{
  "id": "dda860a6-e397-4084-8545-d88a1c77722d",
  "url": "https://tagesschau.de/faktenfinder/fake-news-serioese-marken-103.html",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Information Operations",
  "incident_type": "Fake NGOs / shell media outlets",
  "country": "Unknown",
  "source_reliability": "A",
  "info_credibility": "3",
  "tags": [
    "fake news",
    "disinformation",
    "cloned websites",
    "pro-Russian propaganda",
    "cybercrime",
    "crypto scams",
    "Meta takedown",
    "russia–ukraine war",
    "digital literacy"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "Flood of Fake News Using Cloned Trusted News Sites to Spread Disinformation and Fraud",
  "description": "Since early 2022 and amid the Russian invasion of Ukraine, there has been a significant increase in the use of cloned or fake news websites impersonating reputable German and European media outlets such as Tagesschau, Spiegel, and BBC to spread disinformation and fraudulent investment schemes. These cloned sites are used by cybercriminals to conduct phishing, scams with fake crypto investment promotions, and deliver pro-Russian disinformation to undermine Western support for Ukraine while promoting fear about the energy crisis and refugees. Major platforms like Meta have taken down Russian-linked coordinated inauthentic networks responsible for hundreds of fake domains and social media profiles. Legal action against impersonators is complicated by anonymity and jurisdictional challenges, leading experts to recommend improving digital literacy and detection tools. The fake content often includes fabricated quotes, such as a phony interview with Markus Lanz or fake BBC reports falsely attributing claims to French President Emmanuel Macron.",
  "summary_short": "Since early 2022, cybercriminals and pro-Russian actors have used cloned reputable news sites in Germany to spread fraudulent investment scams and disinformation related to the Ukraine war, prompting platform takedowns and calls for improved digital literacy.",
  "summary_extended": "The article details a surge in fake news articles appearing as cloned versions of trusted German and European news outlets such as Tagesschau and BBC, used to spread disinformation and fraudulent investment schemes. This was notably intensified during Russia's war on Ukraine where numerous fake sites and social media profiles coordinated by pro-Russian actors aimed to undermine Western political support, stoke fear about refugees and the energy crisis, and spread misleading narratives. Platforms like Meta identified and dismantled hundreds of such fake domains and accounts linked to Russian networks. Fake reports included fabricated interviews and false attributions, like a bogus Tagesschau story featuring Markus Lanz or a fake BBC quote attributed to French President Macron. Legal responses face difficulties due to anonymity of perpetrators and jurisdictional issues. Experts recommend enhancing user awareness, digital competence, and verification tools to combat fake news in this context of hybrid warfare information operations.",
  "actor_primary": "Russian-linked cybercriminal networks",
  "target_primary": null,
  "location_text": "Cyberspace",
  "location_region": "Cyberspace",
  "location_coordinates_lat": 26.4925331,
  "location_coordinates_lon": 92.3308789,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly describes deliberate hostile hybrid warfare activities by Russian-linked networks spreading disinformation via cloned news websites in Germany to undermine Western support for Ukraine and perpetrate investment fraud, thus meeting the criteria for aggressor hybrid signals.",
  "event_time_utc": "2022-11-07T17:08:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-04-28T14:01:00.446Z",
  "updated_at": "2026-11-08T19:24:32.738Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "dda860a6-e397-4084-8545-d88a1c77722d",
  "url": "https://tagesschau.de/faktenfinder/fake-news-serioese-marken-103.html",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Information Operations",
  "incident_type": "Fake NGOs / shell media outlets",
  "country": "Unknown",
  "source_reliability": "A",
  "info_credibility": "3",
  "tags": [
    "fake news",
    "disinformation",
    "cloned websites",
    "pro-Russian propaganda",
    "cybercrime",
    "crypto scams",
    "Meta takedown",
    "russia–ukraine war",
    "digital literacy"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "Flood of Fake News Using Cloned Trusted News Sites to Spread Disinformation and Fraud",
  "description": "Since early 2022 and amid the Russian invasion of Ukraine, there has been a significant increase in the use of cloned or fake news websites impersonating reputable German and European media outlets such as Tagesschau, Spiegel, and BBC to spread disinformation and fraudulent investment schemes. These cloned sites are used by cybercriminals to conduct phishing, scams with fake crypto investment promotions, and deliver pro-Russian disinformation to undermine Western support for Ukraine while promoting fear about the energy crisis and refugees. Major platforms like Meta have taken down Russian-linked coordinated inauthentic networks responsible for hundreds of fake domains and social media profiles. Legal action against impersonators is complicated by anonymity and jurisdictional challenges, leading experts to recommend improving digital literacy and detection tools. The fake content often includes fabricated quotes, such as a phony interview with Markus Lanz or fake BBC reports falsely attributing claims to French President Emmanuel Macron.",
  "summary_short": "Since early 2022, cybercriminals and pro-Russian actors have used cloned reputable news sites in Germany to spread fraudulent investment scams and disinformation related to the Ukraine war, prompting platform takedowns and calls for improved digital literacy.",
  "summary_extended": "The article details a surge in fake news articles appearing as cloned versions of trusted German and European news outlets such as Tagesschau and BBC, used to spread disinformation and fraudulent investment schemes. This was notably intensified during Russia's war on Ukraine where numerous fake sites and social media profiles coordinated by pro-Russian actors aimed to undermine Western political support, stoke fear about refugees and the energy crisis, and spread misleading narratives. Platforms like Meta identified and dismantled hundreds of such fake domains and accounts linked to Russian networks. Fake reports included fabricated interviews and false attributions, like a bogus Tagesschau story featuring Markus Lanz or a fake BBC quote attributed to French President Macron. Legal responses face difficulties due to anonymity of perpetrators and jurisdictional issues. Experts recommend enhancing user awareness, digital competence, and verification tools to combat fake news in this context of hybrid warfare information operations.",
  "actor_primary": "Russian-linked cybercriminal networks",
  "target_primary": null,
  "location_text": "Cyberspace",
  "location_region": "Cyberspace",
  "location_coordinates_lat": 26.4925331,
  "location_coordinates_lon": 92.3308789,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly describes deliberate hostile hybrid warfare activities by Russian-linked networks spreading disinformation via cloned news websites in Germany to undermine Western support for Ukraine and perpetrate investment fraud, thus meeting the criteria for aggressor hybrid signals.",
  "event_time_utc": "2022-11-07T17:08:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-04-28T14:01:00.446Z",
  "updated_at": "2026-11-08T19:24:32.738Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}