joe bodnar
@joeabodnar.bsky.social
I track state-backed info ops at @isdglobal.bsky.social. Cited by the Economist, AP, CNN, Washington Post, and others. Opinions mine and open to change
Operation Overload runs the same play over and over. It's lazy clockwork.
Here's a claim from a few days ago next to a claim from last year. They look a lot alike.
Here's a claim from a few days ago next to a claim from last year. They look a lot alike.
February 6, 2026 at 5:49 PM
Operation Overload runs the same play over and over. It's lazy clockwork.
Here's a claim from a few days ago next to a claim from last year. They look a lot alike.
Here's a claim from a few days ago next to a claim from last year. They look a lot alike.
Finally, we have a definitive answer to the question of whether AI, bots, and laundering tactics will improve China’s information operations.
The answer is no.
The answer is no.
January 26, 2026 at 2:53 PM
Finally, we have a definitive answer to the question of whether AI, bots, and laundering tactics will improve China’s information operations.
The answer is no.
The answer is no.
Reposted by joe bodnar
Among the many reasons you don’t kidnap a foreign head of state at gunpoint even if you have the capability, is that it sparks consequences you can neither control nor anticipate.
January 3, 2026 at 10:27 AM
Among the many reasons you don’t kidnap a foreign head of state at gunpoint even if you have the capability, is that it sparks consequences you can neither control nor anticipate.
Reposted by joe bodnar
The US TikTok sale has been signed. The company will be controlled by a joint venture including Oracle, Silver Lake, Andreessen Horowitz, Abu Dhabi-based MGX. Adding a UAE company really makes it clear that this was never about national security concerns.
www.axios.com/2025/12/18/t...
www.axios.com/2025/12/18/t...
Scoop: TikTok signs deal for sale of U.S. unit after yearslong saga
The deal would end a yearslong saga to force TikTok's Chinese parent ByteDance to sell the company's U.S. operation.
www.axios.com
December 18, 2025 at 11:35 PM
The US TikTok sale has been signed. The company will be controlled by a joint venture including Oracle, Silver Lake, Andreessen Horowitz, Abu Dhabi-based MGX. Adding a UAE company really makes it clear that this was never about national security concerns.
www.axios.com/2025/12/18/t...
www.axios.com/2025/12/18/t...
Graphika recently reported on a pro-CCP network attacking Missouri AG Catherine Hanaway. Finding the network wasn't hard. It's using the hashtag FuckHanaway.
Here's what else it's talking about. I should stress, though, that no one is listening. The engagement is tragically low.
Here's what else it's talking about. I should stress, though, that no one is listening. The engagement is tragically low.
December 19, 2025 at 1:57 PM
Graphika recently reported on a pro-CCP network attacking Missouri AG Catherine Hanaway. Finding the network wasn't hard. It's using the hashtag FuckHanaway.
Here's what else it's talking about. I should stress, though, that no one is listening. The engagement is tragically low.
Here's what else it's talking about. I should stress, though, that no one is listening. The engagement is tragically low.
Big spike in articles published by the Pravda Network site focused on Australia.
More than 400% increase from Dec 13 to Dec 14.
More than 400% increase from Dec 13 to Dec 14.
December 15, 2025 at 5:58 PM
Big spike in articles published by the Pravda Network site focused on Australia.
More than 400% increase from Dec 13 to Dec 14.
More than 400% increase from Dec 13 to Dec 14.
I believe this is Iran's Storm-2035 making a push against the Trump administration's actions against Venezuela by using the hashtag ElMundoRepudiaATrump on X.
Several of these accounts are confirmed 2035.
Several of these accounts are confirmed 2035.
December 12, 2025 at 8:08 PM
I believe this is Iran's Storm-2035 making a push against the Trump administration's actions against Venezuela by using the hashtag ElMundoRepudiaATrump on X.
Several of these accounts are confirmed 2035.
Several of these accounts are confirmed 2035.
Meta's Threat Report essentially declared the end of Iran's Endless Mayfly operation, at least on Meta platforms.
That's not entirely the case. There's a few Insta stragglers tied to IUVM and at least a dozen Insta accounts posting identical hashtags and content to X accounts flagged by OpenAI.
That's not entirely the case. There's a few Insta stragglers tied to IUVM and at least a dozen Insta accounts posting identical hashtags and content to X accounts flagged by OpenAI.
December 12, 2025 at 6:10 PM
Meta's Threat Report essentially declared the end of Iran's Endless Mayfly operation, at least on Meta platforms.
That's not entirely the case. There's a few Insta stragglers tied to IUVM and at least a dozen Insta accounts posting identical hashtags and content to X accounts flagged by OpenAI.
That's not entirely the case. There's a few Insta stragglers tied to IUVM and at least a dozen Insta accounts posting identical hashtags and content to X accounts flagged by OpenAI.
The Ministry of State Security is just like us! Reminds me of one hacktivist Telegram channel that periodically shares screenshots of their TryHackMe progress.
The names of two partial owners of contractor firms linked to China's Salt Typhoon hacker group also appeared in records for Cisco's "Networking Academy" global training program—years before those hackers targeted Cisco's devices in their sweeping spy campaign. www.wired.com/story/2-men-...
2 Men Linked to China’s Salt Typhoon Hacker Group Likely Trained in a Cisco ‘Academy’
The names of two partial owners of firms linked to the Salt Typhoon hacker group also appeared in records for a Cisco training program—years before the group targeted Cisco’s devices in a spy campaign...
www.wired.com
December 10, 2025 at 7:35 PM
The Ministry of State Security is just like us! Reminds me of one hacktivist Telegram channel that periodically shares screenshots of their TryHackMe progress.
In my work, the biggest story of 2025 has been Russian IOs pivoting away from the US.
I don't have comprehensive data on all covert ops. But if we use 1516 as an example, the US was its top target in 2024 and not even a top 5 target in 2025. Anecdotally, that roughly holds for all other ops, too.
I don't have comprehensive data on all covert ops. But if we use 1516 as an example, the US was its top target in 2024 and not even a top 5 target in 2025. Anecdotally, that roughly holds for all other ops, too.
December 10, 2025 at 3:37 PM
In my work, the biggest story of 2025 has been Russian IOs pivoting away from the US.
I don't have comprehensive data on all covert ops. But if we use 1516 as an example, the US was its top target in 2024 and not even a top 5 target in 2025. Anecdotally, that roughly holds for all other ops, too.
I don't have comprehensive data on all covert ops. But if we use 1516 as an example, the US was its top target in 2024 and not even a top 5 target in 2025. Anecdotally, that roughly holds for all other ops, too.
Great news but also, how were these entities not already sanctioned?
apnews.com/article/uk-s...
apnews.com/article/uk-s...
UK sanctions Russian and Chinese firms suspected of being 'malign actors' in information warfare
Britain has announced sanctions against several Russian media and ideas organizations. Foreign Secretary Yvette Cooper said the measures will target the Telegram channel Rybar and the Center for Geopo...
apnews.com
December 10, 2025 at 1:53 PM
Great news but also, how were these entities not already sanctioned?
apnews.com/article/uk-s...
apnews.com/article/uk-s...
Reposted by joe bodnar
Wow -- Russia reportedly plotted last year to plant bombs on US-bound flights (gift link) giftarticle.ft.com/giftarticle/...
December 9, 2025 at 7:33 PM
Wow -- Russia reportedly plotted last year to plant bombs on US-bound flights (gift link) giftarticle.ft.com/giftarticle/...
Reposted by joe bodnar
Article d’un journaliste du Figaro dont l’identité a été usurpée dans le cadre de la dernière opération informationnelle de Storm-1516.
www.lefigaro.fr/internationa...
www.lefigaro.fr/internationa...
Comment les pro-russes ont usurpé mon identité de journaliste au Figaro pour diffuser une fausse information sur Emmanuel Macron
RÉCIT - Un article mensonger affirmant que le président de la République a «un QI de 89» est signé de mon nom sur un faux site d’actualités. Je ne l’ai pourtant jamais écrit.
www.lefigaro.fr
December 5, 2025 at 4:55 PM
Article d’un journaliste du Figaro dont l’identité a été usurpée dans le cadre de la dernière opération informationnelle de Storm-1516.
www.lefigaro.fr/internationa...
www.lefigaro.fr/internationa...
It strikes me that people make fun of American politicians or influencers who post AI nonsense. But when Russia, China or Iran does the same thing, people act like they're sophisticated threat actors capable of shaping global opinion at will.
December 2, 2025 at 5:46 PM
It strikes me that people make fun of American politicians or influencers who post AI nonsense. But when Russia, China or Iran does the same thing, people act like they're sophisticated threat actors capable of shaping global opinion at will.
I’m off this week, but I hear the MAGA influencer accounts on X that have been amplifying Russian IOs aren’t based in the US.
And I’m shocked.
And I’m shocked.
November 24, 2025 at 10:12 AM
I’m off this week, but I hear the MAGA influencer accounts on X that have been amplifying Russian IOs aren’t based in the US.
And I’m shocked.
And I’m shocked.
It's still so cool when outlets I read every day cover research I contributed to.
You can read more about ISD's findings here: www.isdglobal.org/digital_disp...
You can read more about ISD's findings here: www.isdglobal.org/digital_disp...
November 21, 2025 at 2:57 PM
It's still so cool when outlets I read every day cover research I contributed to.
You can read more about ISD's findings here: www.isdglobal.org/digital_disp...
You can read more about ISD's findings here: www.isdglobal.org/digital_disp...
Reposted by joe bodnar
Cryptocurrency backed by Farage donor is used for Russian war effort, investigators say www.theguardian.com/politics/202...
Cryptocurrency backed by Farage donor is used for Russian war effort, investigators say
Tether tokens found to facilitate scheme that enables sanctions evasion and launders money for the Kremlin
www.theguardian.com
November 21, 2025 at 6:23 AM
Cryptocurrency backed by Farage donor is used for Russian war effort, investigators say www.theguardian.com/politics/202...
There's been a lot of talk about how the Pravda network impacts LLMs. But real people are finding, reading, and citing it.
Our latest piece shows that Pravda network links have appeared in reporting from reputable outlets and in commentary from high-traffic sites. www.isdglobal.org/digital_disp...
Our latest piece shows that Pravda network links have appeared in reporting from reputable outlets and in commentary from high-traffic sites. www.isdglobal.org/digital_disp...
Link by link: Hundreds of webpages cite pro-Russia Pravda network
ISD has built a free browser extension to help individuals recognise Pravda network sites, which hundreds of media outlets still treat as credible.
www.isdglobal.org
November 18, 2025 at 3:41 PM
There's been a lot of talk about how the Pravda network impacts LLMs. But real people are finding, reading, and citing it.
Our latest piece shows that Pravda network links have appeared in reporting from reputable outlets and in commentary from high-traffic sites. www.isdglobal.org/digital_disp...
Our latest piece shows that Pravda network links have appeared in reporting from reputable outlets and in commentary from high-traffic sites. www.isdglobal.org/digital_disp...
So, we're doing AI summaries and chatbots in the middle of articles about US war plans?
Journalism alive and well?
Journalism alive and well?
November 14, 2025 at 9:43 PM
So, we're doing AI summaries and chatbots in the middle of articles about US war plans?
Journalism alive and well?
Journalism alive and well?
Pro-Kremlin crowd seems pretty upset with Trump today
November 12, 2025 at 6:28 PM
Pro-Kremlin crowd seems pretty upset with Trump today
Storm-1516 and Operation Overload had things to say about Angelina Jolie's trip to Ukraine.
Also, here's another example of a 1516 influencer copying and pasting a DM link into their post. Seem these influencers are getting instructions sent straight to their DMs.
Also, here's another example of a 1516 influencer copying and pasting a DM link into their post. Seem these influencers are getting instructions sent straight to their DMs.
November 12, 2025 at 3:15 PM
Storm-1516 and Operation Overload had things to say about Angelina Jolie's trip to Ukraine.
Also, here's another example of a 1516 influencer copying and pasting a DM link into their post. Seem these influencers are getting instructions sent straight to their DMs.
Also, here's another example of a 1516 influencer copying and pasting a DM link into their post. Seem these influencers are getting instructions sent straight to their DMs.
This high-end 1516 film took only 2 months to produce.
The latest Storm-1516 disinformation campaign is targeting Ukraine with another effigy video, this time the campaign's video depicts the alleged "Ukrainian" soldiers, who are threatening Charlie Kirk's widow Erika Kirk
November 6, 2025 at 6:37 PM
This high-end 1516 film took only 2 months to produce.
Reposted by joe bodnar
ISD research featured in WIRED finds ChatGPT, Gemini, DeepSeek & Grok citing Russian state propaganda when asked about the war in Ukraine: “It’s not only an issue of removal, it’s an issue of contextualising further [...] especially if these sources are appearing amongst trusted, verified sources.”
November 3, 2025 at 3:31 PM
ISD research featured in WIRED finds ChatGPT, Gemini, DeepSeek & Grok citing Russian state propaganda when asked about the war in Ukraine: “It’s not only an issue of removal, it’s an issue of contextualising further [...] especially if these sources are appearing amongst trusted, verified sources.”
Reposted by joe bodnar
New substack: Al-Generated US Congressman Fuels False Claims of Somaliland Recognition
A number of fake accounts and suspicious news outlets including MiddleEast 24 are pushing the narrative that recognition of Somaliland is inevitable in November
open.substack.com/pub/marcowen...
A number of fake accounts and suspicious news outlets including MiddleEast 24 are pushing the narrative that recognition of Somaliland is inevitable in November
open.substack.com/pub/marcowen...
AI-Generated US Congressman Fuels False Claims of Somaliland Recognition
A number of fake accounts and suspicious news outlets including MiddleEast 24 are pushing the narrative that recognition of Somaliland is inevitable in November
open.substack.com
October 27, 2025 at 9:42 AM
New substack: Al-Generated US Congressman Fuels False Claims of Somaliland Recognition
A number of fake accounts and suspicious news outlets including MiddleEast 24 are pushing the narrative that recognition of Somaliland is inevitable in November
open.substack.com/pub/marcowen...
A number of fake accounts and suspicious news outlets including MiddleEast 24 are pushing the narrative that recognition of Somaliland is inevitable in November
open.substack.com/pub/marcowen...