incident_type": "Narratives to erode public trust",
  "country": "Finland",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "Finland",
    "Border Closure",
    "Telegram",
    "Protest Planning",
    "Cultural Manipulation",
    "russian influence operations",
    "Hybrid Warfare"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [
    "Finland"
  ],
  "where_text": "Cyberspace",
  "headline": null,
  "description": "A Telegram group chat of Russian nationals planning to protest Finland's border closure was uncovered, featuring participants including Savinova, a Stalin admirer and communist, and Gleb Kudryavtsev, an IT specialist who left Russia in mid-2022. This case signals active Russian-linked societal and cultural pressure in Finland aimed at destabilizing border security measures through orchestrated protests. The Telegram chat and associated plans were exposed publicly on Twitter on November 17, 2023, illustrating ongoing cultural-political subversion tactics by pro-Russian operatives in the region.",
  "summary_short": "Russian individuals in a Telegram chat were planning protests against Finland's border closure, with involvement of a known Stalin admirer and an IT specialist who left Russia in 2022.",
  "summary_extended": "On November 17, 2023, a Telegram group chat involving Russian nationals planning protests against the border closure in Finland was disclosed. Notably, participants included Savinova, identified as a committed communist and admirer of Stalin, and Gleb Kudryavtsev, an IT specialist who left Russia in May 2022 and has had no official position in Finland since October 2022. This episode illustrates ongoing organized societal pressure and agitation against Finnish border policies. The chat was highlighted on Twitter by a user monitoring pro-Russian activities, emphasizing the political-cultural undercurrents involved in opposition to Finnish border controls. The event reflects covert cultural influence and protest organization by Russian actors in Finland’s border context.",
  "actor_primary": "Savinova",
  "target_primary": null,
  "location_text": "Finland",
  "location_region": "",
  "location_coordinates_lat": 61.92411,
  "location_coordinates_lon": 25.748151,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Clear evidence of coordinated Russian-linked actors organizing protests targeting Finnish border policy was presented, indicating active aggressor societal and cultural pressure. There is no indication of defensive allied preparations described in the source.",
  "event_time_utc": "2023-11-17T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-01T00:14:33.999Z",
  "updated_at": "2026-11-08T23:52:41.511Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "minor",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: MinorAttribution: HighSingle sourceTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Nov 17, 2023, 00:00 UTC

Event time confidence

pm24h

Location

Finland

Primary actor

Savinova

Country

Finland

Countries

Finland

Tags

Russia, Finland, Border Closure, Telegram, Protest Planning, Cultural Manipulation, russian influence operations, Hybrid Warfare

Nodes

Node 1: Borders, Node 2: 5th Column

Loading signal...

{ "id": "5d468a39-a308-415f-a1d6-e54a2c1b339e", "url": "https://x.com/i/web/status/1725617028420042866", "source": "csv-import", "status": "approved", "category": "Cyber & Information Warfare", "subcategory": "Psychological Warfare", "incident_type": "Narratives to erode public trust", "country": "Finland", "source_reliability": "C", "info_credibility": "3", "tags": [ "Russia", "Finland", "Border Closure", "Telegram", "Protest Planning", "Cultural Manipulation", "russian influence operations", "Hybrid Warfare" ], "nodes": [ "Node 1: Borders", "Node 2: 5th Column" ], "countries": [ "Finland" ], "where_text": "Cyberspace", "headline": null, "description": "A Telegram group chat of Russian nationals planning to protest Finland's border closure was uncovered, featuring participants including Savinova, a Stalin admirer and communist, and Gleb Kudryavtsev, an IT specialist who left Russia in mid-2022. This case signals active Russian-linked societal and cultural pressure in Finland aimed at destabilizing border security measures through orchestrated protests. The Telegram chat and associated plans were exposed publicly on Twitter on November 17, 2023, illustrating ongoing cultural-political subversion tactics by pro-Russian operatives in the region.", "summary_short": "Russian individuals in a Telegram chat were planning protests against Finland's border closure, with involvement of a known Stalin admirer and an IT specialist who left Russia in 2022.", "summary_extended": "On November 17, 2023, a Telegram group chat involving Russian nationals planning protests against the border closure in Finland was disclosed. Notably, participants included Savinova, identified as a committed communist and admirer of Stalin, and Gleb Kudryavtsev, an IT specialist who left Russia in May 2022 and has had no official position in Finland since October 2022. This episode illustrates ongoing organized societal pressure and agitation against Finnish border policies. The chat was highlighted on Twitter by a user monitoring pro-Russian activities, emphasizing the political-cultural undercurrents involved in opposition to Finnish border controls. The event reflects covert cultural influence and protest organization by Russian actors in Finland’s border context.", "actor_primary": "Savinova", "target_primary": null, "location_text": "Finland", "location_region": "", "location_coordinates_lat": 61.92411, "location_coordinates_lon": 25.748151, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "Clear evidence of coordinated Russian-linked actors organizing protests targeting Finnish border policy was presented, indicating active aggressor societal and cultural pressure. There is no indication of defensive allied preparations described in the source.", "event_time_utc": "2023-11-17T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-02-01T00:14:33.999Z", "updated_at": "2026-11-08T23:52:41.511Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "minor", "attribution_confidence_band": "high", "attribution_basis": "single_source" }