FIMI & Cognitive Warfare Monitor — W/E 1 April 2026

Full structured intelligence data is available on the live dashboard and via the JSON data feed.

CRITICAL — Russia: Storm-1516 deploys Euronews impersonation against Hungary

Researchers at the Gnida project (an investigative collective tracking disinformation) have confirmed that Storm-1516 — the Russian disinformation campaign previously active in the 2024 US presidential election and Germany’s February 2025 elections — is running a coordinated impersonation campaign against Hungary’s April 12 parliamentary election. A fake Euronews-style website published a fabricated article claiming opposition leader Péter Magyar insulted Donald Trump, calling him a “senile grandpa.” Video versions spread across coordinated anonymous accounts on X with identical captions and timing. Storm-1516 is the third confirmed or assessed Russian operation simultaneously targeting the same election alongside the Social Design Agency (Confirmed) and the SVR Gamechanger plot (Assessed).

MF1 note: A pro-Orbán outlet (Hungarian Conservative) is running a systematic counter-narrative contesting the evidentiary basis of all three Russian interference stories. This meta-FIMI layer — discrediting attributors rather than the attributed operation — is consistent with documented Russian active measures doctrine and does not constitute exculpatory evidence.

Source: Euronews / Gnida Project, 24 March 2026

HIGH — Russia (Assessed): SVR ‘Gamechanger’ — fake assassination plot against Orbán

The Washington Post (21 March) reported that Russia’s SVR proposed staging a fake assassination attempt against Viktor Orbán to shift the election into what the plan called “the emotional realm” of security and stability — internally named “the Gamechanger.” The WaPo cites a single unnamed European intelligence document; there is no independent corroboration. Attribution: Assessed. MF3 caution applied. The story is consistent with SVR active measures doctrine, and the pro-Orbán counter-narrative dismissing it is itself a known FIMI pattern — but the evidence base remains a single unnamed source and must not be treated as Confirmed without corroboration.

Source: Washington Post, 21 March 2026

HIGH — Unattributed: AI-generated YouTube network accumulates 1.8 billion views

DFRLab (23 March 2026) documented a coordinated network of 26 YouTube channels deploying AI synthetic anchors, LLM-generated scripts, automated thumbnails, and synchronised posting schedules to farm nearly two billion views. The network blends factual geopolitical reporting with fabricated events — invented strikes on Mykolaiv and Rzeszów, fabricated diplomatic ruptures — presented with identical production quality. Channel names mimic real news outlets; no synthetic media disclosures are made. 23 of 26 channels remain active despite likely violating YouTube’s misinformation policies. Attribution: UNATTRIBUTED. Content aligns with Russian narratives but MF2 caution applies: coordination is confirmed, state attribution is not yet established at Tier 1/2 level.

Source: DFRLab, 23 March 2026

MODERATE — Framework: EEAS deploying Hybrid Rapid Response Team to Armenia

EEAS HRVP Kallas confirmed at the 2026 Counter-FIMI Conference (17 March) that a Hybrid Rapid Response Team will deploy to Armenia ahead of its June 2026 parliamentary elections, following a formal Armenian request. EEAS FIMI Report 4 identified Armenia as an expected primary target ahead of June elections. This is the first HRRT deployment to the South Caucasus and signals a doctrinal shift from post-election attribution to pre-election deterrence — the same model the EEAS used in Moldova in 2025.

Source: EEAS HRVP Kallas keynote, 17 March 2026

MODERATE — Commercial sector: NSO Group permanent injunction under appeal

The US permanent injunction barring NSO Group from targeting WhatsApp users with Pegasus (issued October 2025) is being appealed — NSO filed a stay application in November 2025, arguing the injunction could drive the company out of business. The appeal raises the question of whether the most significant legal constraint on commercial spyware operators to date will survive judicial review. Relevant to the broader commercial cognitive warfare sector: Black Cube and other operators will be watching the NSO case as a precedent test.

Source: Ars Technica / Clayton Rice K.C., October–November 2025

Cross-Monitor Signals

Democratic Integrity Monitor — Three simultaneous RU operations targeting Hungary’s April 12 election represent the highest documented pre-election FIMI density for a single EU election. Democracy monitor entries for Hungary should be read alongside RU-001, RU-004, and RU-005 in this monitor.

European Strategic Autonomy Monitor — Washington Post reporting on Hungarian FM Szijjártó allegedly leaking EU meeting content to Lavrov represents the intelligence-capture dimension of the Hungary state-capture picture tracked in EGHTM. If confirmed, this is FIMI infrastructure operating at the diplomatic level, not just social media.

AI Governance Monitor — DFRLab AI YouTube network (1.8B views) is the most significant empirical data point on AI-FIMI convergence since the EEAS 47% figure. YouTube’s failure to enforce against synthetic anchors presenting fabricated events as news is a platform governance failure with direct FIMI consequences.