logo

CopyCop Deepens Its Playbook with New Websites and Targets

ID: e0ddf948-b71f-532b-842f-8a75cfbe3550

STIX ID: report--e0ddf948-b71f-532b-842f-8a75cfbe3550

Feed Name: Recorded Future Blog

Threat Score
80/100

Date Published: 2025-09-18

Date Updated: 2026-04-28

...
...

Since March 2025, Insikt Group documents that CopyCop (Storm-1516), attributed to John Mark Dougan with backing from the Moscow-based CGE and GRU, has rapidly expanded to operate over 300 inauthentic websites and regional fake fact‑checking sites to distribute AI‑generated, pro‑Russian and anti‑Ukraine influence content—leveraging self‑hosted Llama‑3 uncensored models, deepfakes, mirrored subdomains, and social media amplifiers to target audiences in the US, France, Germany, Canada, Armenia, Moldova, and other countries.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.