Doppelgänger: Hackers Employ AI to Launch Highly sophistication Attacks

It has been observed that threat actors are using AI technology to conduct illicit operations on social media platforms.

These malicious actors employ several tactics and automated bots to achieve their nefarious goals, which can pose a serious threat to online security and privacy.

  • Spread disinformation
  • Manipulate public opinion
  • Escalate isolating content

These AI-driven tactics enable the rapid dissemination of misleading narratives, contributing to the escalation of online misinformation campaigns.

Cybersecurity researchers at Insikt Group recently identified “Doppelgänger,” a Russia-linked influence network conducting a sophisticated operation.

Doppelgänger

The operators of this network employ advanced obfuscation techniques and potentially utilize generative AI to craft deceptive news articles, targeting audiences in the following countries via fake news sites and social media accounts:-

  • Ukraine
  • The United States
  • Germany
Doppelgänger articles dated Nov. 10, 2023, impersonating UNIAN (Source – Recordedfuture)

Insikt Group found a campaign hitting Ukraine, using many fake social media accounts for Coordinated Inauthentic Behavior (CIB). 

They shared bogus articles mimicking Ukrainian news, spreading anti-Ukraine narratives on:-

  • Military
  • Politics

Doppelgänger hit the US and Germany with fake copies of 6 legitimate news outlets’  in later campaigns. 

For the US, it fueled divisions before the 2024 election, pushing anti-LGBTQ+ views, criticizing the military, and intensifying political separations over Ukraine.

Doppelgänger influence assets (Source – Recordedfuture)

In Germany, it targeted economic and social problems to deteriorate the trust in leadership and boost the nationalist emotions.

Doppelgänger aimed at the US with three fake news outlets:-

  • Electionwatch[.]live: Generates AI-driven political content.
  • Mypride[.]press: Stirs anti-LGBTQ+ sentiments.
  • warfareinsider[.]us: Critiques US military and foreign policy from a politicized stance.

Campaigns

Here below, we have mentioned all the campaigns identified by the security analysts:-

  • Campaign 1: Doppelgänger Impersonates Ukrainian News Organizations to Influence Ukrainian Audiences
  • Campaign 2: Doppelgänger Seeking to Influence US Audiences with Inauthentic News Outlets Leveraging AI and Divisive Commentary on Social Issues and US Military
  • Campaign 3: Doppelgänger Seeking to Influence German Audiences with Grim Outlook on European Migration Movements, German Economic Outlook

Ongoing collaboration and public reporting are crucial to counter malicious influence. Media should vigilantly monitor brand abuse, issue takedowns, and boost online literacy.

Due to its continued evolution and use of AI, Doppelgänger’s exposed activities hint at lasting societal impacts, like corrupting trust and heightened polarization.

Tushar Subhra

Tushar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Recent Posts

Update Alert: Google Warns of Critical Android Vulnerabilities Under Exploit

Google’s March 2025 Android Security Bulletin has unveiled two critical vulnerabilities—CVE-2024-43093 and CVE-2024-50302—currently under limited,…

3 minutes ago

BigAnt Server 0-Day Vulnerability Lets Attackers Run Malicious Code Remotely

A critical vulnerability in BigAntSoft's enterprise chat server software has exposed ~50 internet-facing systems to…

24 minutes ago

Bubba AI, Inc. is Launching Comp AI to Help 100,000 Startups Get SOC 2 Compliant by 2032.

With the growing importance of security compliance for startups, more companies are seeking to achieve…

2 hours ago

IBM Storage Virtualize Flaws Allow Remote Code Execution

Two critical security flaws in IBM Storage Virtualize products could enable attackers to bypass authentication…

3 hours ago

Progress WhatsUp Gold Path Traversal Vulnerability Exposes Systems to Remote code Execution

A newly disclosed path traversal vulnerability (CVE-2024-4885) in Progress Software’s WhatsUp Gold network monitoring solution…

3 hours ago

CISA Alerts on Active Exploitation of Cisco Small Business Router Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent warning on March 3,…

4 hours ago