Institute for Strategic Dialogue Reports Russian-Aligned Operation Overload Using Purported AI-Generated Impersonations Across January to March 2025

Researchers at the Institute for Strategic Dialogue (ISD) report that Operation Overload (also known as Matryoshka or Storm-1679) is a Russian-aligned campaign leveraging purported AI-generated voiceovers and visual impersonations to spread false or inflammatory content across platforms. The campaign reportedly involved at least 135 discrete posts analyzed by ISD in early 2025 targeting institutions and individuals, including one purported viral video claiming USAID funded celebrity trips to Ukraine (see Incident 1061).

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.1 Disinformation, surveillance, and influence at scale

The incident involves a coordinated, state-aligned campaign using AI-generated content to spread political disinformation at scale, targeting public opinion and democratic processes in NATO countries.

Additional risk subdomains

• 3.1 False or misleading information: The campaign generated specific false claims, such as USAID paying celebrities, which misled high-profile individuals and the public.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was driven by human malicious actors who intentionally used AI voice cloning and video manipulation tools post-deployment to conduct a coordinated disinformation campaign.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The report describes the use of AI-generated content, specifically deepfakes and cloned voices, which falls under the category of 'AI-generated content such as deepfakes' requiring transparency obligations.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Various generative AI developers, Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Storm-1679, Russian-aligned actors, Operation Overload, Matryoshka
• Alleged harmed parties: Western support for Ukraine, Voters in Germany, USAID, Ukrainian refugees, Truth, News organizations, National security and intelligence stakeholders, Law enforcement agencies, Journalists, General public, Fact-checkers, European politicians, Epistemic integrity, Electoral integrity, Democracy, Academics

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Substantial
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Minor, indirect Minor
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Severe
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: Yes, the report explicitly describes the creation and spread of malicious disinformation and manipulated media.

Directly caused: The campaign directly created and spread 135 pieces of deceptive content, including videos with AI-cloned voices and manipulated logos of over 80 organizations.

Indirectly caused: The content was shared and amplified by high-profile accounts on platforms like X, reaching over 4.2 million views for a single viral video.

Inferred additional harm: It is likely that the campaign generated and spread additional unmonitored malicious content across other platforms like Telegram and Bluesky, exposing millions more users.

Democracy

Reported: Yes, the report explicitly describes attempts to disrupt domestic politics and elections in democratic countries.

Directly caused: The campaign targeted the German federal election with fake terror threats to suppress voter turnout and advocate for specific political parties.

Indirectly caused: The disinformation fueled political campaigns to dismantle USAID and eroded public trust in democratic institutions and media organizations.

Inferred additional harm: The ongoing use of such AI-enabled campaigns likely causes long-term erosion of public trust in democratic processes and election integrity across multiple NATO countries.

Epistemic

Reported: Yes, the report explicitly describes the widespread generation of false information, fake news clips, and cloned voices.

Directly caused: The campaign fabricated news reports, cloned experts' voices, and forged headlines to spread false narratives about USAID and the war in Ukraine.

Indirectly caused: The viral video misled high-profile individuals, including Elon Musk and Donald Trump Jr., who amplified the falsehoods to millions of followers.

Inferred additional harm: The proliferation of highly realistic AI-generated fakes contributes to a broader erosion of shared reality, making it harder for the public to distinguish real news from synthetic propaganda.

People affected

• Occurrences reported: 1
• People reportedly harmed: 10
• People reportedly exposed: 4000000

Potential causes

Management

• Platform Tools Shutdown: Platform leaders shut down critical tools used by researchers to track fakes.
• Inadequate Platform Moderation: Platform management failed to remove the flagged video even after debunking.
• Lack of Policy Enforcement: Platforms failed to act quickly on reports of foreign influence campaigns.

Technology

• AI Voice Cloning: AI cloned voices of experts to make fake news clips sound highly credible.
• Cheap Synthetic Media Gen: AI lowered the cost of generating high-volume, convincing fake videos.
• Automated Bot Networks: Bot networks automatically amplified posts to simulate organic engagement.

Data Inputs

• Impersonated Brand Logos: Using real media logos like E News to deceive users about source authenticity.
• Real Footage Manipulation: Combining legitimate video clips with cloned AI audio to create fakes.

Human Factors

• High-Profile Amplification: Prominent figures reposted the fake video without verifying its authenticity.
• Confirmation Bias: Users embraced fake claims that aligned with their existing political goals.
• Expert Impersonation Vulnerability: Audiences trusted cloned voices of unrecognisable but authoritative experts.

Process and Methods

• Reduced Content Moderation: Social media platforms pulled back from actively moderating online content.
• Delayed Verification Response: Fact-checking tools like Community Notes flagged the video only after virality.
• Targeted Researcher Distraction: Campaign tagged research bodies to overwhelm them with debunking requests.

Regulatory Environment

• Disbanded Disinfo Units: Government units like the Global Engagement Center were shut down.
• Canceled Research Grants: National Science Foundation grants for misinformation research were canceled.
• Chilled Independent Research: Lawsuits and harassment chilled independent research on disinformation.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from the New York Times, ISD, and Washington Post provide consistent, detailed, and highly credible accounts of Operation Overload's tactics, targets, and the specific viral USAID incident. The role of AI (voice cloning and deepfakes) is explicitly documented, and the primary harms (epistemic, democratic norms, toxic content) are clearly delineated with specific metrics like the 4.2 million views.
• Ambiguities identified: The exact AI models used for voice cloning and video manipulation are not specified, and the precise identity of the Russian-aligned actors remains unconfirmed (presumed state-backed).
• Alternative interpretations: None. The incident is clearly a coordinated foreign influence operation leveraging synthetic media.

Operation Overload is a Russian-aligned influence campaign using AI-generated voice-overs and deepfakes to impersonate trusted news organizations and government entities. By targeting NATO support for Ukraine and attempting to disrupt democratic processes like the German federal election, the campaign represents a substantial information warfare and sovereignty threat with evolved AI delivery methods.

• Overall national security impact: Substantial
• Scope: Multiple nations
• Primary target: NATO countries
• Other affected: Ukraine, Germany, France, United States
• Alleged perpetrator: Russian-aligned actors

Threat characteristics

• Imminence: Long-term. Represents an ongoing strategic influence capability and long-term campaign rather than an immediate, acute crisis requiring urgent response.
• Autonomy: Human-controlled. AI was used as a tool by human actors to generate specific content based on direct human inputs, without autonomous decision-making.
• Novelty: Evolved capability. While foreign influence campaigns are established, the systematic use of highly accessible AI voice-cloning to impersonate journalists and institutions represents an evolved capability.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or human safety threats were reported in this incident.
• Information security: Substantial. Russian-aligned campaign used AI-cloned voices and deepfakes to impersonate trusted media, targeting NATO support for Ukraine. Gained over 4 million views on a viral USAID video amplified by high-profile figures.
• Sovereignty: Substantial. Campaign actively targeted the German federal election with fake terror threats to suppress turnout and attacked USAID, fueling political efforts to dismantle the US government agency.
• Economic security: Negligible. No significant threats to economic stability, financial systems, or strategic technological competitive advantage were reported.
• Societal stability: Minor. The campaign aimed to erode public trust in democratic institutions and media, causing minor societal distraction and reputational harm to impersonated individuals.