Security firms Qurium and Infoblox have detailed an extensive cross-continent disinformation campaign involving several Kremlin-linked entities.
The operation, dubbed “Doppelganger”, pushes pro-Russian narratives and fake news via cloned websites and a network of malicious advertising technology, known as TDSs.
Doppleganger’s infrastructure is shared with other operations and uses a network of hacked WordPress accounts to push targeted content.
One part of the network, known as LosPollos, uses references to the US television series Breaking Bad in its coding and imagery.
The firms believe that a Russian named Giulio Cerutti is behind the whole operation.