The US Department of Justice (DOJ) announced on 04 September 2024 that it had seized 32 internet domains in a covert Russian government-sponsored foreign malign influence operation. This operation, known as "Doppelganger," targeted audiences in the United States and other countries to influence the 2024 US Presidential Election and other political objectives.
The DOJ's action reveals the extent of Russia's ongoing efforts to interfere in foreign elections and spread disinformation. The Russian presidential administration directed the campaign and utilized sophisticated tactics, including cybersquatting, AI-generated content, and fake social media profiles to disseminate Russian government propaganda.[1]
US Attorney General Merrick Garland emphasized the severity of the threat, saying: "As alleged in our court filings, President Vladimir Putin's inner circle, including Sergei Kiriyenko, directed Russian public relations companies to promote disinformation and state-sponsored narratives as part of a campaign to influence the 2024 US Presidential Election. An internal planning document created by the Kremlin states that a goal of the campaign is to secure Russia's preferred outcome in the election."
The operation employed a range of tactics to spread its message covertly:
- Cybersquatting: Registering domains that mimic legitimate news websites
- Creating unique media brands
- Deploying "influencers" worldwide
- Using paid social media advertisements, some created with AI
- Creating fake social media profiles posing as U.S. or non-Russian citizens
Deputy Attorney General Lisa Monaco highlighted the calculated nature of these efforts, saying: "At Putin's direction, Russian companies SDA, Structura, and ANO Dialog used cybersquatting, fabricated influencers, and fake profiles to promote AI-generated false narratives on social media covertly. Those narratives targeted specific American demographics and regions in a calculated effort to subvert our election."
While the US was a primary target, the Doppelganger campaign also aimed to influence audiences in other countries, including Germany, Mexico, and Israel. The operation sought to undermine international support for Ukraine and bolster pro-Russian policies and interests globally.
The DOJ's actions were based on violations of US money laundering and criminal trademark laws. Using U.S.-based domain names at the direction of sanctioned individuals and entities violated the International Emergency Economic Powers Act (IEEPA).
FBI Director Christopher Wray emphasized the bureau's commitment to combating such threats, saying, "Today's announcement exposes the scope of the Russian government's influence operations and their reliance on cutting-edge AI to sow disinformation. The FBI will continue to work with our partners to expose and shut down these covert influence campaigns."
As the 2024 US presidential election approaches, this DOJ action is a stark reminder of the ongoing threats to electoral integrity and the importance of vigilance against foreign interference in democratic processes.
The case is being investigated by the FBI Philadelphia Field Office and prosecuted by various divisions of the US Justice Department, highlighting the collaborative effort required to combat sophisticated foreign influence campaigns.
This article is shared at no charge and is for educational and informational purposes only.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. We provide indicators of compromise information via a notification service (RedXray) or an analysis service (CTAC). For questions, comments, or assistance, please get in touch with the office directly at 1-844-492-7225, or feedback@redskyalliance.com
- Reporting: https://www.redskyalliance.org/
- Website: https://www.redskyalliance.com/
- LinkedIn: https://www.linkedin.com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://register.gotowebinar.com/register/5378972949933166424
[1] https://www.secureworld.io/industry-news/doj-russian-election-interference-2024
Comments