What influence operations are
Fake news websites in influence operations
Short answer
- Doppelganger domains listed by Meta
- 42 domains listed as spoofing news sites, December 2024 update 3
- Portal Kombat domains, Google
- 57 in January and 177 in February 2025 6
- Storm-2035 sites named by Microsoft
- EvenPolitics, Nio Thinker, Savannah Time 4
- Media impersonation, EEAS 2025
- Outlets including Der Spiegel, Le Point and Die Welt 8
Spoofed outlets
Spoofing means copying the name and design of a real outlet. Meta's December 2024 update on the Russia-based Doppelganger operation listed 42 domains in a table headed domains spoofing news sites 3. Meta said it was the first to publicly attribute Doppelganger, in December 2022, to two companies in Russia, Structura National Technology and Social Design Agency 3.
The 4th EEAS report lists impersonation of outlets such as Der Spiegel, Le Point and Die Welt under Doppelganger 8. Meta said an Iran-origin brand in its Q3 2024 report ran a website mimicking the Jerusalem Post 3.
Invented local brands
Many networks invent outlets that do not exist. Microsoft's Threat Analysis Center said on 9 August 2024 that an Iranian network it calls Storm-2035 ran covert news sites aimed at US voters. It named EvenPolitics, Nio Thinker and Savannah Time 4. Microsoft said the sites appeared to plagiarise US publications using AI-enabled services 4.
Meta's Q2 2024 report linked a network using sites such as yerli-media and sakartvelo-today to IMA Digital, a Moscow-registered marketing firm 2. Another Russia-origin network posted under brands including Euro Top News 2. OpenAI listed newstop.africa among Stop News sites in October 2024 5.
Meta said a Moldova-origin network ran about a dozen fictitious Russian-language news brands 3. A Lebanon-origin network ran three fictitious news entities, Dofek, Israel in a Minute and Halalom Israel 3. In Bangladesh, Meta said Pages posed as fictitious outlets and used the names of existing news organisations 1.
Aggregator and filler networks
The 3rd EEAS report, published in March 2025, places Portal Kombat, False Façade and Paperwall in its state-aligned category 7. That category covers channels showing systematic alignment with a state without enough evidence for formal attribution 7.
Google lists domains it blocks from appearing on Google News and Discover. Its Q1 2025 bulletin listed 57 Portal Kombat domains in January and 177 in February, and 47 Doppelganger domains in February 6. The 4th EEAS report says Paperwall expanded its filler websites, mostly aimed at Africa and the Middle East 8.
How the sites spread
Reports describe sites being pushed through social media accounts. Meta said in May 2024 that Doppelganger operators had largely stopped linking to spoofed news domains on its apps and had stopped attempting to share links by April 2024 1. Microsoft said in August 2024 it had not yet seen significant social media amplification of the Storm-2035 sites 4.
Common questions
What is Doppelganger?
Meta describes it as a Russia-based operation. It said it was the first to publicly attribute it, in December 2022, to two companies in Russia, Structura National Technology and Social Design Agency 3.
Does Google remove fake news sites?
Google's bulletins list domains it blocks from eligibility to appear on Google News and Discover 6.
Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@influenceopsrecords.com.
Sources
- Meta: Q1 2024 Adversarial Threat Report (May 2024)
- Meta: Q2 2024 Adversarial Threat Report (August 2024)
- Meta: Q3 2024 Adversarial Threat Report (December 2024)
- Microsoft Threat Analysis Center: Iran steps into US election 2024 with cyber-enabled influence operations (9 August 2024)
- OpenAI: Influence and cyber operations: an update (October 2024)
- Google: TAG Bulletin: Q1 2025 (15 May 2025)
- EEAS: 3rd EEAS Report on Foreign Information Manipulation and Interference Threats, Exposing the architecture of FIMI operations (March 2025)
- EEAS: 4th EEAS Report on Foreign Information Manipulation and Interference Threats, Dismantling the FIMI House of Cards (March 2026)
Related
- Influence operation tactics documented in official reports
Fake personas, fake media brands, paid ads, self-amplification and AI-written content, as Meta, Google, OpenAI and the EEAS have documented them.
- Commercial influence for hire in official takedown reports
How Meta, OpenAI, Google and the EU have reported marketing and PR firms behind covert influence networks, with firm names as each report gives them.
- EU reports on foreign information manipulation and interference
What the EEAS reports on foreign information manipulation and interference count, the periods they cover, and how they classify channels.
- Google TAG bulletins explained
How Google Threat Analysis Group bulletins list terminated YouTube channels, blogs, ads accounts and blocked domains, with 2025 examples.