Exposing the shadows: groundbreaking investigation into Russian disinformation networks

In an era where digital misinformation can sway public opinion and undermine democracies, Bulgarian investigative outlet Bird.bg, a partner of EUalive, has emerged as a key player in uncovering the intricate web of Russian propaganda.

Collaborating with a consortium of international media organizations under the umbrella of the Organized Crime and Corruption Reporting Project (OCCRP), Bird.bg recently released a comprehensive report titled “Spies, lies and clicks: the wicked world of pro-Russia disinformation in Europe.” This investigation peels back the layers of a pro-Russian disinformation machine operating across Europe, revealing how state-linked actors exploit online platforms to spread falsehoods and erode trust in Western institutions.

The core of the investigation: unmasking anonymous news

At the heart of the probe is the German-language website Anonymous News (anonymousnews.org), which attracts around 100,000 monthly visitors with its barrage of pro-Kremlin and anti-Western content. The report details how this site fabricates and amplifies narratives, such as baseless claims tying French President Emmanuel Macron to Jeffrey Epstein’s criminal activities – allegations debunked by a lack of evidence in official U.S. records. These stories are then funneled through fake news clones and social media channels, reaching broader audiences and distorting public discourse.

Bird.bg and its partners trace this operation to Russia’s broader disinformation campaigns, notably Storm-1516, identified by France’s Viginum agency as the work of GRU Unit 29155. Since Russia’s 2022 invasion of Ukraine, such efforts have escalated, targeting Ukraine’s allies and sowing doubt about their support. The investigation highlights how even modest operations can have outsized impacts by normalizing propaganda through repeated exposure.

Methods: a blend of digital sleuthing and on-the-ground reporting

The team’s approach exemplifies rigorous investigative journalism. They analyzed website traffic, hosting infrastructure (noting shared Russian servers with predecessor sites), and hyperlink patterns to map the network’s digital footprint. Financial trails were followed through donation platforms like PayPal, leading to a Czech company, AN Média a Platební Služby s.r.o., nominally owned by Bulgarian national, Ivelin Borisov. On-site visits to Borisov’s remote village home revealed his limited involvement – he claims he was paid minimally to sign documents and denies content creation.

Further, the investigators delved into leaked phone data, court records, and social media analytics. For instance, Telegram channels like Corob_12, run by Russian national Alexey Bashilov, were linked to Russia’s FSB through phone registrations near agency headquarters. Expert insights from disinformation analysts and official reports bolstered the findings, painting a picture of a low-budget yet effective ecosystem leveraging AI, bots, and viral reposts.

Key players: from far-right activists to state agents

The report spotlights Mario Rönsch, the self-proclaimed editor of Anonymous News and a German far-right figure with a criminal history in arms trafficking. Rönsch’s shift toward pro-Russian views post-2014, including trips to Moscow, positions him as a pivotal operator now based in Russia. Other figures include Borisov as a unwitting proxy, Czech administrator Magdalena Prusova, and Bashilov with his FSB connections. High-profile Kremlin amplifiers like propagandist Vladimir Solovyov further extend the network’s reach, with channels boasting over 76,000 subscribers and millions of YouTube views.

Main achievements: shining light on hidden threats

Bird.bg’s work, in tandem with partners like Ukraine’s TV Toronto (which exposed FSB ties), Czechia’s Investigace.cz (handling company registries), and others including Paper Trail Media and Tamedia, has achieved several milestones. It not only exposes the mechanics of disinformation – from creation to amplification – but also prompts real-world consequences, such as the liquidation of AN Média and deletions of implicated accounts following inquiries.

By connecting obscure outlets to Russian intelligence like the GRU and FSB, the investigation underscores the vulnerability of European digital spaces. It demonstrates how small-scale operations can threaten democratic processes, urging greater vigilance against hybrid threats. This collaborative effort amplifies Bird.bg’s role as a watchdog, fostering cross-border journalism that counters authoritarian influence.

The original article by Bird.bg in Bulgarian can be found here.

Caption: Grok-generated image based on the article.