Kremlin botnet launches wave of disinformation claiming Havana Syndrome doesn’t exist

As with other disinformation campaigns, 1efay0[.]cfd was again used as a “spacer” website. Redirects to clones of Western media outlets Der Spiegel and Fox News — the counterfeit websites being spiegel[.]ltd and fox-news[.]in — were previously made through the “spacer.” Meta has included these websites on the list of fake media used by the Doppelgänger network (source for Der Spiegel, source for Fox News), which points to the same organization being behind the most recent disinfo, as per Bot Blocker.

Who is behind Doppelgänger?

According to a 2022 report by Facebook parent company Meta Platforms, such spam attacks have been carried out by the Russian IT companies National Technologies and Social Design Agency (Агентство Социального Проектирования), both of which which fall under EU sanctions. The ultimate owner of National Technologies is Rostec — Russia’s state-owned defense conglomerate, which is headed by former KGB agent Sergey Chemezov, a close friend of Vladimir Putin.

The bots also promoted the EuroBRICS website, which has proven links to the GRU’s Special Service Center (Military Unit 54777). In July 2023, the European Union imposed sanctions against those involved in the disinformation campaign. The group of offenders included the aforementioned National Technologies and Social Design Agency, as well as several officers of the GRU’s Unit 54777.

What has the Doppelgänger network spread previously?

Doppelgänger operates on a permanent basis, with fixed hours of operation and two days off per week, notes the Bot Blocker project. The majority of its work is carried out in “moderate” mode, as in the Havana Syndrome case, but it sometimes bursts with frantic activity, as in the case of a disinfo campaign regarding the Mar. 22 terrorist attack on Crocus City Hall outside of Moscow.

Following that attack, the network started circulating pseudo-journalistic articles purporting to detail those responsible for the terrorist attack. These pieces “informed” readers that the U.S., the UK’s Secret Intelligence Service (MI-6), Ukraine, and the so-called “collective West” at large were to blame — not ISIS or its regional…