Storm-1099 is a Russia-affiliated influence actor known for the 'Doppelganger' website forgery operation and spreading disinformation.
Analyst brief
Storm-1099 is a sophisticated Russia-affiliated influence actor targeting international supporters of Ukraine. Their primary TTPs include a website forgery operation named 'Doppelganger' and spreading false claims, such as the narrative of Hamas acquiring Ukrainian weapons, while also amplifying provocative content like Paris graffiti to stir discord. Defenders should focus on monitoring for forged domains and brand impersonation used to disseminate disinformation, scrutinize sensational narratives, and watch for amplification tactics consistent with Russia's Active Measures playbook.
Storm-1099
unknown
Storm-1099 is a sophisticated Russia-affiliated influence actor that has been conducting pro-Russia influence operations targeting international supporters of Ukraine since Spring 2022. They are known for their website forgery operation called "Doppelganger" and have been actively spreading false information. They have been involved in pushing the claim that Hamas acquired Ukrainian weapons for an attack on Israel. Storm-1099 has also been implicated in amplifying images of graffiti in Paris, suggesting possible Russian involvement and aligning with Russia's Active Measures playbook.