Russia-Linked Matryoshka Influence Operation Reportedly Used AI-Cloned Celebrity Voices and Fabricated News-Style Videos to Target Democratic Candidates Ahead of 2026 U.S. Midterms

Researchers attributed a September 2026 influence campaign targeting U.S. Democratic Senate candidates to the Russia-linked Matryoshka/Operation Overload network. The campaign reportedly used AI-cloned celebrity voices and fabricated, news-branded videos to spread false or unsubstantiated claims on social media. Celebrities and CNN rejected the manipulated statements and unauthorized branding, which were intended to influence U.S. voters before the midterms.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.1 Disinformation, surveillance, and influence at scale

The incident involves a coordinated, state-sponsored digital influence campaign using AI-generated deepfakes to manipulate public opinion and target political processes at scale.

Additional risk subdomains

• 1.2 Exposure to toxic content: The campaign generated and spread false, inflammatory, and manipulative synthetic media targeting specific political candidates.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by human actors (Kremlin-linked trolls) intentionally deploying AI tools to generate and spread deepfake disinformation.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The report describes the use of AI-generated content and deepfakes, which are subject to specific transparency obligations under the EU AI Act to ensure users are informed they are interacting with synthetic media.

AI system and alleged parties

• AI system: None named
• AI purpose: Deepfake Video Generation; Social Media Content Generation
• Behaviour type: Tool
• Alleged developer: Voice cloning technology developers, Synthetic media generation technology developers, Deepfake technology developers
• Alleged deployer: Synthetic media creators, Storm-1679, Russian state-linked actors, Pro-Russian information manipulation actors, Operation Overload, Matryoshka, Information manipulation actors in Russia, Information manipulation actors, Influence operation groups, Deepfake creators
• Alleged harmed parties: Voters in the United States, Voters, Public figures, Politicians in the United States, Politicians, Political candidates targeted by deepfakes, Epistemic integrity, Democratic integrity, deepfaked celebrities, Celebrities

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Minor
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Minor, indirect Minor
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Minor
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: The report explicitly describes the creation and spread of malicious synthetic content designed to denigrate political candidates.

Directly caused: Kremlin-linked trolls created AI-generated deepfake videos of celebrities and fabricated news broadcasts to spread baseless claims against Democratic Senate candidates.

Indirectly caused: Social media platforms like X and BlueSky hosted and facilitated the spread of this synthetic content, with one post reaching nearly 200,000 views.

Inferred additional harm: It is highly likely that other unmonitored posts from this network reached hundreds of thousands of additional social media users before being detected or removed.

Democracy

Reported: The report explicitly describes attempts to undermine public confidence in democratic processes.

Directly caused: The Russian government authorized a digital influence campaign to seed and amplify domestic divisions around the election season and undermine public confidence in the midterm elections.

Indirectly caused: The campaign targeted specific swing-state Senate candidates with fabricated claims, seeking to inject chaos into the voting season.

Inferred additional harm: The cumulative effect of repeated foreign influence operations using advanced AI tools is highly likely to erode long-term public trust in democratic institutions and election integrity.

Epistemic

Reported: The report explicitly describes epistemic harm through the generation of highly deceptive false information.

Directly caused: The campaign used AI to generate fake videos of celebrities and fabricated news reports mimicking CNN, the BBC, and The New York Times to peddle baseless claims.

Indirectly caused: At least one deepfake post was viewed nearly 200,000 times on X, spreading false narratives to a wide audience.

Inferred additional harm: The proliferation of highly realistic deepfakes impersonating trusted news outlets and public figures contributes to a broader erosion of shared truth and public trust in information ecosystems.

People affected

• Occurrences reported: 1
• People reportedly harmed: 10
• People reportedly exposed: 200000

Potential causes

Management

• Inadequate Platform Safeguards: Social media management failed to proactively block known foreign troll networks.

Technology

• AI-Generated Video Synthesis: AI was used to create fake videos of celebrities talking about Senate races.
• Impersonation of News Outlets: AI-generated content mimicked prominent news organizations like CNN and BBC.

Data Inputs

• Exploitation of Celebrity Likeness: Using likeness of celebrities like actress [PERSON_007] to mislead users.
• Unsubstantiated Political Claims: Feeding false narratives of corruption and social issues into media pipelines.

Human Factors

• Electorate Vulnerability: Susceptibility of the public to highly engaging, divisive AI disinformation.
• Political Polarization: Domestic divisions around election season make users easily manipulated by AI.

Process and Methods

• Inadequate Platform Moderation: Social media platforms like X failed to rapidly remove AI-generated fakes.
• Impersonation Tactics: Using Operation Overload tactics to bypass standard content verification.

Regulatory Environment

• Lack of AI Disinformation Laws: Absence of strong legal deterrents against foreign state-sponsored AI campaigns.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear, corroborated details from U.S. intelligence officials and threat analysis firms like Graphika regarding the nature, source, and targets of the AI-facilitated disinformation campaign.
• Ambiguities identified: The specific AI models or software tools used by the Russian actors to generate the deepfakes are not identified.
• Alternative interpretations: None; the consensus among intelligence officials and independent researchers strongly points to a coordinated state-sponsored influence operation.

Kremlin-linked actors deployed generative AI to produce high-quality deepfakes of public figures and cloned news organizations, targeting US midterm elections to manipulate voters and sow political discord. This represents a substantial foreign information warfare threat to democratic processes.

• Overall national security impact: Substantial
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Russia

Threat characteristics

• Imminence: Near-term. The campaign was active and timed directly to influence upcoming midterm elections, presenting a developing threat within a 30-day window.
• Autonomy: Human-controlled. The AI systems were utilized as passive generation tools by human operators who directed the content creation and dissemination.
• Novelty: Evolved capability. Represents a significant advancement in the scaling and realism of foreign influence operations using generative AI compared to traditional text-based campaigns.

Impact by dimension

• Physical security: Negligible. The incident report explicitly notes no physical threat, kinetic attacks, or attempts to compromise physical election infrastructure or voting machinery.
• Information security: Substantial. A foreign state actor executed a coordinated information warfare campaign using sophisticated AI deepfakes of celebrities and cloned news outlets to influence voters.
• Sovereignty: Substantial. The operation targeted democratic processes and specific candidates in battleground states, seeking to manipulate electoral outcomes and undermine public trust in elections.
• Economic security: Negligible. No major economic disruptions, financial system attacks, or strategic intellectual property theft were reported in connection with this incident.
• Societal stability: Minor. The campaign aimed to inflame domestic political divisions and sow social chaos, though the immediate societal disruption remained limited.