Signal
Submitted
Apr 28, 2026, 14:01 UTC
German Federal Office for the Protection of the Constitution warns of Russian attempts to influence the 2025 Bundestag election via cyberattacks, disinformation, and espionage.
On 29 November 2024, Germany's Federal Office for the Protection of the Constitution (Verfassungsschutz) publicly warned of attempts by foreign states, especially Russia, to interfere with the upcoming Bundestag election. The agency highlighted threats including disinformation, propaganda, cyberattacks, espionage, sabotage, and targeted manipulation aimed at decision-makers and the general public to undermine trust in democratic institutions. Since 2023, Russia has intensified spreading pro-Russian and anti-Western narratives and declared itself to be engaged in an 'information war' with the goal of sowing division within German society and weakening support for Ukraine. Cyber tools such as deepfake videos and voice manipulations are expected to be used to deceive voters. Russian hacker groups, notably APT 28 and Ghostwriter, have been active around election periods. Influence operations may also occur through bilateral channels, think tanks, partnerships, and targeted promotion of parties or movements. The Verfassungsschutz and other German and international agencies have formed a task force to prepare and respond to such influence operations.
Confidence: High
The article describes explicit ongoing and recent hostile Russian influence activities via cyberattacks, disinformation, and espionage around the German Bundestag election, naming known Russian hacker groups and influence tactics.
Source URL
https://tagesschau.de/inland/verfassungsschutz-warnung-cyberangriffe-bundestagswahl-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "92a5769c-fd51-4259-b1ee-d05d4b91b82d",
"url": "https://tagesschau.de/inland/verfassungsschutz-warnung-cyberangriffe-bundestagswahl-100.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Propaganda & disinformation campaigns",
"country": "Germany",
"source_reliability": "A",
"info_credibility": "3",
"tags": [
"Bundestagswahl 2025",
"Verfassungsschutz",
"cyberattacks",
"Russia",
"Disinformation",
"Deepfakes",
"APT28",
"Ghostwriter"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": null,
"description": "The German Federal Office for the Protection of the Constitution (Verfassungsschutz) warns on 29 November 2024 about foreign attempts, primarily from Russia, to influence the Bundestag election with cyberattacks, disinformation, propaganda, espionage, and sabotage. These activities aim to covertly manipulate decision-makers and the population, undermine trust in democratic institutions, and sow societal division. The office notes Russia's intensified use of pro-Russian and anti-Western messaging since 2023 and warns about Russian hacker groups APT 28 and Ghostwriter targeting the information space around elections. Methods include deepfake videos, voice manipulations, and covert support for political actors. A task force with national and international partners is established to counter these threats.",
"summary_short": "German Federal Office for the Protection of the Constitution warns of Russian attempts to influence the 2025 Bundestag election via cyberattacks, disinformation, and espionage.",
"summary_extended": "On 29 November 2024, Germany's Federal Office for the Protection of the Constitution (Verfassungsschutz) publicly warned of attempts by foreign states, especially Russia, to interfere with the upcoming Bundestag election. The agency highlighted threats including disinformation, propaganda, cyberattacks, espionage, sabotage, and targeted manipulation aimed at decision-makers and the general public to undermine trust in democratic institutions. Since 2023, Russia has intensified spreading pro-Russian and anti-Western narratives and declared itself to be engaged in an 'information war' with the goal of sowing division within German society and weakening support for Ukraine. Cyber tools such as deepfake videos and voice manipulations are expected to be used to deceive voters. Russian hacker groups, notably APT 28 and Ghostwriter, have been active around election periods. Influence operations may also occur through bilateral channels, think tanks, partnerships, and targeted promotion of parties or movements. The Verfassungsschutz and other German and international agencies have formed a task force to prepare and respond to such influence operations.",
"actor_primary": "APT 28",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.165691,
"location_coordinates_lon": 10.451526,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article describes explicit ongoing and recent hostile Russian influence activities via cyberattacks, disinformation, and espionage around the German Bundestag election, naming known Russian hacker groups and influence tactics.",
"event_time_utc": "2024-11-29T14:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:01:00.334Z",
"updated_at": "2026-11-10T02:40:42.080Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
3
Event time
Nov 29, 2024, 14:00 UTC
Event time confidence
exact
Location
Germany
Primary actor
APT 28
Country
Germany
Countries
Germany
Tags
Bundestagswahl 2025, Verfassungsschutz, cyberattacks, Russia, Disinformation, Deepfakes, APT28, Ghostwriter
Nodes
Node 2: 5th Column
Signal
Submitted
Apr 28, 2026, 14:01 UTC
German Federal Office for the Protection of the Constitution warns of Russian attempts to influence the 2025 Bundestag election via cyberattacks, disinformation, and espionage.
On 29 November 2024, Germany's Federal Office for the Protection of the Constitution (Verfassungsschutz) publicly warned of attempts by foreign states, especially Russia, to interfere with the upcoming Bundestag election. The agency highlighted threats including disinformation, propaganda, cyberattacks, espionage, sabotage, and targeted manipulation aimed at decision-makers and the general public to undermine trust in democratic institutions. Since 2023, Russia has intensified spreading pro-Russian and anti-Western narratives and declared itself to be engaged in an 'information war' with the goal of sowing division within German society and weakening support for Ukraine. Cyber tools such as deepfake videos and voice manipulations are expected to be used to deceive voters. Russian hacker groups, notably APT 28 and Ghostwriter, have been active around election periods. Influence operations may also occur through bilateral channels, think tanks, partnerships, and targeted promotion of parties or movements. The Verfassungsschutz and other German and international agencies have formed a task force to prepare and respond to such influence operations.
Confidence: High
The article describes explicit ongoing and recent hostile Russian influence activities via cyberattacks, disinformation, and espionage around the German Bundestag election, naming known Russian hacker groups and influence tactics.
Source URL
https://tagesschau.de/inland/verfassungsschutz-warnung-cyberangriffe-bundestagswahl-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "92a5769c-fd51-4259-b1ee-d05d4b91b82d",
"url": "https://tagesschau.de/inland/verfassungsschutz-warnung-cyberangriffe-bundestagswahl-100.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Propaganda & disinformation campaigns",
"country": "Germany",
"source_reliability": "A",
"info_credibility": "3",
"tags": [
"Bundestagswahl 2025",
"Verfassungsschutz",
"cyberattacks",
"Russia",
"Disinformation",
"Deepfakes",
"APT28",
"Ghostwriter"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": null,
"description": "The German Federal Office for the Protection of the Constitution (Verfassungsschutz) warns on 29 November 2024 about foreign attempts, primarily from Russia, to influence the Bundestag election with cyberattacks, disinformation, propaganda, espionage, and sabotage. These activities aim to covertly manipulate decision-makers and the population, undermine trust in democratic institutions, and sow societal division. The office notes Russia's intensified use of pro-Russian and anti-Western messaging since 2023 and warns about Russian hacker groups APT 28 and Ghostwriter targeting the information space around elections. Methods include deepfake videos, voice manipulations, and covert support for political actors. A task force with national and international partners is established to counter these threats.",
"summary_short": "German Federal Office for the Protection of the Constitution warns of Russian attempts to influence the 2025 Bundestag election via cyberattacks, disinformation, and espionage.",
"summary_extended": "On 29 November 2024, Germany's Federal Office for the Protection of the Constitution (Verfassungsschutz) publicly warned of attempts by foreign states, especially Russia, to interfere with the upcoming Bundestag election. The agency highlighted threats including disinformation, propaganda, cyberattacks, espionage, sabotage, and targeted manipulation aimed at decision-makers and the general public to undermine trust in democratic institutions. Since 2023, Russia has intensified spreading pro-Russian and anti-Western narratives and declared itself to be engaged in an 'information war' with the goal of sowing division within German society and weakening support for Ukraine. Cyber tools such as deepfake videos and voice manipulations are expected to be used to deceive voters. Russian hacker groups, notably APT 28 and Ghostwriter, have been active around election periods. Influence operations may also occur through bilateral channels, think tanks, partnerships, and targeted promotion of parties or movements. The Verfassungsschutz and other German and international agencies have formed a task force to prepare and respond to such influence operations.",
"actor_primary": "APT 28",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.165691,
"location_coordinates_lon": 10.451526,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article describes explicit ongoing and recent hostile Russian influence activities via cyberattacks, disinformation, and espionage around the German Bundestag election, naming known Russian hacker groups and influence tactics.",
"event_time_utc": "2024-11-29T14:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:01:00.334Z",
"updated_at": "2026-11-10T02:40:42.080Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
3
Event time
Nov 29, 2024, 14:00 UTC
Event time confidence
exact
Location
Germany
Primary actor
APT 28
Country
Germany
Countries
Germany
Tags
Bundestagswahl 2025, Verfassungsschutz, cyberattacks, Russia, Disinformation, Deepfakes, APT28, Ghostwriter
Nodes
Node 2: 5th Column