A sophisticated Russian disinformation campaign has launched a coordinated wave of deceptive videos targeting Ukrainian President Volodymyr Zelenskyy, according to findings from the independent investigative outlet Bellingcat. These videos, which have proliferated across platforms like X and Telegram, are engineered to look like genuine news reports by co-opting the branding, logos, and aesthetics of reputable media organizations. Giancarlo Fiorella, Bellingcat’s Director of Research and Training, recently confirmed that this campaign is part of a calculated effort to manipulate public sentiment and destabilize the Ukrainian government.
The campaign has proven particularly brazen in its mimicry, with Bellingcat itself being among the organizations whose name and visual identity have been misappropriated to lend credibility to false claims. Fiorella noted that this interaction is not an isolated incident but rather a recurring tactic used by “Matryoshka,” a known disinformation operation that has been monitored by digital investigators for several years. By embedding fraudulent narratives within the familiar visual language of trusted journalism, the operation seeks to bypass the skepticism of audiences, making it increasingly difficult for the average social media user to distinguish fact from fiction.
Detailed intelligence suggests that the Matryoshka operation follows a highly refined, multi-stage distribution pattern. Researchers have observed that these videos almost exclusively originate on Russian-language Telegram channels before being adapted and disseminated in English-language formats onto X. The videos typically adhere to a vertical, smartphone-friendly format, designed to feel like real-time investigative journalism. By rapidly injecting this content into the digital ecosystem, the perpetrators ensure that pro-Russian narratives are laundered through the guise of “independent” reporting, aiming to influence both domestic and international opinion simultaneously.
The underlying objective of this campaign, according to Fiorella, goes far beyond the mere dissemination of a single lie; it is a strategic effort to erode the foundation of trust upon which democratic societies are built. By feeding audiences a steady stream of contradictory and false information, these campaigns aim to generate confusion, internal friction, and deep-seated cynicism. Fiorella explained that the ultimate goal of such cyber warfare is to “tear apart the fabric of society” by turning citizens against one another and causing them to lose faith in their leaders and democratic institutions.
In the context of the ongoing war, these tactics serve as a distinct military and political advantage for Russia. Fiorella emphasized that fostering discord and disunity within a target country is a primary objective during wartime, as it hampers the opponent’s ability to remain cohesive under pressure. By specifically attacking President Zelenskyy’s reputation and questioning his authority, the Matryoshka operation attempts to dampen domestic support for the war effort and weaken the resolve of Ukraine’s international allies, who rely on the perceived stability of the Ukrainian leadership.
The reach of Matryoshka’s influence is not limited to the conflict in Ukraine; the network appears to have a global footprint. Investigative evidence shows that the same tactics are being exported to other nations, including Hungary and Armenia, where they have been used to influence political outcomes and public opinion. By meddling in foreign election cycles—such as in Armenia, where researchers noted attempts to boost politicians favorable to Vladimir Putin—the campaign demonstrates that Russian disinformation is a versatile tool used to project influence and challenge democratic processes on a global scale.
