Operation Matryoshka seeded fake ARD and BBC skins plus…

Filed

September 14, 2026, 14:25 UTC

Actor

Operation Matryoshka / Overload / Storm-1679, assessed by BfV, Viginum and EEAS as a pro-Russian information-manipulation line; researchers map tactics toward Social Design Agency and Struktura work for the Russian Presidential Administration

Target

German voters and local newsrooms in Saxony-Anhalt, Mecklenburg-Vorpommern, Berlin and Lower Saxony, plus the federal audience around Chancellor Friedrich Merz, whose trust in CDU-SPD-Green-Left-FDP candidates the smear pile is built to move

Source

Impersonated Source falsified: fake personas, outlets or documents

Confidence

high Multiple independent open sources, low disagreement about the facts

Techniques

Firehosing Flooding the zone Synthetic media Transfer Outrage bait

Where

Germany, Saxony Anhalt, Mecklenburg Vorpommern, Berlin, Lower Saxony

Channels

X short video with stolen outlet skins
TikTok and Bluesky mirrors
fake ARD, BBC and newspaper covers
AI voiceovers and celebrity deepfakes
seeder and amplifier account pairs
reply-floods under journalist and fact-check posts
emails to German newsrooms carrying the same links

Summary

Between late June and early September 2026 the Russian-aligned line known as Matryoshka, Operation Overload, or Storm-1679 ran English-language short videos on X, with mirrors on TikTok and Bluesky, that stole German and BBC mastheads, faked newspaper covers, and used AI voiceovers and celebrity deepfakes to accuse CDU, SPD, Green, Left and FDP politicians of murder, corruption, fraud and sex crimes. Germany's BfV on 12 August attributed the wave to MATRYOSHKA and recorded fabricated headlines pushing East-West civil-war framing. CeMAS logged 141 distinct election videos from 30 June to 28 August and 53 named targets; ISD counted 269 X posts from 24 June to 1 September, still active as of 2 September. Saxony-Anhalt voted 6 September; Berlin and Mecklenburg-Vorpommern vote 20 September. The interior ministry told Reuters organic reach was not significant. The Russian embassy in Berlin denied interference.

Analysis

The last two briefs in this vault covered a U.S. commercial creator shop and an MSS signed essay. This cycle rotates to a Russian-aligned production line aimed at German Landtag and municipal ballots.

Primary open record is four layers that agree on method even where company names differ. On 12 August 2026 the Bundesamt fuer Verfassungsschutz attributed an English-language short-video wave on X to the information-manipulation campaign MATRYOSHKA. BfV described videos that copy the layout of known German outlets, pair stolen brand marks with sensational headlines, and push East-West polarization, anti-federal sentiment, and smears of Land and municipal politicians. Two fabricated headlines the service recorded on manipulated posts were "Der Westen HASST den Osten – Deutschland war noch nie so nah am Buergerkrieg" and "Baut die Mauer wieder auf!" The same notice said the operators were focusing, at this intensity for the first time, on Land and Kommunal politicians whose positions do not serve Russian strategic interests.

CeMAS researchers Julia Smirnova and Anna Meyer, in a 4 September note, logged 141 distinct election-related videos from 30 June to 28 August that they assess as Overload/Matryoshka with high probability, and counted 36,515 reposts and more than 18 million views on a 141-post X sample they flag as inauthentic amplification. They document stolen outlet logos, fake newspaper covers, celebrity audio deepfakes, mass replies under journalist and fact-check posts, and emails to newsrooms. Fifty-three politicians from CDU, SPD, Greens, Die Linke and FDP were named in false claims of murder, corruption, fraud or addiction. AfD and BSW were not the smear targets. ISD, covering 24 June to 1 September, counted 269 X posts across 21 days: 94 aimed at Saxony-Anhalt, 25 at Berlin, 20 at Mecklenburg-Vorpommern, 30 at Lower Saxony municipals; about 40 percent used AI voiceovers; weekday-only posting; a Russian abbreviation "SvDP" for FDP appeared in a Spanish-language item. Reuters on 5 August quoted an interior-ministry spokesperson that the campaign was not achieving significant organic reach but remained serious, and quoted the Russian embassy in Berlin denying interference as "anti-Russian hysteria."

Mechanism: transfer plus synthetic media plus firehose. A stolen ARD or BBC skin does the credibility work the claim cannot. A celebrity face or Cameo-style voice does the same for emotion. Volume then occupies the checking window: seeder accounts drop the clip, amplifier accounts reply and repost, and fact-checkers are mailed the same links so their rebuttals become a second distribution path. Outrage-bait is the payload — murder, sex crime, civil war, rebuild the wall — so the profitable reaction is fury rather than source-checking. Flooding the zone is the election calendar. Saxony-Anhalt voted 6 September; Berlin and Mecklenburg-Vorpommern vote 20 September. The product is not one lie that must survive; it is a pile that a local candidate cannot individually litigate before ballots close.

This is propaganda because origin is a recurring, named influence line, institutional form is impersonated journalism, and the design goal is to move German belief about parties that support Ukraine policy. It is not a finding that AfD's Saxony-Anhalt result was caused by the clips, that every anti-Merz video is Matryoshka, or that the 18 million view count is human. Interior-ministry and CeMAS both grade organic reach as small. Score the method, not the vote share. A Western contractor that stole RT skins to smear AfD candidates with invented sex crimes would be this brief with the nouns swapped.

Literacy counter: if a clip wears a German masthead, is in English, names a Land candidate, and arrives as a reply pile under a fact-check, treat the brand as costume. Check the weekday clock and whether AfD and BSW are missing from the villain list. A stolen logo is not a source.

Tells

English short video wearing a German or BBC masthead about a Land candidate
Weekday-only drops clustered in the late afternoon CEST window
Celebrity or Cameo-style voice accusing Merz or a local CDU/SPD/Green name
AfD and BSW missing from the villain list while five other parties are named
Reply piles and newsroom emails that recycle the same clip under fact-checks

Operation Matryoshka seeded fake ARD and BBC skins plus celebrity deepfakes to smear 53 German candidates before the September Landtag votes.

Summary

Analysis

Tells

Evidence