Operation Overload is a Russian-aligned influence campaign that uses AI-generated voice-overs and manipulated media to impersonate trusted news organizations and institutions. The campaign aims to undermine support for Ukraine and disrupt domestic politics in NATO countries. While most content has low engagement, one viral video falsely claiming USAID paid celebrities to travel to Ukraine reached over 4 million views after being amplified by high-profile accounts.
Researchers at the Institute for Strategic Dialogue (ISD) report that Operation Overload (also known as Matryoshka or Storm-1679) is a Russian-aligned campaign leveraging purported AI-generated voiceovers and visual impersonations to spread false or inflammatory content across platforms. The campaign reportedly involved at least 135 discrete posts analyzed by ISD in early 2025 targeting institutions and individuals, including one purported viral video claiming USAID funded celebrity trips to Ukraine (see Incident 1061).
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to conduct large-scale disinformation campaigns, malicious surveillance, or targeted and sophisticated automated censorship and propaganda, with the aim of manipulating political processes, public opinion, and behavior.
Also classified as
The campaign generated specific false claims, such as USAID paying celebrities, which misled high-profile individuals and the public.
The incident involves a coordinated, state-aligned campaign using AI-generated content to spread political disinformation at scale, targeting public opinion and democratic processes in NATO countries.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was driven by human malicious actors who intentionally used AI voice cloning and video manipulation tools post-deployment to conduct a coordinated disinformation campaign.
Added categories peak at 4: Severe (Epistemic Harm, Indirect)
Operation Overload is a Russian-aligned influence campaign using AI-generated voice-overs and deepfakes to impersonate trusted news organizations and government entities. By targeting NATO support for Ukraine and attempting to disrupt democratic processes like the German federal election, the campaign represents a substantial information warfare and sovereignty threat with evolved AI delivery methods.
The reports describe the campaign creators using AI to clone experts' voices and manipulate video clips. The AI functioned as a tool to perform specific, well-defined generation tasks based on direct human inputs, without exhibiting autonomous planning or interactive assistant behaviors.
Limited Risk: The report describes the use of AI-generated content, specifically deepfakes and cloned voices, which falls under the category of 'AI-generated content such as deepfakes' requiring transparency obligations.
The campaign primarily relied on creating fake news videos by superimposing logos and using AI-cloned voices to impersonate journalists and academics, which constitutes deepfake video and voice generation.
The reports from the New York Times, ISD, and Washington Post provide consistent, detailed, and highly credible accounts of Operation Overload's tactics, targets, and the specific viral USAID incident. The role of AI (voice cloning and deepfakes) is explicitly documented, and the primary harms (epistemic, democratic norms, toxic content) are clearly delineated with specific metrics like the 4.2 million views.
None. The incident is clearly a coordinated foreign influence operation leveraging synthetic media.
While the specific AI model names are not identified, this does not prevent confident classification of the incident's dynamics, domain, and harms.
Technology
AI Voice Cloning
AI cloned voices of experts to make fake news clips sound highly credible.
Cheap Synthetic Media Gen
AI lowered the cost of generating high-volume, convincing fake videos.
Automated Bot Networks
Bot networks automatically amplified posts to simulate organic engagement.
Data Inputs
Impersonated Brand Logos
Using real media logos like E News to deceive users about source authenticity.
Real Footage Manipulation
Combining legitimate video clips with cloned AI audio to create fakes.
Human Factors
High-Profile Amplification
Prominent figures reposted the fake video without verifying its authenticity.
Confirmation Bias
Users embraced fake claims that aligned with their existing political goals.
Expert Impersonation Vulnerability
Audiences trusted cloned voices of unrecognisable but authoritative experts.
Process and Methods
Reduced Content Moderation
Social media platforms pulled back from actively moderating online content.
Delayed Verification Response
Fact-checking tools like Community Notes flagged the video only after virality.
Targeted Researcher Distraction
Campaign tagged research bodies to overwhelm them with debunking requests.
Management
Platform Tools Shutdown
Platform leaders shut down critical tools used by researchers to track fakes.
Inadequate Platform Moderation
Platform management failed to remove the flagged video even after debunking.
Lack of Policy Enforcement
Platforms failed to act quickly on reports of foreign influence campaigns.
Regulatory Environment
Disbanded Disinfo Units
Government units like the Global Engagement Center were shut down.
Canceled Research Grants
National Science Foundation grants for misinformation research were canceled.
Chilled Independent Research
Lawsuits and harassment chilled independent research on disinformation.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.