Russian ‘Matryoshka’ Bot Farm Targets US Midterms With AI

Russian state-backed disinformation operators are deploying automated bot networks to artificially inflate view counts for fabricated videos targeting Democratic candidates and Hollywood celebrities ahead of the US midterm elections, Bloomberg News reported. The digital influence campaign – identified by social media researchers as “Matryoshka” or “Operation Overload” – relies on artificial intelligence to generate counterfeit news broadcasts and deepfakes designed to erode public trust in electoral integrity and undermine political support for Ukraine.JOIN US ON TELEGRAMFollow our coverage of the war on the @Kyivpost_official. A review by Bloomberg of 130 fabricated videos and doctored newspaper front pages circulated between Sept. 10 and Oct. 9 revealed a systematic campaign focused almost exclusively on Democratic contenders across the country. The findings were documented by the anonymous research group Antibot4Navalny and corroborated by US-based open-source intelligence firms Graphika and dTeam. AI-generated celebrity fakes The operation began circulating AI-manipulated video clips across social media platform X in early September. The media files featured synthetic likenesses of high-profile actors and musicians – including Robert De Niro, Julia Roberts, and Cher – falsely depicted as attacking Democratic politicians or encouraging viewers to join an online campaign labeled “#AllDemocratsAreCriminals.” Additional fabricated materials mimicked established American broadcast networks to distribute unsubstantiated allegations against prominent candidates. Other Topics of Interest Trump Envoys Push Russian Gas Transit in Ukraine Peace Talks US envoys Steve Witkoff and Jared Kushner have urged resuming Russian gas transit via Ukraine in peace talks, triggering German pushback. One video carrying a counterfeit ABC News digital banner claimed that James Talarico, the Democratic nominee contesting a US Senate seat in Texas, made payments to OnlyFans models. A spokesperson for Talarico firmly denied the assertion. Another video mimicking CBS News alleged that the Internal Revenue Service (IRS) uncovered eight undeclared real estate properties owned by Georgia Democratic Senator Jon Ossoff. No public records or official disclosures substantiate the claim. Researchers observed that Matryoshka-linked posts frequently accumulated hundreds of thousands of impressions on X within their first hour of publication. However, digital forensic data shared by Antibot4Navalny demonstrated that view counts were systematically manipulated by automated bot networks to project artificial virality. “The number of views for Matryoshka posts can jump as high as 200,000 within the first hour but then quickly plateau,” researchers observed, noting that organic engagement follows a steady growth curve rather than a sudden spike followed by an abrupt flatline. Forensic analysis established that the amplifying accounts had been dormant for years, possessed few followers, and generated virtually no genuine reposts or likes relative to recorded views. Strategic shift to down-ballot races and midterms The operational footprint of the campaign reflects a tactical evolution from previous Russian influence efforts. While past operations focused predominantly on high-stakes presidential contests, Matryoshka has broadened its parameters to target down-ballot congressional and gubernatorial races. According to Bloomberg’s analysis, the network disseminated targeted disinformation against Democratic candidates in 20 of the 35 US Senate races and 29 of the 36 gubernatorial contests scheduled for the Nov. 3 ballot. US intelligence agencies have warned Congress of the escalating deployment of synthetic media by foreign adversaries. A recent assessment by the Office of the Director of National Intelligence (ODNI) identified Russia as the primary foreign actor deploying artificial intelligence to degrade public confidence in American democratic institutions ahead of the midterm vote. Antibot4Navalny, which has monitored Kremlin-aligned digital networks since 2018, initially identified the Matryoshka apparatus in September 2023 as it attempted to undermine Western military assistance for Ukraine. The operation was named after traditional Russian nesting dolls due to its operational pattern: accounts distributing one fabricated narrative frequently pivot to distributing fresh fabrications on successive days. French government monitoring agency Viginum confirmed in early 2024 that initial seeds of Matryoshka content were routed through Russian-language channels on Telegram before migrating to Western social networks. “It’s evolving with the technology and is more sophisticated as a result,” said Darren Linvill, professor at Clemson University and co-director of its Media Forensics Hub. “They’re actively trying to fish for more engagement.” Disinformation backbones and physical infrastructure hits The exposure of the Matryoshka campaign coincides with growing scrutiny of the physical and digital infrastructure that underwrites Russian computational influence operations. Between Oct. 8 and Oct. 11, Ukrainian precision drone strikes disabled three major data centers owned by Russian technology giant Yandex in the Vladimir, Kaluga, and Ryazan regions. The kinetic disruptions caused widespread server outages across Russian enterprise networks and triggered a sharp reduction in automated web requests originating from Russian server clusters. According to network intelligence provider Cloudflare Radar, automated bot traffic from Yandex’s sovereign network plunged immediately following the facility strikes. The computational downtime was followed by reports from digital monitors across Europe describing a marked decline in automated polarization. Polish open-source defense analyst Jarosław Wolski observed a noticeable contraction in coordinated online attacks pitting Polish citizens against Ukrainian refugees, alongside a temporary drop in bot-driven engagement boosting fringe political parties in Germany. President Volodymyr Zelensky referenced the operational ripple effects on Oct. 12, noting that precision interdiction against Russian digital nodes resulted in “less hatred, less discord, and fewer provocations because there were fewer bots.” Western security agencies maintain that Moscow’s influence operations increasingly blur the boundary between cognitive warfare and algorithmic manipulation. Previous legal actions by the US Department of Justice disrupted 968 AI-powered bot profiles operated under the direction of state broadcaster RT and the Russian Federal Security Service (FSB), alongside the “Doppelganger” network of cloned media domains, underscoring allied efforts to dismantle coordinated influence operations ahead of the November vote. Kyiv Post is Ukraine’s first and oldest English news organization, reporting since 1995. Its international reach – 90% of readers are outside of Ukraine – make it truly Ukraine’s global voice.