❌

Normal view

A Russian disinformation campaign cloned Euromaidan Press to blame Ukraine for Russia’s own strike on Kramatorsk (we took the fake down)

29 October 2026 at 00:02

A screenshot of the fake Euromaidan-press website that is supposedly part of the Russian disinformation Storm 1516 operation. Collage by Euromaidan Press

Euromaidan Press has been impersonated as part of a Russian disinformation campaign. A copycat website was created, with a hyphen added to our name, which published a fabricated article alleging a Ukrainian drone had killed civilians in Kramatorsk that cites anonymous "Ukrainian OSINT channels" amid copies of our real news reports. In reality, that 8 October strike was a Russian aerial bombing of two public buses that killed 33 civilians.

The fabrication is part of a years-long Russian disinformation campaign to impersonate and clone trusted news brands, predominantly in Europe, and publish false reports under their names. The disinformation research project Gnida tied our case to Storm-1516, one of several overlapping Russian operations, alongside the older Doppelganger, and NewsGuard, which reached out to us while preparing its own debunk, attributes the fake to the same operation. The fabricated Kramatorsk report comes amid an ongoing effort to erode Western support for Ukraine, as Russia's war goes on, and to sow distrust among Western political elites.

The claim and the actual 8 October attack

The fake started circulating on 24 October, one day after the forged publication appeared on our website. It started making rounds on X together with a forged video with a version of our logo claiming that "newly obtained footage" featured the remains of a Liutyi drone that "independent OSINT channels" claimed were "quickly removed from the scene." No specific OSINT channels were named; no sources were linked.

The forged video, apparently produced with AI, and the link were spread by X accounts such as @vick55top, @indiaTales7, @TheWorld_Update, @Wonder_star21, @Theunk5555, @SilentBriefHQ1, and @Suriyakmaps, where it was subsequently removed. The videos on those accounts averaged 400,000 to 500,000 views, far more than the accounts' modest follower counts and their usual engagement would produce, a likely sign of inauthentic amplification.

On 25 October, the Russian disinformation monitor Gnida Project flagged this as a case of the Storm-1516 disinformation campaign. Other recent cases flagged by Gnida included advertisements of Russian Geran drones, claims of the Shamonda virus being leaked from a "Ukrainian biolab," smears against US Democratic candidates, and a fake on a similar copycat "toronto-sun.ca" website alleging that President Zelenskyy purchased a nuclear bunker in Nova Scotia.

The latest Storm-1516 disinformation campaign is targeting Ukraine. The campaign promotes a false narrative that a deadly strike in the Ukrainian city Kramatorsk was performed by a Ukrainian drone based on a fake "Ukrainian OSINT investigation" pic.twitter.com/Klpm9UVCf2

— gnida project (@gnidaproject) October 25, 2026

As for the actual content of the fake, the real event is one of the most thoroughly documented atrocities of the month. On 8 October 2026, Russian forces struck two public buses in Kramatorsk with an aerial bomb, killing 33 people and wounding about 18. Such attacks are, sadly, a daily occurrence in cities on the frontline. There was no Ukrainian drone and no removed wreckage. The fabrication simply reassigns a Russian mass killing of civilians to its victim, which is the entire point.

The fake site was not a single page. It scraped our entire website, mirroring our genuine articles, and injected the fabricated one among them, so the lie traveled under the credibility of real reporting. The look-alike domain was registered on 15 October, eight days before the fake appeared, according to who.is data.

Storm-1516

Gnida Project identified the fake as part of Storm-1516, a Russian influence operation that clones trusted news brands to spread fabricated stories, and NewsGuard, which contacted us about the impersonation, attributes it to the same operation. NewsGuard has documented the tactic generating some 900 false reports over three years; the same operation has targeted France and Germany and has recently impersonated other outlets, including in Ukraine, such as this fake report on a copycat website pretending to be the New Voice of Ukraine.

Storm-1516 is one of several overlapping Russian operations that impersonate real media. Since 2022, the Doppelganger network has cloned whole Western outlets and government sites, and it is still active, flooding France with more than 200 fake sites before its 2026 elections. Polish fact-checkers literally call the tactic “attack of the clones.” A second operation, Matryoshka, floods social media with cheap fake videos credited to real outlets. Storm-1516, first identified in late 2023 and later named by Microsoft, grew out of Russia's Prigozhin-era troll operations, is the most elaborate of the three, and has overtaken RT and Sputnik as Russia's main disinformation machine. Its attacks combine cloned websites and fake videos.

NewsGuard counts some 906 fabricated reports impersonating 163 outlets from 21 countries since 2023, Euronews, the BBC, Deutsche Welle, and France 24 most of all, as well as the Kyiv Independent. The fakes nearly all bend one way, to erode Western support for Ukraine. Some smear Ukraine's leaders, a fabricated story that 20,000 Ukrainian soldiers evacuated to France had deserted into criminal gangs, invented claims that first lady Olena Zelenska fled abroad. Others, like the one aimed at us, flip Russian actions onto Ukraine. A separate Storm-1516 fabrication, a false claim that Ukrainian officials bought yachts with misappropriated US aid, was repeated in 2023 by JD Vance, then a US senator.

We filed a copyright and abuse complaint with the host, Namecheap, and a phishing report with Cloudflare, and pressed the registrar. The complaints worked: the clone has been taken down.

How to take down a cloned news site

Impersonation is cheap to set up, and any outlet can be next, so here is the procedure our technical team used, which other newsrooms can follow to take a clone down quickly.

  1. Cut the scraping pipeline. Run a DNS lookup (ping, nslookup, or dnschecker.org) on the cloned domain to expose the hosting IP behind any basic masking, then add a custom block rule in your Cloudflare WAF (Security, WAF, Custom Rules) targeting that IP, which cuts off the scraping scripts in real time. Watch the WAF logs over the next 48 hours in case the attackers rotate to new scraping proxies.
  2. Unmask the infrastructure and send formal notices. Run an IP WHOIS lookup (ipinfo.io) to identify the host, for example Namecheap or DigitalOcean, and the registrar, then submit DMCA takedown and phishing notices to the host's legal portal or abuse address. Include side-by-side URL comparisons of the original and cloned pages, clear documentation of the brand spoofing and the injected disinformation, and a good-faith legal statement with full contact details.
  3. Block access and de-index from search. Report the clone to Google Safe Browsing under social engineering and impersonation, which, once verified in 24 to 48 hours, makes Chrome, Firefox, and Safari show a full-page red warning to anyone who tries to open it. Then file a Google Search Console DMCA removal request to pull the cloned URLs out of search results.
  4. Escalate to the registrar. Submit a registrar abuse complaint demanding a full suspension of the domain, a ClientHold status, on the grounds of bad-faith typosquatting and identity theft, and push your open abuse ticket IDs through your Cloudflare account to skip the standard queue.

Be sure to read the automated replies from the host and Cloudflare and answer them promptly. Those acknowledgments often ask for specific additional information, and a fast, complete reply keeps the ticket moving instead of stalling in a queue.

How to spot Russian Storm-1516 attacks

Many users on X called out the signs: a look-alike domain (our only website is euromaidanpress.com, with no hyphen), a claim sourced to unnamed "OSINT channels," and a story that reassigns a Russian attack to Ukraine.

We never publish an image or video without crediting its source, and we never cite anonymous OSINT experts: our reporting traces to a first source. Trust only reports that name the first source of a claim and label the origin of their images and video. If you cannot trace the source, you cannot trust the report.

France’s Unrest Exposes a New Front in Russia’s Information War Against Europe

24 October 2026 at 13:19

The violence accompanying France’s October protests has revealed how foreign influence networks can exploit domestic grievances to undermine governments and European support for Ukraine. New evidence suggests Russian-linked operations were active before the riots, raising questions about whether information manipulation is moving beyond propaganda towards the mobilisation of political unrest.

France’s violent protests have exposed a vulnerability in European security that conventional policing cannot easily address: the ability of foreign information networks to exploit domestic political crises, amplify social divisions and transform legitimate grievances into instruments of geopolitical pressure.

President Emmanuel Macron has acknowledged foreign manipulation of information surrounding the disturbances of 17–18 October but insists there is no evidence that foreign actors organised the violence itself. His assessment reflects the evidence currently available, although new investigations indicate that Russian-linked networks were actively exploiting the protest movement weeks before the worst disorder began.

On 24 October, France deployed approximately 70,000 police officers and gendarmes to prevent further violence. Yet the security operation addresses only the physical consequences of a crisis whose online dimension extends across national borders.

Russia’s operations began before the riots

An investigation published on 22 October by Alliance4Europe provides evidence that Russian-linked information networks were exploiting French discontent well before the disturbances.

Researchers examined 547,471 posts and articles across nine languages. They identified 639 coordinated messages attributed with high confidence to Russia’s Doppelgänger operation, generating approximately 7.4 million views in the six weeks preceding 17 October.

The campaign used genuine concerns about living costs and public expenditure to promote a particular political argument: money allocated to Ukraine was being taken from European citizens.

This was not a random selection of grievances. France’s budget difficulties, public-service pressures and disagreements over defence expenditure provided material through which Moscow could seek to weaken support for Kyiv.

The researchers found that the operation targeted pro-European and pro-Ukraine politicians across the political spectrum. It praised selected proposals associated with Jean-Luc Mélenchon while also promoting nationalist narratives, illustrating a strategy driven less by ideological consistency than by opposition to existing European policies.

From manipulating opinion to encouraging mobilisation

An earlier investigation by EK Strategies, published on 8 October, identified an additional development.

Russian-linked channels were not merely commenting on existing demonstrations. They were circulating protest dates, identifying organisers and encouraging French audiences to follow the example of demonstrators in Germany.

On 28 September, the International Reporters network published an appeal urging French audiences to take to the streets. Other channels subsequently reproduced information about planned school blockades and demonstrations.

In one instance, a channel identified as Gavroche published rhetoric encouraging an attack on France’s Education Ministry.

Such activity goes beyond retrospective propaganda. It attempts to influence participation and behaviour while events are developing. Nevertheless, evidence that a network encouraged protests does not establish that it controlled the organisers or directed subsequent violence.

The original demonstrations arose from domestic grievances over schools, prices and government policy. The significance of the foreign activity lies in attempts to redirect and intensify an existing movement.

How France’s crisis was rewritten abroad

Once violence erupted, the information campaign acquired an international audience.

Alliance4Europe found that claims blaming migrants or Islam for the disturbances appeared in approximately one in 33 French-language posts, compared with nearly one in five English-language posts.

False allegations that immigrants had burned Limoges town hall circulated substantially more frequently in English than in French.

The same report identified 1,018 articles distributed through 28 websites associated with the Russian Pravda network. Their rapid republication across languages enabled a common narrative to reach audiences far beyond France.

The operation also presents a longer-term technological problem. Repeated publication of manipulated accounts can contaminate material subsequently retrieved or reproduced by artificial-intelligence systems, allowing false narratives to persist beyond the original campaign.

The political effects were visible when President Donald Trump and other foreign leaders portrayed France’s unrest principally through immigration and cultural conflict.

Speaking in Qatar on 21 October, Macron rejected these portrayals and criticised the circulation of fabricated AI-generated images. His remarks identified foreign manipulation after the riots but stopped short of alleging foreign responsibility for their organisation.

The Heritage Foundation and transatlantic networks

The transcript raises a more substantial allegation: that the American Heritage Foundation and Russia’s FSB have participated in a coordinated effort to destabilise France.

There are documented connections between the Heritage Foundation and political institutions associated with Hungary’s former prime minister Viktor Orbán.

A 2026 investigation into Hungarian-funded international influence networks established that the Danube Institute had channelled substantial public funding towards foreign researchers and commentators. The institute also maintained a formal relationship with Heritage.

Heritage has acknowledged its cooperation with Hungarian conservative institutions but denied receiving funding or direction from foreign governments.

These relationships demonstrate the development of transatlantic political networks capable of circulating common ideas about sovereignty, migration and European integration.

They do not establish operational cooperation with Russian intelligence. Nor has credible evidence emerged connecting Heritage to the organisation or financing of France’s October riots. Ideological convergence, institutional cooperation and participation in a clandestine operation require separate evidential assessments.

The implications for European security

The European Union’s response has exposed a regulatory problem.

Under the EU’s Digital Services Act, major online platforms must address systemic risks arising from their services, including the amplification of illegal content and threats to public security.

On 23 October, the French government announced enhanced cooperation with digital platforms. More than 100 priority reports had been submitted ahead of the weekend demonstrations, approximately half resulting in account suspensions.

These measures targeted unlawful online activity, particularly incitement to violence and looting. They did not constitute findings that the suspended accounts belonged to foreign intelligence networks.

The European Commission has likewise refrained from activating emergency measures under the Digital Services Act without sufficient evidence connecting foreign manipulation to the violence.

The broader security concern is that foreign operations can exploit the interval between the emergence of social unrest and the establishment of reliable information about its causes.

Russia need not organise an entire protest movement to advance its strategic interests. By amplifying domestic grievances, promoting hostility towards support for Ukraine and circulating distorted accounts internationally, it can attempt to convert France’s internal political difficulties into pressure on European policy.

With France approaching its 2027 presidential election, these operations warrant continuing scrutiny. The central investigative question is no longer simply whether foreign networks spread false information after violence occurred, but whether their activities before and during demonstrations materially influenced mobilisation, radicalisation or political responses.

The evidence currently demonstrates organised manipulation and attempts at amplification. Establishing direct responsibility for violence would require a further evidential step, involving financial records, communications, operational instructions or connections with identifiable perpetrators.

France’s experience illustrates how contemporary information warfare can operate within a democratic society without necessarily directing events on the ground. Its immediate objective may be to alter the political interpretation of a crisis; its longer-term consequence may be to influence the policies adopted in response.

Italy Investigates Possible Russian Role in Milan Riots as Meloni Confronts Hybrid Warfare Threat

24 October 2026 at 09:56

Italian authorities are examining whether foreign interference helped intensify violent protests across the country, as Defence Minister Guido Crosetto warns that social media is being used as an instrument of hybrid warfare. Prime Minister Giorgia Meloni has introduced emergency security measures and deployed additional troops to Milan, while further demonstrations are planned for Saturday, 24 October.

Italy is investigating the possibility that foreign actors, including Russian operatives, helped amplify the violent unrest that swept Milan and other Italian cities on 17–18 October. The inquiry introduces a national security dimension to demonstrations initially driven by rising living costs, dissatisfaction with public services and broader economic grievances.

According to information disclosed about the government’s intelligence inquiries, officials working under Prime Minister Giorgia Meloni have requested assessments of whether foreign provocateurs contributed to the disorder. No public evidence has established that Moscow organised the violence, and Meloni’s office has declined to comment on the reported intelligence discussions.

The developments follow EU Today’s earlier coverage of the Milan disturbances, which documented extensive looting, attacks on police and the detention of hundreds of young people, many of them minors. Since then, Rome has moved beyond emergency consultations, approving legislation that expands police powers and introduces tougher criminal penalties for violent demonstrations.

On Saturday, 24 October, Italian security forces are preparing for another wave of protests, with additional military personnel, drones and specialist police units deployed in several major cities. The immediate question is whether the government can prevent further disorder while establishing how much of the unrest was locally organised and whether foreign information operations influenced its development.

Crosetto warns of hybrid warfare through social media

Defence Minister Guido Crosetto introduced the hybrid warfare argument during a Defence Procurement Forum in Rome on Tuesday, 20 October. In remarks recorded by Italian public broadcaster Rai, he described the disturbances as the culmination of a form of conflict being conducted through TikTok, YouTube and other social media platforms.

Crosetto argued that young Italians were undergoing what he called a form of counter-education outside their families and schools, absorbing political attitudes and values increasingly hostile to democratic institutions. He criticised Western governments for failing to recognise the consequences of this process, although he did not publicly present intelligence establishing Russian responsibility for the riots.

His comments also exposed differences within the governing coalition. Deputy Prime Minister Matteo Salvini questioned suggestions of Russian involvement, arguing that the immediate priority was identifying violent groups and preventing their movement into Milan.

Russian information operations under scrutiny

European investigators have identified activity by established Russia-linked disinformation networks, including Operation Overload and Doppelgänger, which have circulated and amplified material concerning the unrest.

These operations have previously used manipulated content, misleading narratives and coordinated online distribution to influence European audiences. In the present case, investigations into the online amplification of the violence have identified foreign exploitation of the disturbances, rather than proof that foreign governments organised them.

The European Commission has consequently declined to initiate emergency intervention against social media platforms, citing insufficient evidence linking foreign manipulation directly to the organisation of the protests.

France has taken a similarly cautious position. President Emmanuel Macron acknowledged that foreign actors had manipulated information after the violence but said there was no established evidence that they caused the disturbances. French Foreign Minister Jean-Noël Barrot has separately identified hostile narratives originating from Russia, China and Iran.

For European security authorities, the principal investigative question concerns the relationship between genuine domestic grievances and externally coordinated information campaigns. Foreign networks can exploit political divisions without necessarily directing the organisations or individuals involved in street violence.

Meloni introduces tougher security legislation

Meanwhile, Meloni’s government has proceeded with a substantial legislative response. Following cabinet approval on 20 October, Decree-Law No. 190 of 22 October 2026 entered into force on 23 October.

The legislation introduces penalties of two to five years’ imprisonment and fines of €10,000 to €20,000 for specified forms of organised violence during public demonstrations. Those organising or encouraging qualifying violent groups, including through digital communications, face potential prison terms of four to twelve years. It also expands provisions concerning juvenile offenders and preventive policing. The decree must undergo parliamentary consideration within 60 days.

Separately, the Italian Defence Ministry confirmed the deployment of 500 additional soldiers to Milan under Operation Strade Sicure until 31 December. The soldiers will reinforce security around sensitive locations and support existing police operations without acquiring additional judicial policing powers.

New demonstrations test the government’s response

Security arrangements have been intensified ahead of demonstrations scheduled for Saturday, 24 October, in Milan, Rome, Turin, Bologna, Florence and other cities.

According to the latest security preparations, Rome is deploying approximately 1,500 officers, while Milan is preparing a combined police and military presence supported by aerial surveillance.

On Friday, Italian investigators conducted searches targeting approximately 100 people suspected of involvement in the previous weekend’s disturbances, including 51 minors. Authorities are also monitoring online calls for renewed protests, some organised by groups whose leadership and membership remain unclear.

The unrest presents Meloni with two parallel challenges: containing violence and determining whether hostile foreign networks have played a significant role in its escalation. Italy’s investigations may help establish whether the events represent primarily a domestic public-order crisis, the exploitation of existing tensions by foreign actors, or a combination of both.

For Brussels, the outcome could influence future enforcement of the EU’s Digital Services Act and its wider response to foreign information manipulation. For now, the evidence supports concern about Russian amplification of European unrest, but not a definitive conclusion that Moscow orchestrated the riots.

Russia’s Doppelgänger operation used fake Ukrainian channels to spread disinformation. Hacked files show who ran it

23 October 2026 at 10:27

russia’s doppelgänger operation used fake ukrainian channels spread disinformation leaked files show ran · post sergei kiriyenko first deputy chief staff russian presidential administration kremlin video conference regional heads 8

Sergei Kiriyenko, first deputy chief of staff of the Russian Presidential Administration, set the goals for the Ukraine strand of the operation, launched in early 2023 under the codename "Uganda." Alexander Kharichev, now head of the Kremlin's Directorate for Monitoring and Analysis of Social Processes, oversaw it, according to hacked correspondence published by The Insider on 21 October.

Doppelgänger disguises Russian narratives as local news through cloned media sites, fake accounts, paid ads, and fabricated videos. The FBI named Kiriyenko among its orchestrators in 2024, and its contractor, the Social Design Agency (SDA), run by Ilya Gambashidze, is still expanding, now targeting AI chatbots. The new files go inside the Ukraine campaign and show the operation reporting even exposed fakes to the Kremlin as achievements.

Telegram channels posing as Ukrainian

An internal briefing on narratives says the project ran its Telegram channels on the principles of agent work and psychological operations, the Russian version of the investigation shows. Early on, the team decided to disguise all its outlets as Ukrainian and to run its campaigns without direct Russian propaganda. Every channel carried Ukrainian news to look unconnected to Russia. Dropping pro-Ukrainian themes, the briefing warned, would eventually expose the client and wreck the whole plan.

Collage by Euromaidan Press
Explore further

Russia-linked bot networks kept their weekly rhythm after drone strikes on three Yandex data centers—disinformation monitor LetsData

Four goals and a can of stew

Kiriyenko set four goals: discredit Ukraine's military and political leadership, split its elites, demoralize its army, and disorganize its population. The SDA prepared the project's pitch and carried out the work.

Political strategist Alexander Asafov proposed fakes of his own: in May 2023, that soldiers were bribing commanders to avoid the front, and in January 2024, that Ukraine was pulling air defenses back to Kyiv to protect the authorities.

After an Il-76 military transport crashed in Belgorod Oblast on 24 January 2024, Moscow claimed it had been carrying Ukrainian prisoners of war. Kharichev's subordinate Yevgeny Kazakov, chairing a meeting in his place, proposed sending a fake to the widows of Ukrainian soldiers: "They died for an expensive Il-76—the Russians have few of those." The idea was dropped.

The same meeting produced another fake, and three days later the team launched it: that recruitment centers had sent widows a can of stewed meat with a little flag as compensation. The same producers also oversaw letters falsely attributed to Deputy Defense Minister Nataliia Kalmykova, the Russian version says.

Debunks filed as results

The SDA collected coverage of its work in a folder for the Kremlin. It filed the "Zelensky's yacht" story, which JD Vance, then a US senator and now US Vice President, echoed, together with its debunk. The report also included a TikTok campaign about former Defense Minister Oleksii Reznikov's family that the BBC had already exposed.

The Insider concludes that the team has had more failures than successes. The US sanctioned Gambashidze and the SDA in March 2024, and the UK followed in October.

Data centers in the line of fire of Ukraine war

19 October 2026 at 04:49

In recent days, a Ukrainian drone strike hit Russia’s largest data center, owned by bank and technology company Sberbank. The strike came after Ukraine hit three data centers belonging to the tech giant Yandex, which is often referred to as “Russia’s Google.” After those attacks, Yandex’s traffic dropped 94%. Its users experienced heavy disruption to […]

The post Data centers in the line of fire of Ukraine war appeared first on Asia Times.

Burnham’s Russia Narrative Car Crash is Worse Than We Thought

17 October 2026 at 07:00

Andy Burnham's claim that Russia interfered with Brexit is risible for one very simple reason, says Ben Pile: EU policy on climate and energy is so suicidal that Putin could not have wanted Britain to leave.

The post Burnham’s Russia Narrative Car Crash is Worse Than We Thought appeared first on The Daily Sceptic.

Poland’s ‘Bloody Friday’: School Killings, Mass Arrests and Fears of Russian Disinformation

12 October 2026 at 09:44

Poland has launched a nationwide security operation after three knife attacks at educational institutions left one woman dead and more than a dozen people injured. Police have detained 117 people amid a wave of online threats, while intelligence officials are examining whether Russian disinformation networks exploited the violence to spread panic.

Poland is confronting an unprecedented school security crisis after a succession of violent attacks by young people triggered widespread fear, school closures and a nationwide police mobilisation. By Sunday, 11 October, officers had detained 117 people and conducted nearly 64,000 security checks at educational establishments, as the authorities attempted to contain both genuine threats and an escalating campaign of intimidation on social media.

The crisis reached its height on Friday, 9 October, when warnings circulated about a supposed nationwide killing campaign known as “Bloody Friday”. Videos, threatening messages and lists of potential targets spread through TikTok, messaging platforms and school discussion groups, prompting parents to keep children at home and several local authorities to suspend classroom teaching.

Although police have found no evidence of an organised nationwide conspiracy, the violence that preceded the rumours was real. Three separate attacks took place between 7 and 10 October, while investigators are examining hundreds of other incidents involving threats or suspected criminal activity.

Two attacks that triggered nationwide panic

The first major incident occurred on Wednesday, 7 October, at a vocational school in Ostrołęka, north-east of Warsaw. A 19-year-old student armed with a machete attacked pupils, teachers and other people in and around the building, injuring nine victims before harming himself.

Investigators subsequently discovered a homemade explosive device inside his backpack. The suspect was arrested, and prosecutors brought nine charges against him, including attempted murder. The discovery of explosives raised further questions about the extent of his preparations and the possibility of a substantially higher death toll.

The following day, a 15-year-old former pupil entered a primary school in Leszczydół-Nowiny, near Wyszków, and attacked three members of staff with a knife. A 37-year-old caretaker died from her injuries, while two teachers, including the headteacher, were wounded.

According to investigators, the teenager wore a helmet-mounted camera, raising suspicions that he intended to record the assault. The official prosecution statement confirmed the victim’s death and the detention of the suspect.

The attacks were followed by threatening messages from other teenagers, including a video attributed to a 17-year-old in the Przasnysz district who claimed to be participating in a competition involving killings. Police subsequently detained him. In Sierpc, another 17-year-old was arrested after allegedly discussing plans for violence at school; officers discovered two knives.

Thousands of schools under police surveillance

The rumours produced an immediate reaction. Schools in Wyszków, Ciechanów, Pułtusk and other municipalities cancelled classroom teaching or introduced remote lessons. Elsewhere, parents independently withdrew their children, leaving some classrooms largely empty.

Police launched an extensive preventive operation, deploying additional officers around schools and investigating online threats.

According to the figures released on 11 October, the authorities had recorded 275 incidents requiring investigation, detained 117 people and carried out nearly 64,000 checks at schools, nurseries and other educational facilities.

The situation deteriorated further on Saturday, 10 October, when a 21-year-old student attacked three people at a post-secondary educational institution in Warsaw. Two 17-year-old girls and a 24-year-old woman were injured. One victim required hospital treatment, although none of the injuries was considered life-threatening.

Interior Minister Marcin Kierwiński subsequently stated that investigators had established no links between the recent attacks. The authorities nevertheless remain concerned about imitation offences, particularly where threatening material circulates among teenagers through closed online communities.

Russia’s possible role in spreading panic

The events have also raised questions about whether hostile foreign actors deliberately amplified the crisis. Tomasz Siemoniak, Poland’s minister responsible for coordinating the intelligence services, warned that Russian organisations routinely exploit domestic emergencies to spread disinformation and undermine confidence in public institutions.

In his statement on 9 October, Siemoniak acknowledged the possibility of foreign involvement but stressed the need for evidence before assigning responsibility.

There is, at present, no publicly established evidence that Moscow organised the school attacks or directed the subsequent threats. Nevertheless, the rapid circulation of alarming videos, fabricated warnings and unverified target lists illustrates how genuine violent incidents can be exploited to disrupt everyday life without further physical attacks.

The episode also presents a challenge for European regulators. Poland is examining measures against dangerous online content, while its existing obligations under the EU Digital Services Act provide a framework for addressing systemic risks associated with major platforms.

For Donald Tusk’s government, the immediate priority is preventing further attacks as schools reopen under heightened security. The longer-term challenge concerns the interaction between online radicalisation, copycat violence and disinformation capable of transforming isolated crimes into a national emergency.

Why an insurgency in Mali matters in Moscow

1 May 2026 at 12:55

A coup is underway in Mali, though it has not brought down the governing junta just yet. The country’s military leader, General Assimi Goïta has, after days in hiding, appeared in public to claim, unconvincingly, that the “situation is under control.” But rebel forces — an alliance of Al-Qaeda affiliates and Tuareg separatists — have taken over provincial cities and are calling for a blockade of the capital Bamako. Mali’s military junta hangs on by a thread, in a familiar regional story of violence, civilian suffering and international intrigue.

On April 25, coordinated attacks across Mali exposed the junta’s fragile hold over the country. Jamaat Nusrat al-Islam wal-Muslimin (JNIM), the al-Qaeda affiliate that has driven insurgency across the region for over a decade, joined forces for the first time with Tuareg separatist groups — who have been fighting the central government for even longer — to simultaneously strike cities hundreds of miles apart, including the capital Bamako, Gao, Kidal, Sévaré, and the garrison town of Kati. A suicide car bomber drove into the residence of defence minister General Sadio Camara, killing him along with his wife, two grandchildren, and several civilians. Camara was one of the most influential figures in Mali's ruling junta and had been widely seen as a possible future leader of the country. He was also the key architect of Mali's military alliance with Russia. Mali, Burkina Faso and Niger, which together form the Alliance of Sahel States (AES), have all in recent years realigned away from France, the former colonial power in the region, and towards Russia.

Russian mercenaries, in the form of the Wagner Group and more recently the Africa Corps, have backed military juntas in the Sahel, after coups in Mali, Burkina Faso and Niger led to the withdrawal of French troops from France’s former colonies. But during these latest rebel strikes, it was Russian fighters that were chased out of the northern city of Kidal to the sound of jeers. Africa Corps, the Kremlin-controlled paramilitary group, described the insurgent attacks as a "coup attempt" backed by "Western intelligence services." RT amplified these claims, accusing France and the West of orchestrating the violence, even as it claimed Russian fighters successfully repelled rebels. In 2024, Ukraine’s military agency said it had provided information to help Tuareg rebels ambush and rout a Wagner convoy, killing dozens of Russian mercenaries. Both Mali and Niger have cut diplomatic ties with Kyiv. Burkina Faso has described Kyiv as a destabilizing force in the region, making the Sahel effectively a front in Russia’s war with Ukraine. 

The Kremlin’s combination of misinformation and mercenaries helped exploit growing anti-Western sentiments in the Sahel to give Russia a propaganda win in the region. Former colonial powers such as France didn’t help themselves, as can be seen even now in Madagascar, the latest nation to expel a French diplomat and accuse Paris of fomenting unrest. But the success of Russian propaganda hasn’t been matched on the ground. As Mali struggles to contain a rebel alliance that has fresh impetus and energy, Moscow’s control is weakening and the effectiveness of its military support is under question. Already, with Russian weapons in short supply because of war with Ukraine, it is China that the Malian junta turns to for arms. China’s strategic efforts in the Sahel have been similar to its efforts in the rest of the African continent – a focus on securing infrastructure contracts as part of the Belt and Road Initiative and securing access to mineral resources. But rebel attacks in the Sahel are bad for Chinese business. In February, the Chinese embassy in Niamey, the capital of Niger, warned Chinese companies to take their workers out of the firing line as rebels increasingly targeted Chinese infrastructure projects, including a $4.5 billion oil pipeline from Niger to Benin.

In 2024, the United States was forced to leave neighboring Niger after a coup, to withdraw from a $100 million base. It seemed the U.S. was losing ground to both Russia and China in the Sahel. Earlier this year, though, as security concerns in the Sahel escalated sharply, the U.S. adjusted its approach, choosing to deal pragmatically with military juntas. By late February, the U.S. lifted sanctions on top Malian officials, including General Camara, the recently slain defence minister. It may see closer cooperation with Sahel countries as essential to its security interests and a way to undercut Chinese access to Sahelian resources.

The three Sahel states, Mali, Burkina Faso and Niger, have turned away from France and Europe and towards Russia, while increasingly flirting with the U.S. and reliant on Chinese weapons. The result has been disaster. All three Sahel states are ranked in the top 5 for countries impacted by terrorism. And the humanitarian toll has been severe. Millions of people face internal displacement across the region and cuts in aid programmes mean many millions, especially children, also face acute hunger. But, as the great powers circle the region, jockeying for geopolitical gain, the talk remains about the logistics of propping up failing juntas, providing military solutions to human crises, and maintaining power rather than confronting problems.

Mali, Burkina Faso and Niger – all led by military authorities that came to power in a coup – have also isolated themselves from the rest of their neighbors by withdrawing from the West African regional bloc, Ecowas. Meanwhile, they sell their model as an alternative to Western-style democracy, a narrative that Russian propaganda networks have been all too eager to promote. But the strength of the insurgency against Mali’s government, and Russia’s apparent inability to protect it, sends a different message to the rest of the African continent.

The post Why an insurgency in Mali matters in Moscow appeared first on Coda Story.

Exiled at midnight

7 April 2026 at 13:55

On the night of January 16, 2024, Egana Djabbarova was awoken by her wife and told that she needed to leave the country immediately. Djabbarova, her wife said, had been denounced by pro-war activists and framed as an enemy of the country. She had recently published her novel, “My Dreadful Body,” with a small, indie press that had been praised by mainstream critics, unexpectedly propelling her into the public eye. One of the book's central themes is surveillance: growing up in a community with strict behavioural codes, the protagonist's every move is under scrutiny.

In a dark echo of her work, Djabbarova was now under online surveillance herself. “I was just the perfect enemy,” she tells me, “because I’m queer, I’m not Slavic, I worked on decolonial and feminist projects… So boom, it happened.”

She is speaking to me from Hamburg, where she now lives. Djabbarova is part of the so-called fifth wave of writers exiled from Russia, alongside Maria Stepanova, Lyudmila Ulitskaya, and Maxim Osipov to name a few. Her upbeat tone during our call gives little indication of the arduous journey she has endured since fleeing Russia. Upon receiving a humanitarian visa from Germany, she spent months in a refugee camp. She lived, she says, “in a container house, literally a shipping container. You feel like you're not a subject, not a human being.” 

More permanent accommodation has provided a degree of safety and stability, but a sense of precariousness lingers. She describes her position as an exile as “strange” — on the one hand she has been welcomed into Germany’s cultural elite in winning the Hamburger Literaturpreis; on the other, she feels like a “ghost,” unable to express herself in German and often bewildered by the unfamiliarity of everyday tasks in a new country, and in a new city which, she tells me jokingly, is quaint and polite like the well-behaved boy next door. 

But there’s a deeper, historical layer to Djabbarova’s story of exile. Her father was a refugee from the region of Nagorno-Karabakh, while her mother was forced out of her family home. “Homelessness and exile — this is my heritage,” she says. Being othered became a common theme of Djabbarova’s childhood, as a child of Azeri parents living in Yekaterinburg. “In Russia you are constantly reminded that you're not Russian,” she says. “Then during the summer you visit your relatives in Azerbaijan and they laugh because you cannot speak Azerbaijani properly.”

This sense of double estrangement is mirrored in “My Dreadful Body” (published in Russian in 2023 and recently translated into English by Lisa Hayden). At only a touch over 100 pages, it is a slim but powerful account of the pressures on one woman growing up among the strict codes of an Azerbaijani family living in Russia. A sense of surveillance and conditional belonging defines the narrator’s upbringing: “In the world where I grew up,” she writes, “gazes penetrated every little corner. The evil eye, the neighbors’ eyes, the relatives’ eyes, the random pedestrian’s eyes, the unscrupulous men’s eyes, the women’s unhappy eyes. Life in the community was reminiscent of a reality show with constant video surveillance: no action, word, or undertaking went unnoticed.”

The story is based on Djabbarova’s own life. “Maybe 70-80% of this story is absolutely true”, she confirms. The narrator is named Egana, she grows up in an Azerbaijani family in Russia, too Russian for the family, not Russian enough for her friends at school. She also, like Djabbarova, suffers from a debilitating autoimmune disorder that is eventually diagnosed as dystonia, a neurological disorder that causes involuntary muscle contractions. During one episode, she describes her body as resembling “willow branches gone mad from a strong wind” — a potent image of struggle against external forces. Djabbarova describes the book as a way to reclaim her body through language. “I was trying to tell this story in a poetic way. I wanted to change my body into poetry.” 

Each chapter of “My Dreadful Body” begins with a different body part (“Eyebrows,” “Eyes,” “Hair” and so on), like the poetic blazons spun by Renaissance poets. Where those poems encouraged an idealized, sensationalized reading of each body part, Djabbarova’s chapters are more sober explorations of the physical limits — and personal and cultural stories — these body parts contain. 

In one of many poignant scenes, the narrator’s head is shaved in preparation for a procedure. She cries on seeing her “shorn scalp,” but the sadness is not aesthetic, it’s ancestral; the act marks a symbolic rupture with her lineage. “My past,” she writes, “the past of all the women in my family, the memory of my ancestors, the history of a single body — all that now lay on the cold floor.” After this scene, her grandmother’s dictum that only long hair was considered beautiful, rings even more sharply. 

Illness then emerges as another form of exile, from one’s sense of self, from what’s perceived as “normal” in society, from the culture and community one belongs to. “They do not see you as a subject, as a human being, and they do not recognize your existence… I realized if I wanted to be seen as a subject, I needed to do it myself.” Djabbarova is talking about the plight to be believed about her symptoms here, but she could easily be talking about the often dehumanizing experience of exile. In both instances there is something fundamental under question, or as Djabbarova puts it, “You’re trying to prove that you have the right of being. You’re trying not to be erased.” 

We often talk about exile in the context of loss, but how might exile liberate? Paradoxically, Djabbarova tells me, her diagnosis became a form of liberation. “I always felt I had so many expectations on me as a girl, as a woman, so when I was finally diagnosed it was a liberation because my parents realized I would never be this type of girl.” Exile breeds a particular creative liberation, too, evidenced by the fact Djabbrova wrote the novel from Taiwan where she was briefly teaching Russian. “Here I had enough distance from my own life and my own experience,” she says. “Maybe it’s easier to write about your story being on an island in the Pacific Ocean.”

Writing is arguably the real heroine of Djabbarova's novel. For the narrator Egana, it is a place free from surveillance and a source of protection, “like an invisible amulet.” Poetry, she told me “was the only safe space for me because nobody was asking anything of me. It's the only place where I don't feel judged. I don’t feel ashamed. I don’t feel questioned.”

The chapter “Hands” opens: “The most important parts of a woman’s body were her hands: they prepared food, rocked children, did laundry, ironed men’s shirts, sewed clothes, swept, washed the floor, and dusted.… Any woman in our family knew that her hands were not given to her for writing.” To use her hands, then, to write becomes both a symbolic and quite literal form of resistance against such gendered codes.

Notably, Djabbarova is not alone in invoking the body as a space to explore the upheavals of exile. In Maria Stepanova’s autofictional work “The Disappearing Act” — recently translated into English by Sasha Dugdale — the narrator attempts to purge herself by volunteering to be cut in half as part of a circus trick. Djabbarova’s approach to reclaim identity and agency through the body is less literal, and more personal, but through this specificity she has landed somewhere indisputably universal. 

“I realized the only way I can write this novel is through my body,” she says. “Because the only way I can rehabilitate my being, my agency, my subjectivity is through my body. And that's why I wanted every reader to feel my body… It's really important for all of us not to forget that this right of being is basic. It's not given. It's something you have from birth." 

At the end of our conversation, Djabbarova (who has been speaking in English) struggles to recall a word and jokes that learning German is slowly pushing her English out. “Certain words I only remember in German!” she laughs. Is this the beginnings of a kind of homemaking for Djabbarova, a sign that the seeds she has scattered in her new country are taking root? Like her protagonist, who finds solace and safety in words, it seems that Djabbarova’s most trusted tool for survival, for managing the condition of exile, is language. 

The Age of Exile

This story is part of our Age of Exile series, which explores how displacement has evolved from historical punishment into a defining condition of our time—one that reveals profound transformations in how we construct identity, maintain community, and exercise power across borders. In an era where digital connection enables presence without physical proximity, exile has become more complex, more global, and more central to understanding our world. Explore The Age of Exile series

The post Exiled at midnight appeared first on Coda Story.

❌