FIMI & Cognitive Warfare Monitor — 8 November 2026
Russia-aligned Storm-1516 expanded AI deepfake smear campaign to three Democratic Senate candidates ahead of certification
Lead Signal
Russia-aligned Storm-1516 this week expanded its artificial intelligence deepfake operation beyond a single United States Senate candidate. The network originally targeted Texas Senate candidate James Talarico, an association researchers continue to treat as assessed rather than confirmed. Forensic researchers subsequently found that the operation expanded its target list to include Ohio Senate candidate Sherrod Brown and Maine Senate candidate Troy Jackson, again on the basis of dissemination-pattern and content-characteristic analysis rather than platform or government confirmation. The shift from paid-actor video to altering genuine local television news footage is assessed as consistent with documented Storm-1516 tactics, a technical escalation toward higher-credibility forgery. James Talarico, Sherrod Brown, and Troy Jackson each won their respective races.
Separately, a classified assessment referenced by Senators Mark Warner and Jim Himes is reported to find that Russia used artificial intelligence to discredit Senate candidates, with no accompanying evidence of election infrastructure hacking identified in that reporting, a claim rendered here as a reported assertion rather than a confirmed government attribution. One Storm-1516 video is reported to have passed more than 850,000 views within a single day, though this figure is recorded at uncertain confidence and does not capture total cross-account amplification.
The information integrity composite for the cycle stands at 0.42, a figure recorded at uncertain confidence against a backdrop of persistent platform opacity and regulatory lag. The sections below set out additional campaign, actor, and policy movements across the monitor coverage area.
Other Developments
The items below are drawn from across the monitor module coverage, prioritised for assessed confidence and documented actor posture change.
Doppelganger network expands to three simultaneous electoral theatres. Independent researchers identified a wave of the Doppelganger operation, attributed on the basis of infrastructure analysis to Russian-linked entities, as having targeted the United States midterms, the Israeli election, and the French 2027 presidential race at the same time, a parallel multi-theatre pattern distinguished from earlier sequential single-country operations. Accounts linked to the same network are reported to have amplified cost-of-living grievances tied to Ukraine aid ahead of protests in France, an assessed association carried with the same methodological caution.
Manufacturing the Great Replacement report ties large anti-Muslim campaign to Israel-linked entities. A three-year academic investigation published by Marc Owen Jones and Sohan Dsouza estimated that an anti-Muslim and anti-immigrant influence campaign spent approximately 8,200,000 United States dollars across more than thirty countries. The investigation explicitly states that government-level attribution to Israel remains unconfirmed despite entity-level forensic linkage, a distinction flagged here for attribution over-reach caution.
Taiwan government escalates warnings ahead of November local elections. Taiwan President Lai Ching-te issued a formal warning against Chinese interference ahead of local elections scheduled for November 28. Taiwan authorities separately reported that more than 2.5 million pieces of disputed or false information targeting the island circulated over nine months, a figure treated with caution given the attribution source has a direct adversarial stake in the finding.
Platform opacity persists alongside new technical and policy signals. X/Twitter continues to lack a mechanism equivalent to coordinated inauthentic behavior disclosure, leaving attribution for campaigns hosted substantially on the platform to independent researchers rather than platform transparency reporting. Microsoft separately disclosed that a financially motivated group it tracks as Storm-3358 used an agentic artificial intelligence framework named ARTEX, a capability signal adjacent to but distinct from state-aligned influence tooling. In Ukraine, the Center for Countering Disinformation debunked a fabricated Iranian state broadcaster graphic that falsely depicted missile strikes on Kyiv, Lviv, and Odesa and had circulated on November 4. Nigeria election officials announced new safeguards against foreign information manipulation and interference and deepfakes ahead of the 2027 general elections.
Cross-Monitor Connections
Findings from this cycle connect to several sibling monitors. For democratic-integrity, both the Storm-1516 Senate deepfake wave and the Taiwan interference warnings bear directly on electoral integrity tracking, with the candidate outcome and formal warning findings already detailed above. For european-strategic-autonomy, the Doppelganger targeting of the French 2027 presidential race is the relevant hybrid threat signal. For conflict-escalation, the fabricated Iranian state broadcaster strike map artifact debunked in Ukraine sits within the broader conflict theatre information environment. For ai-governance, the shift to AI-altered genuine broadcast footage in the Storm-1516 case and the agentic artificial intelligence framework disclosed in the Storm-3358 case both register as AI capability signals relevant to tool governance tracking. No signal within the current cycle registers against macro-monitor or environmental-risks, reflecting the narrower thematic span of this cycle material.
Outlook
Several evidentiary gaps will shape what can be assessed next cycle. Government-level attribution for the Manufacturing the Great Replacement campaign remains unconfirmed, and a direct governmental statement or platform-level ad account ownership disclosure would be required to move the spend and country count findings from uncertain toward probable confidence. The Taiwan disinformation volume figures rest on a single government-adjacent source, and independent content auditing would be needed to strengthen confidence in that count.
No new European Union Digital Services Act Article 40 enforcement action was identified this cycle despite active France-linked campaign threads, and the structural gap in United States federal counter-disinformation capacity, tied to the continuing closure of the Global Engagement Center successor office, persists as a standing backdrop rather than a resolved condition. No attributable Gulf-state FIMI finding surfaced this cycle, a continuation of the standing open-source coverage gap for that actor category. The X/Twitter disclosure gap and the pace of platform transparency reporting relative to continued campaign activity remain the principal indicators to watch heading into next cycle.