An unknown pro-Russia influence group spent time recruiting unwitting Hollywood actors to assist in smear campaigns against Ukraine and its president Volodymyr Zelensky.

Exploiting platforms like Cameo, which allows people to pay public figures for personalized videos, usually for events like birthdays, this influence operation compensated US celebrities to record videos for a "Vladimir," supporting his fight against substance addiction.

The videos are then edited to include emojis, links, and overlays to make it seem like they came from the actor's Instagram page, and shared on Russian social media networks to promote the country's long-running claim that Ukraine's leader suffers from addiction.

[1]

The activity exploiting actors via Cameo began in July and has so far seen stars such as Elijah Wood, Kate Flannery, Mike Tyson, Dean Norris, Priscilla Presley, John McGinley, and musician Shavo Odadjian roped into the fraudulent scheme, Microsoft [2]said .

[3]

[4]

As well as sharing [5]the videos on social media, Russian state-owned media outlet RIA Novosti published a [6]story in August following the circulation of McGinley's message, again referencing "Vladimir's" drug addiction.

It also made explicit note of Meta's social media platforms, such as Instagram, being banned for "extremism."

[7]

In none of the videos were celebrities seemingly aware that the purported recipient was Zelensky, rather, they seemed to believe he was a regular citizen of the same first name. However, with Ukrainian flags and Zelensky's Instagram account appearing to be tagged in the post, achieved through video editing, the videos were made to appear as if they were addressing the president directly.

Two other ongoing video-based campaigns also further promote Zelensky's fictitious substance addiction by spoofing mainstream media's reporting.

Such propaganda has been rife throughout Russia since the conflict broke out in early 2022, and even [8]before too, but the activity accelerated throughout the summer of 2023, according to Microsoft.

[9]

The activity was first spotted in April 2022 with a spoofed BBC News report claiming that a Ukraine missile strike killed many civilians. Over the summer of 2023, more than a dozen spoofed videos were circulating on Telegram, and then mainstream media, copying the branding of outlets such as BBC News, Al Jazeera, and EuroNews.

[10]Five Eyes nations warn Moscow's mates at the Star Blizzard gang have new phishing targets

[11]Belgian man charged with smuggling sanctioned military tech to Russia and China

[12]Fancy Bear goes phishing in US, European high-value networks

[13]UK government denies China/Russia nuke plant hack claim

It's been [14]previously reported that Russians are using bot farms located in Ukraine and operated by Russian insiders to disseminate fake news and propaganda at scale.

Back in July, Ukrainian police seized an assortment of equipment powering the propaganda machines, including around 150,000 SIM cards, mobile phones, and [15]GSM gateways .

Campaigns have targeted both Russian nationals [16]and Ukrainians , attempting to sow doubt over the country's true role in the conflict and demoralize its troops.

Russia isn't alone in the digital propaganda war. Ukraine has launched [17]its own campaigns , and even allied nations like the [18]US and UK have [19]pedigree in the area.

Microsoft said it expects these kinds of influence operations to intensify as the conflict continues, and as we head into the winter months, [20]attacks on critical infrastructure such as power plants are also likely to ramp up, as will Ukraine's reliance on its energy grid. ®

Get our [21]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZXSdPLQvEtNZ7GcdZQQ6VQAAAAs&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://blogs.microsoft.com/on-the-issues/2023/12/07/russia-ukraine-digital-threat-celebrity-cameo-mtac/

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZXSdPLQvEtNZ7GcdZQQ6VQAAAAs&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZXSdPLQvEtNZ7GcdZQQ6VQAAAAs&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.youtube.com/shorts/wd33CPFDYbI

[6] https://ria.ru/20230817/zelenskiy-1890522044.html

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZXSdPLQvEtNZ7GcdZQQ6VQAAAAs&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[8] https://www.theregister.com/2022/05/19/iran_china_disinformation_online/

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZXSdPLQvEtNZ7GcdZQQ6VQAAAAs&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[10] https://www.theregister.com/2023/12/08/five_eyes_star_blizzard_warning/

[11] https://www.theregister.com/2023/12/07/belgian_russia_china_hardware/

[12] https://www.theregister.com/2023/12/06/fancy_bear_phishing_microsoft/

[13] https://www.theregister.com/2023/12/05/uk_government_denies_sellafield_hack_claim/

[14] https://www.theregister.com/2023/07/20/ukraine_busts_russian_bot_farm/

[15] https://www.theregister.com/2023/11/29/uk_sim_farm_ban/

[16] https://www.theregister.com/2022/10/22/ukraine_cybersecurity_chief_mwise/

[17] https://www.theregister.com/2023/02/23/russia_fake_missile_alerts/

[18] https://www.theregister.com/2022/08/25/twitter_meta_troll_accounts/

[19] https://www.cbsnews.com/news/us-propaganda-push-in-iraq/

[20] https://www.theregister.com/2023/11/09/russias_sandworm_power_plant_attack/

[21] https://whitepapers.theregister.com/