During the December 2025 Kosovo parliamentary elections, various social media accounts and pages used AI-generated content to spread misinformation. This included deepfake videos and images depicting fabricated political events, fake polls, and manipulated photos of public figures. The content was designed to influence voter perception and mobilize support for specific political entities, significantly impacting the political atmosphere.
Fourteen purportedly AI-generated TikTok videos were reportedly posted by NoFilterNews from December 6–8, 2025, using television-news styling to promote election and diaspora-mobilization claims about Kosovo's December 28 elections. The videos purportedly favored Vetëvendosje and reportedly reached hundreds of thousands of viewers, and is alleged to have appeared to distort audience perceptions of political support.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.1 Disinformation, surveillance, and influence at scale
The incident involved coordinated campaigns using AI-generated deepfakes and images to conduct large-scale political disinformation aimed at manipulating public opinion and the parliamentary election in Kosovo.
Additional risk subdomains
- 3.1 False or misleading information: The AI systems generated highly realistic false images and videos that misled social media users.
Causal factors
- Entity: Human
- Intent: Intentional
- Timing: Post-deployment
The incident was caused by human actors intentionally using deployed AI generation tools to create and spread political disinformation during an election campaign.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The report describes the use of AI-generated content such as deepfakes, which under the EU AI Act are subject to transparency obligations to ensure users are aware they are interacting with AI-generated media.
AI system and alleged parties
- AI system: Sora (OpenAI)
- AI purpose: Deepfake Video Generation; Deepfake Image Generation
- Behaviour type: Tool
- Alleged developer: Video generation technology developers, OpenAI
- Alleged deployer: Pro-Vetëvendosje information manipulation actors, NoFilterNews, Information manipulation actors in Kosovo, Information manipulation actors
- Alleged harmed parties: Voters in Kosovo, Voters, TikTok users, Social media users, Journalistic integrity, General public of Kosovo, General public, Epistemic integrity, Democratic integrity
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Minor, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Minor, indirect Minor
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Minor, indirect Minor
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Malicious content
Reported: The report explicitly describes the creation and spread of malicious deepfakes and AI-generated images designed to manipulate an election.
Directly caused: AI tools were used to generate fake images of politicians and fabricated news broadcasts that were spread on TikTok and Facebook, receiving over 200,000 views.
Inferred additional harm: It is likely that additional malicious AI-generated content was circulated during this period beyond what was verified by hibrid.info.
Democracy
Reported: The report explicitly describes the erosion of democratic norms caused directly and indirectly by the incident.
Directly caused: Deepfakes and fake polls were distributed to favor specific political entities and discredit others, directly interfering with the democratic election process.
Indirectly caused: The high interaction with this content fueled polarization and influenced the political atmosphere ahead of the December 28 elections.
Inferred additional harm: The widespread use of deepfakes likely eroded public trust in the integrity of the election and democratic institutions in Kosovo.
Epistemic
Reported: The report explicitly describes widespread AI-driven misinformation, fabricated statements, and fake polls.
Directly caused: AI was used to generate fake images of Albin Kurti with a wanted individual, fake ammunition factories, and fake TV news reports with fabricated expert polls.
Indirectly caused: The proliferation of these deepfakes led to social media users taking the fabricated content for granted, eroding the shared consensus reality.
Inferred additional harm: The campaign likely caused long-term skepticism among citizens regarding the authenticity of real news and digital media.
People affected
- Occurrences reported: 1
- People reportedly harmed: 5
- People reportedly exposed: 200000
Potential causes
Management
- Prioritizing Engagement: Platforms prioritized engagement, amplifying deceptive AI videos.
- Inadequate Risk Assessment: Platforms failed to prepare for targeted AI disinformation campaigns.
Technology
- AI Video Generation Tools: Tools like Sora allowed easy creation of realistic TV-style news videos.
- Deepfake Image Generators: Image models created realistic fake photos of political figures.
- Imitation of Media Logos: AI generated characters holding microphones with distorted real media logos.
Data Inputs
- Lack of Provenance Metadata: Digital media lacked verifiable origin data to prove authenticity.
- Use of Real Likenesses: AI models utilized real political figures' faces to generate deepfakes.
Human Factors
- User Confirmation Bias: Users accepted fake content because it aligned with their political views.
- Ignoring AI Labels: Users ignored TikTok's 'AI-Generated' labels and took videos as real.
- Lack of Digital Literacy: Audiences failed to notice visual distortions in AI-generated media.
Process and Methods
- Inadequate Platform Moderation: Social platforms failed to proactively block deceptive political deepfakes.
- Delayed Fact-Checking: Fact-checkers verified content only after it gained high view counts.
- Impersonation of News Formats: Creators used professional TV formats to bypass typical user skepticism.
Regulatory Environment
- Lack of Election AI Regulations: No legal framework existed to ban deceptive AI media during elections.
- Weak Platform Accountability: Social media platforms faced no legal penalties for hosting deepfakes.
Information quality
- Classification confidence: High
- Reason for confidence: The reports from hibrid.info provide detailed, fact-checked examples of specific AI-generated images and videos, including the platforms used, view counts, and the specific political context of the Kosovo elections.
- Ambiguities identified: The exact AI tools used to generate the static images (other than Sora for the TikTok videos) are not specified.
- Alternative interpretations: None. The intent to manipulate the election using AI-generated misinformation is clear and well-documented.
During the December 2025 Kosovo parliamentary elections, unidentified actors utilized advanced generative AI tools, including OpenAI's Sora, to execute a coordinated disinformation campaign. By spreading highly realistic deepfakes of political figures and fabricated news broadcasts, the operation aimed to manipulate voter perception and undermine democratic processes, illustrating the growing threat of AI-enabled information warfare to national sovereignty.
- Overall national security impact: Substantial
- Scope: Single nation
- Primary target: Kosovo
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Near-term. The disinformation campaign occurred over a multi-week period leading directly to the election, developing rapidly within a 30-day window.
- Autonomy: Human-controlled. The AI systems operated strictly as tools, with human operators prompting the models and manually distributing the generated media.
- Novelty: Evolved capability. While political disinformation is an established threat, the deployment of advanced video generation tools like OpenAI's Sora represents an evolved capability in media synthesis.
Impact by dimension
- Physical security: Negligible. No physical security threats, kinetic attacks, or critical infrastructure compromise were reported in connection with this incident.
- Information security: Substantial. Coordinated use of AI-generated deepfakes and synthetic news reports targeted political leadership to manipulate voter perception, representing a notable information warfare effort.
- Sovereignty: Substantial. The incident directly targeted the integrity of Kosovo's democratic processes, attempting to manipulate parliamentary election outcomes and influence government formation.
- Economic security: Negligible. No significant threats to financial systems, strategic technology theft, or economic infrastructure were reported.
- Societal stability: Minor. The proliferation of deepfakes and fake polls fueled political polarization and social manipulation among the electorate, though it did not lead to active civil unrest.