Doppelgänger | Russia-Aligned Influence Operation Targets Germany
ID: fd42d300-b7f3-5772-802f-1ce676d49f03
STIX ID: report--fd42d300-b7f3-5772-802f-1ce676d49f03
SentinelLABS and ClearSky describe a sustained, likely Russia-aligned influence campaign dubbed “Doppelgänger” that targets German and other Western audiences with propaganda and disinformation ahead of key elections. The report details the network’s multi-stage redirection infrastructure (first-stage thumbnails, second-stage Base64-obfuscated JavaScript), tracking servers (ggspace.space, sdgqaef.site) including possible Keitaro usage, coordinated activity among many X accounts, and provides a curated set of IOCs (domains and suspected accounts) to aid detection and mitigation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
