Adversary Intelligence — 2026-09-06
CEPA Analysis Documents Russian Storm-1516 Network Targeting French Presidential Candidates With Deepfakes and Fabricated News
BLUFStorm-1516's sustained deepfake campaigns against Philippe, Attal, and Glucksmann are very likely to produce at least one more attributed operation within three months, systematically degrading the anti-Le Pen candidate field before the 2027 presidential vote.
A CEPA analysis published September 4 documents a pattern of Russian information operations targeting French presidential candidates, citing deepfakes and fabricated news reports that have spread unfounded claims about the health or alleged corruption of former Prime Ministers Édouard Philippe and Gabriel Attal and MEP Raphaël Glucksmann 1. VIGINUM, France's foreign-interference monitoring agency, attributed a February campaign falsely linking President Emmanuel Macron to Jeffrey Epstein to the Storm-1516 network, tied to Russian military intelligence 23. That operation used a fabricated France-Soir website, AI-dubbed video, and doctored Justice Department email screenshots referencing Epstein and modeling agent Jean-Luc Brunel, amplified on X by accounts including @LoetitiaH 23. The French Foreign Ministry said Storm-1516 has been used in 77 information campaigns against France, Ukraine, and other Western countries since 2023, including during France's June 2024 legislative elections, and stated France "strongly condemns" the Russian actors and intermediaries involved 4.
AnalysisVIGINUM's formal attribution ties Storm-1516 to GRU-linked infrastructure and confirms Kremlin operators are testing deepfake and document-fabrication techniques against the specific candidates best positioned to consolidate anti-Le Pen votes ahead of the April-May 2027 vote, an institutional finding anchored by French Foreign Ministry confirmation and independently corroborated by France 24 and Euronews reporting rather than open-source researchers alone. French authorities will
very likely attribute at least one additional Storm-1516 campaign against a French political figure within the next three months, given the network's documented use across 77 operations since 2023 reflecting sustained tasking rather than opportunistic activity. Confidence in this judgment is high, resting on VIGINUM's consistent detection record and the network's persistent tempo. Antibot4Navalny found no proven direct link between Storm-1516 and the simultaneous Matryoshka campaign beyond shared timing and targets, and independent analysis now assesses real-world reach has stayed limited despite continued targeting. A new attribution within that window would trigger DSA-based platform enforcement and added VIGINUM resourcing before candidate selection; absent one, France's counter-disinformation posture holds steady.
4 sources
- Can Russian Meddling Swing Frances Presidential Election? - CEPA
- France detects Russia-linked Epstein smear attempt against Macron - France 24
- Russian actors behind smear campaign to frame Macron in the Epstein files - Euronews
- France strongly condemns Russian actors and their intermediaries implicated in the Storm-1516 manoeuvres - France Diplomatie (French Ministry for Europe and Foreign Affairs)
View in full brief →