This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
A Russian-linked disinformation group, identified by Microsoft as Storm-1516, conducted a campaign using a fake news website and AI-generated deepfake videos to falsely accuse U.S. Vice President Kamala Harris of a 2011 hit-and-run accident. The campaign utilized synthetic media, including fabricated victim testimony, to influence public opinion ahead of the 2024 U.S. election. Analysis confirmed the media was manipulated and the underlying claims were entirely meritless.
A Russian disinformation campaign allegedly used a fake news site, "KBSF-San Francisco News," and an AI-generated deepfake video to falsely accuse Kamala Harris of a 2011 hit-and-run accident in San Francisco. The deepfake featured a fabricated African-American victim, whose AI-generated testimony spread widely across social media. Microsoft identified the hoax as part of Russian cyber influence operations targeting the 2024 U.S. election, with the site registered in Iceland.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to conduct large-scale disinformation campaigns, malicious surveillance, or targeted and sophisticated automated censorship and propaganda, with the aim of manipulating political processes, public opinion, and behavior.
The incident involves a coordinated, state-linked disinformation campaign using AI-generated deepfakes to influence the U.S. presidential election and manipulate public opinion at scale.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by human actors (the Russian disinformation group Storm-1516) intentionally deploying post-deployment generative AI tools to create deceptive deepfakes.
Added categories peak at 4: Severe (Epistemic Harm, Indirect)
A Russian-linked group deployed sophisticated AI-generated deepfakes to falsely accuse U.S. Vice President Kamala Harris of a hit-and-run. This incident represents a severe information warfare and sovereignty threat, leveraging synthetic media to actively manipulate the democratic electoral process of a sovereign nation.
The reports describe the AI being used to generate and manipulate video and audio content (deepfakes) to support a fabricated story. The AI functioned as a tool performing specific, well-defined generation tasks based on direct human inputs without autonomous planning or decision-making.
Limited Risk: The report describes the creation of deepfakes ('AI-generated content such as deepfakes'), which falls under Risk Level 3 due to transparency obligations to inform users that the content is AI-generated.
The AI system was primarily used to generate a highly realistic deepfake video of a fake victim, including synthetic voice generation to make the fabricated story believable.
The reports provide consistent, detailed accounts from credible sources like Microsoft Threat Analysis Center and TrueMedia regarding the nature of the deepfakes, the platforms involved, and the specific actors (Storm-1516) behind the campaign.
None. The evidence clearly points to a coordinated, politically motivated disinformation campaign using synthetic media.
While the specific AI generation software is not named, this detail is not necessary to confidently classify the incident's domain, causal factors, or harms.
Technology
AI Deepfake Generation
AI was used to synthesize highly realistic voices and facial expressions.
Social Media Platform Algorithms
Algorithms rapidly amplified deceptive videos to millions of viewers.
Voice Manipulation Tools
TrueMedia identified a 97 percent probability of AI-generated audio.
Data Inputs
Fabricated Victim Testimonies
Actors and AI-generated avatars were used as inputs for fake stories.
Misappropriated Academic Images
Real orthopedic x-ray scans from 2010 and 2017 were used to fake injuries.
Spoofed Media Brand Elements
Fake domains like KBSF-TV were registered to mimic local news outlets.
Human Factors
Malicious State-Backed Actors
Russian, Iranian, and Chinese groups actively targeted US elections.
Voter Confirmation Bias
Emotional narratives easily deceived users into sharing fake news.
Lack of Source Verification
Viewers shared deepfakes without verifying facts with credible outlets.
Process and Methods
Inadequate Content Moderation
Platforms failed to block fake videos before they gained millions of views.
Easy Domain Registration
Fake news domains were easily registered anonymously in foreign countries.
State-Level Leak Campaigns
Hack-and-leak operations bypassed traditional campaign security.
Management
State-Sponsored Orchestration
Foreign governments funded and directed systematic cyber influence campaigns.
Coordinated Troll Operations
Groups like Storm-1516 managed multiple sites to amplify fake narratives.
Campaign Security Failures
Inadequate email security allowed foreign spear-phishing to succeed.
Regulatory Environment
Jurisdictional Escape
Malicious actors fled to Russia to evade US criminal investigations.
Weak Platform Accountability
Lack of regulations allowed platforms to host unverified election deepfakes.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
