1. Summary 3

2. Victimology & Content 4

2.1 Historical targeting of Ukraine 4

2.2 Targeting personalities, events and electoral processes 5

2.2.1 Targeting Western interests 5

2.2.2 Targeting electoral processes 6

2.2.3 Targeting the Russian opposition 7

2.3 Artificially produced or generated content 8

2.3.1 Video and voice deepfakes 8

2.3.2 Video and photo editing 9

2.3.3 Videos involving actors 10

3. Distribution chain 11

3.1 Initial dissemination 12

3.1.1 Burner accounts and whistleblowers 12

3.1.2 Online publication via third parties 14

3.1.3 Publication via the CopyCop network 15

3.2 Content laundering 16

3.3 Amplification 17

3.4 Opportunistic takeovers 19

4. Involvement of Russian actors 21

4.1 Proven involvement of John Mark DOUGAN through the CopyCop network 21

4.2 Proximity to Yevgeny PRIGOZHIN's galaxy 23

4.2.1 Links with the R-FBI and the BJA 23

4.2.2 Links with Project Lakhta 24

4.3 Proximity to Aleksandr DUGIN's ecosystem 25

4.3.1 The Centre for Geopolitical Expertise (CGE) 25

4.3.2 Valery KOROVIN 26

4.4 An IMS potentially coordinated by a Russian intelligence service 27

5. Conclusion 28

6. Appendices 29

6.1 Operations attributed to Storm-1516 29

6.2 Domain names linked to CopyCop 34

6.3 Social media accounts and third parties involved 36

6.3.1 Media involved in information laundering 36

6.3.2 Channels used during primary broadcasting and amplification 37

6.4. Tactics, techniques and procedures 37