Storm-1516 turns its fabrications on Paris and Berlin
A campaign built for the American market
Storm-1516 is the tracking name for one of the most productive Russian influence operations now running against the West. Analysts link it to the network around John Mark Dougan, a former Florida deputy sheriff who fled to Moscow in 2016 and has since become a fixture of the Kremlin’s overseas propaganda machine. The operation specialises in a single, repeatable trick: manufacture a shocking claim about a Western politician, dress it up as local reporting or eyewitness testimony, and push it through a lattice of fake news sites and social accounts until ordinary users cannot tell where it began. For most of its life the operation aimed at the United States, and in particular at the case for arming Ukraine.
The pivot to Europe
That focus has now moved. NewsGuard, the news-rating and misinformation-tracking service, published an analysis in February 2026 setting out how sharply Storm-1516 had turned toward France and Germany. The trigger was a change in the real world. As American military aid to Kyiv fell away through 2025, France and Germany became Ukraine’s most important remaining backers, and the operation followed the money.
NewsGuard’s analysts, working with aid figures drawn in part from the Kiel Institute for the World Economy’s tracker, noted that United States assistance had all but stopped while European support had risen sharply. The propaganda adjusted to match. Where the fabrications had once been built for an American audience, they were now built to erode French and German willingness to keep paying for Ukraine’s defence.
The method: fabricated witnesses and manufactured video
The mechanics did not change, only the targets. Storm-1516 leans on fabricated witnesses, staged or wholly invented video, forged documents and cloned local-news branding. A typical sequence starts with footage of a supposed whistle-blower or victim, often an actor reading a script, whose claim is then written up by a fake outlet and amplified by coordinated accounts. VIGINUM, the French state technical agency that monitors foreign digital interference, has documented the operation’s reliance on this fake-witness model. Because each claim arrives already wearing the costume of journalism, corrections struggle to catch up.
The numbers
The scale is the part that unsettles. NewsGuard counted 34 false claims aimed at France and Germany since January 2025, spread through roughly 175,000 posts and articles, drawing an estimated 274 million views on X alone. The tempo rose over the year: 12 claims and about 97 million views in the first half of 2025, then 18 claims and roughly 147 million views in the second.
Individual fabrications reached remarkable audiences. A false story tying President Emmanuel Macron to the Epstein scandal produced some 38,000 posts on X and 20.4 million views. A fabricated account of a Friedrich Merz incident at a London airport drew 7.8 million views across 1,410 posts in four days. Others were cruder, including an invented IQ test and a fictitious injury, the sort of degrading personal smear designed less to convince than to demean.
Denials and attribution
Dougan, asked directly about Storm-1516, told reporters, “Storm? Never heard of it,” and denied any tie to the Russian government. Moscow’s line is consistent with that: no operation exists, and the attribution is a Western invention. The evidence points the other way. NewsGuard, VIGINUM and the European Digital Media Observatory have each mapped the infrastructure, the recurring templates and the coordinated amplification that define the campaign, and a Bloomberg investigation this year traced the same fingerprints across a wave of fake videos. Attribution in influence work is rarely a single smoking document. It is the accumulation of shared tooling, timing and narrative, and by that standard Storm-1516’s provenance is not seriously in doubt among the researchers who track it.
Outcome and what changed
The operation is still running, which is the first thing that has changed since 2025: it did not fade after exposure, it re-aimed. France and Germany are now the primary targets, and the volume has grown rather than shrunk. Platforms have removed some of the material and both governments have raised the alarm, yet the core weakness the operation exploits, the speed gap between a vivid fake and a careful correction, remains open.
The lesson researchers draw is a practical one. Naming the campaign, publishing its templates and pre-warning audiences before an election or an aid vote does more to blunt it than chasing individual posts after they go viral. Storm-1516 has shown it can change targets overnight. The response has to be able to move as quickly.
Leave a Reply