Matryoshka Campaign Allegedly Uses Deepfakes to Impersonate Academics for Pro-Russian Propaganda

The Matryoshka disinformation campaign allegedly used AI to impersonate academics, reportedly spreading claims supporting Russia and urging Ukraine's surrender. These videos are said to have misrepresented scholars’ views in order to amplify pro-Russian propaganda. The campaign reportedly exploited global social media platforms to allegedly mislead viewers and undermine trust in credible academic voices while fueling misinformation about the Ukraine conflict.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.1 Disinformation, surveillance, and influence at scale

The Matryoshka campaign is a coordinated Russian influence operation using AI voice-cloning to spread political disinformation at scale across social networks like X and Bluesky.

Additional risk subdomains

• 3.1 False or misleading information: The campaign generated and spread fabricated claims and false narratives using cloned voices of trusted academics.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident is driven by human actors intentionally using AI voice cloning tools post-deployment to generate and spread disinformation.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3: Limited Risk. The report describes the use of AI-generated content such as deepfakes ('The video is a deepfake whose audio has been manipulated' and 'cloning the voices of real professors using artificial intelligence (AI) tools'), which falls under transparency obligations for AI-generated content under the Act.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Voice Generation; Social Media Content Generation
• Behaviour type: Tool
• Alleged developer: Unknown deepfake technology developers
• Alleged deployer: Storm-1679, Russian entities linked to GRU, Reliable Russian News, Operation Overload, Matryoshka
• Alleged harmed parties: Ronald Hutton, Academics targeted by Storm-1679, Academics targeted by Operation Overload, Academics targeted by Matryoshka

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Minor
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Minor, indirect Minor
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Substantial
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: The report explicitly describes the creation and spread of malicious disinformation videos using cloned voices.

Directly caused: The campaign generated dozens of deepfake videos impersonating academics to spread pro-Russian propaganda and anti-Ukraine narratives.

Indirectly caused: The videos were amplified by hundreds of bot accounts across X and Bluesky, reaching thousands of social media users.

Inferred additional harm: It is likely that thousands of additional automated posts and deepfake videos were generated and distributed across other platforms like Telegram, exposing millions of users to malicious propaganda.

Democracy

Reported: The report explicitly describes an influence operation aimed at manipulating public opinion regarding Western support for Ukraine.

Directly caused: The Matryoshka campaign used AI-generated deepfakes to influence public debate and undermine democratic consensus on international sanctions and military aid.

Indirectly caused: The campaign sought to erode trust in democratic institutions, media, and academic authorities by fabricating their stances on geopolitical issues.

Inferred additional harm: Such coordinated foreign influence operations likely contribute to the long-term polarization of democratic societies and the erosion of public trust in democratic processes.

Epistemic

Reported: The report explicitly describes epistemic harm through the fabrication of statements and the cloning of academic voices to spread false narratives.

Directly caused: The campaign fabricated statements from prominent historians and professors, falsely claiming they supported lifting sanctions on Russia or criticized Ukraine.

Indirectly caused: The use of credible academic identities and university logos lent a false appearance of authority to pro-Russian propaganda, misleading social media users.

Inferred additional harm: The widespread deployment of highly realistic voice clones of trusted experts threatens to degrade the shared information ecosystem, making it harder for the public to distinguish real statements from fabricated ones.

People affected

• Occurrences reported: 1
• People reportedly harmed: 9
• People reportedly exposed: 26000000

Potential causes

Management

• No Proactive Defenses: Management failed to deploy proactive automated detection tools.
• Growth Over Security: Platform prioritized user migration over scaling security systems.

Technology

• AI Voice Cloning: Cloned real academics' voices to make fake statements sound authentic.
• Industrialized Deepfakes: Automated production scaled up the generation of fake voiceovers.

Data Inputs

• Hijacked Real Videos: Original university videos were harvested to anchor fake audio.

Human Factors

• Trust in Authority: Users trusted videos due to prestigious university associations.
• Stolen User Accounts: Compromised profiles were used to spread and amplify deepfakes.

Process and Methods

• Reactive Moderation: Platforms relied on user reports rather than proactive detection.
• Coordinated Bot Networks: Bots systematically reposted deepfakes to manipulate algorithms.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide consistent, detailed accounts of the Matryoshka campaign across multiple sources (AFP, The Insider, Bot Blocker). The mechanism of the AI harm (voice cloning of specific academics to spread pro-Russian propaganda) is clearly documented and verified by independent institutions like the University of Bristol.
• Ambiguities identified: The specific AI voice-cloning software or platforms used by the campaign creators are not identified.
• Alternative interpretations: None. The evidence clearly points to a coordinated state-aligned disinformation campaign using synthetic media.

The Matryoshka campaign represents a coordinated Russian state-aligned disinformation operation that leverages AI voice cloning to impersonate trusted Western academics. By fabricating statements to undermine support for Ukraine, the campaign demonstrates an evolved, industrialized capability in state-sponsored information warfare, though its direct impact on core government operations remains limited.

• Overall national security impact: Substantial
• Scope: Multiple nations
• Primary target: Western nations
• Other affected: Ukraine
• Alleged perpetrator: Russian state-aligned entities

Threat characteristics

• Imminence: Long-term. Represents an ongoing strategic capability and influence threat rather than an immediate kinetic or systemic crisis requiring a 72-hour response.
• Autonomy: Human-controlled. AI systems were used purely as tools to generate cloned audio, with humans controlling the creation, targeting, and deployment of the videos.
• Novelty: Evolved capability. Represents a significant advancement in existing disinformation tactics by industrializing the use of high-quality AI voice cloning of trusted academic figures.

Impact by dimension

• Physical security: Negligible. The incident is purely a digital disinformation campaign with no physical or critical infrastructure impacts.
• Information security: Substantial. State-aligned Russian entities launched a coordinated information warfare operation using sophisticated AI voice clones of trusted academics to spread anti-Ukraine propaganda and influence Western public opinion.
• Sovereignty: Minor. While aiming to influence Western foreign policy and support for Ukraine, the campaign did not directly compromise government systems, border controls, or electoral infrastructure.
• Economic security: Negligible. The incident did not target financial systems, critical supply chains, or strategic technologies.
• Societal stability: Minor. The campaign attempts to erode public trust in academic and democratic institutions, but has not led to mass civil unrest or systemic human rights violations.