Verfassungsschutz.de
Russia’s Matryoshka disinformation network has flooded German regional social media with AI-generated fake news targeting politicians from every major democratic party — but left the far-right Alternative für Deutschland and the far-left BSW completely untouched. The pattern, confirmed by Germany’s Federal Office for the Protection of the Constitution this week, is not a coincidence of targeting — it is a publicly legible map of which parties the Kremlin wants to win Germany’s most consequential state elections in September.
Germany’s domestic intelligence agency — the Bundesamt für Verfassungsschutz, or BfV — issued a detailed public warning on August 12–13, 2026, directly naming the Matryoshka bot network as the infrastructure behind a coordinated influence campaign aimed at four upcoming ballots: state parliament elections in Saxony-Anhalt on September 6, and in Berlin and Mecklenburg-Western Pomerania on September 20, plus local elections in Lower Saxony.
What Matryoshka Is — and What Makes It Different
Matryoshka is not a single account or a publishing operation. It is a coordinated disinformation architecture built on two simultaneous mechanisms, documented by the activist collective Antibot4Navalny first uncovered the campaign and named it after the famous Russian nesting dolls.
The first mechanism is fabrication at scale: large numbers of fake profiles that pose as ordinary people, independent news outlets, or think tanks generate dozens of posts per day, mimicking local speech patterns to create the appearance of organic public opinion. This two-direction disinformation architecture then simultaneously launches identical fabricated content across X (formerly Twitter), Telegram, Bluesky, and closed group chats at the same moment, manufacturing the appearance of cross-platform confirmation. Each layer of the operation hides the one beneath it — hence the nesting-doll name, and hence the difficulty of tracing any single piece of content back to its source.
The content itself consists primarily of short vertical videos styled to look like breaking-news broadcasts from established Western outlets, including BBC and ARD impersonation of visual formats, loaded with false allegations against specific politicians. The BfV described these as characterized by “short English-language videos that mimic the layout of well-known German media outlets. Using sensationalist headlines and biased claims, it spreads narratives aimed at polarizing East and West Germany, stirring up anti-federal sentiment, and discrediting state and local politicians.” The fabricated reports include allegations of embezzlement and harassment against named regional politicians.
Unlike Storm-1516 — a parallel Russian disinformation network that TechTimes reported last week has been definitively Storm-1516 attributed to GRU Unit 29155 — Matryoshka has not yet been definitively linked to any single Russian institution. The FBI has assessed, and EUobserver has reported, that SDA runs the Matryoshka operation — specifically the Russian Social Design Agency, a Kremlin-funded organization with close ties to both the GRU and the Russian presidential administration that has been SDA sanctioned by US, UK, EU.
The Forensic Signature: Which Parties Russia Is Not Attacking
The most significant thing the BfV warning documents is not who Matryoshka is targeting. It is who Matryoshka is not targeting.
According to German security sources, the activity targets CDU SPD Greens Left — the governing conservative CDU/CSU alliance led by Chancellor Friedrich Merz, the Social Democratic Party, the Greens, and the Left party — every significant party that has taken a position on Ukraine, European unity, or NATO that conflicts with Kremlin preferences. The two parties exempted are AfD and BSW completely untouched. Both advocate closer ties with Russia and have opposed European sanctions on Moscow.
Julia Smirnova, an analyst at the Berlin-based Centre for Monitoring, Analysis and Strategy, told Deutsche Welle that the pattern is not new and is not accidental. “Even before the federal election, we observed that Russian campaigns generally sought to discredit candidates from all democratic parties while supporting the AfD and BSW,” she said. “Long-term strategy of supporting pro-Russian parties while discrediting other parties and candidates — what we are now seeing ahead of the state elections is a continuation of exactly this approach.”
In August, bots on X pushed posts under the #TimeToDivideGermany hashtag bots spread, promoting the territorial dissolution of the Federal Republic into East and West and calling such a division a “historical necessity.” The content is calibrated not merely to help specific candidates but to deepen the geographic and cultural fault lines that the AfD has built its electoral coalition on.
The stakes of the Saxony-Anhalt vote make the Kremlin’s investment legible. The AfD polling at 42 percent in Saxony-Anhalt represents a 20-point lead over the CDU’s 22 percent in the most recent INSA survey. If the party reaches the absolute majority threshold — roughly 50 percent, depending on how minor parties perform — it would form Germany’s first state government led by a party classified as right-wing extremist by the state’s own Office for the Protection of the Constitution since World War II. Such an outcome would validate one of Russia’s sustained strategic goals in Germany: normalizing far-right governance at the regional level before the 2029 federal election.
A Strategy Confirmed Across Borders
The same targeting logic extends beyond Germany. In France, where a presidential election is set for spring 2027, the Matryoshka network was identified by Viginum — France’s government body for monitoring foreign digital interference — as responsible for a disinformation campaign specifically targeting Gabriel Attal, the centrist Renaissance candidate and former prime minister who has made AI sovereignty and support for Ukraine central to his platform. Viginum attributed Matryoshka with confidence with a “high degree of confidence” and Viginum confirmed to AFP the attribution.
Attal filed formal legal complaint over the fabricated content, which included Parkinson deepfakes and fake newspapers falsely claiming he was suffering from Parkinson’s disease. A source close to Attal told Reuters that Attal’s Ukraine commitment as motive drove the campaign — specifically his public commitment to Ukraine following Russia’s 2022 invasion.
Notably, the candidates Matryoshka did not target in the French presidential field include Marine Le Pen’s Rassemblement National and its ally Jordan Bardella — France’s most Russia-aligned political figures. Attal’s AI investment agenda — he announced at the VivaTech salon in June a 200 billion euro AI investment plan (approximately $232 billion) public-private investment in AI and technology sovereignty — represents precisely the kind of European strategic independence that Kremlin doctrine actively opposes.
Matryoshka’s reach extends further than Germany and France. The same network was active in Moldova ahead of the 2025 elections, where Matryoshka’s Moldova disinformation campaign flooded Moldovan social media with fabricated claims that President Maia Sandu had embezzled $24 million and was addicted to psychotropic drugs, and in Hungary ahead of the April 2026 parliamentary vote, where Hungary election 290,000 combined views were accumulated by fabricated videos.
Germany Is Watching But Not Acting
The German government’s response to the BfV warning reflects a calculated decision about proportionality and countermeasure risk. An Interior Ministry spokesperson confirmed that the government is monitoring but no active countermeasures were being taken at this stage. “At the moment, this campaign is not achieving significant reach online. That is not to say we can let our guard down or anything of the sort. It remains a serious disinformation campaign,” the spokesperson said.
Some posts have been removed by the platforms on which they appeared, but no systematic coordinated takedown has been reported. Germany established a GAZ Hybrid centre established in June 2026, and the CDU has assembled a dedicated expert advisory team to counter the AfD during the regional election campaign, though neither initiative is specifically designed to address Matryoshka’s content in real time.
The Frankfurter Allgemeine Zeitung described FAZ on the campaign’s escalating audacity as testing the boundaries of what fabricated content can credibly assert in the current information environment. Four security sources confirmed Russian direction cited by Reuters said German security services are convinced the campaigns are centrally directed from Russia through a network of companies.
How to Spot Matryoshka Content Before It Spreads
When a video appears to be a breaking report from the BBC or ARD and alleges that a regional German politician has embezzled public funds or committed a crime, the fastest verification on broadcaster’s own website is the simplest: check the broadcaster’s own homepage. Matryoshka’s content does not appear on the websites of the outlets it impersonates, because it was never produced by those outlets.
The network’s content markers for Matryoshka videos distinguish it from legitimate journalism: it almost always appears first on social media rather than the outlet’s own channels; it focuses on allegations of personal misconduct rather than policy; it often contains factual errors that the real outlet’s editorial process would have caught; and it targets only politicians whose policy positions are hostile to Russian strategic interests — never those aligned with the Kremlin.
That last marker is the most reliable. If a video claims to expose wrongdoing by an AfD candidate in Saxony-Anhalt, treat it differently from a video making the same claim about a CDU or SPD candidate — not because the AfD is trustworthy, but because Russia’s own AfD exemption as targeting signal has demonstrated that its information apparatus has no interest in damaging that particular party.
With the first September vote 22 days away, the disinformation infrastructure is already deployed and operational. What German voters, platforms, and politicians do with the BfV’s warning in the time remaining will determine whether Matryoshka’s investment yields a return.
Frequently Asked QuestionsWhy is the AfD not being targeted by Russia’s Matryoshka disinformation network?
German security authorities and researchers have documented a consistent pattern: Matryoshka targets politicians from parties whose policy positions — on Ukraine, NATO, and EU sanctions on Russia — conflict with Kremlin strategic interests, while leaving untouched parties like the AfD and the BSW, both of which advocate closer ties with Russia and oppose sanctions. Analyst Julia Smirnova of the Centre for Monitoring, Analysis and Strategy described this as a long-term strategy of supporting pro-Russian parties while discrediting other parties and candidates. The targeting omission is not evidence that the AfD is credible or trustworthy — it is evidence that Russia views AfD electoral success as strategically beneficial.
How does the Matryoshka bot network technically spread disinformation?
Matryoshka operates through a two-direction disinformation architecture documented by Antibot4Navalny, the collective that first discovered it. The first direction is creation: large numbers of fake profiles, built to resemble ordinary people or independent news outlets, generate dozens of posts per day mimicking local speech patterns. The second direction is simultaneous cascade: identical content is launched at the same moment across X, Telegram, Bluesky, and closed group chats, creating the artificial impression of cross-platform organic consensus. The fabricated videos are dressed in the logos and visual styles of credible broadcasters like the BBC and ARD to exploit audience trust in those brands. Because the source is layered behind multiple bots — like nested Russian dolls — tracing the content back to its origin is significantly harder than with simpler disinformation operations.
What German elections are happening in September 2026, and why do they matter?
Germany will hold elections to the state parliament (Landtag) of Saxony-Anhalt on September 6, and to the state parliaments of Berlin and Mecklenburg-Western Pomerania on September 20. Local elections in Lower Saxony are also scheduled for September. The Saxony-Anhalt vote is the most consequential: the AfD polling at 42 percent — a 20-point lead — puts the party within reach of an absolute majority that would allow it to govern the state alone for the first time. If that happens, it would be the first state government led by a party classified as right-wing extremist by German domestic intelligence since the end of World War II. An Infratest poll has also shown the AfD leading in Berlin’s polls ahead of that election. Together, the three Landtag votes represent the most significant regional election cycle in years.
What can German voters do to avoid being misled by Matryoshka content?
The fastest check is to verify on broadcaster’s own website any alleged “breaking report” about a politician — going directly to bbc.com, ard.de, or any named German broadcaster — before sharing or acting on the content. Matryoshka videos are not published on the real outlets’ websites, because they were never made by those outlets. Additional signals: the content typically makes personal-misconduct allegations rather than policy criticisms; it appears first on social media rather than the outlet’s own channels; and it only targets politicians whose positions are hostile to Russian strategic interests. The BfV’s public warning itself is a readable guide — if the party a video attacks is on the BfV’s list of targeted parties rather than the two parties the network has consistently spared, that is an independent reason to treat the content with increased skepticism.