Adversary Intelligence — 2026-11-02

Russian Storm-1516 Network Targets Third US Senate Candidate With AI-Fabricated Local News Video Before Midterms

BLUFStorm-1516 will likely target at least one additional US candidate with a fabricated video before November 10, and federal countermeasures are too degraded to blunt the spread before votes are cast.

On October 26, pro-Russian X account @X_Global_tv posted a fabricated Cleveland 19 newscast alleging four former staffers accused Ohio Senate candidate Sherrod Brown of sexual assault. NewsGuard found it used dubbed audio over authentic footage from an October 21 segment, and the station's news director said, "We have reported no such thing" 1. PolitiFact reported that Storm-1516 also altered a WABI-TV report on Maine's Troy Jackson to claim he threatened staff with an axe 2. Clemson's Darren Linvill tied the accounts sharing the new videos to earlier Storm-1516 content 34, and the Gnida Project attributed the Cleveland 19 video to the network 1. X suspended the initial accounts, but copies with hundreds of shares remained online Tuesday 34.

Analysis
We assess with high confidence, based on three candidate-targeted fakes in about two weeks, consistent attribution across independent outlets, and a rising tempo toward Election Day, that Storm-1516 is escalating. The network has shifted from AI-generated personas, as in the earlier Talarico deepfakes, to altered authentic local newscasts, and private researchers again made the attribution without any US government statement. Takedowns do not halt spread, since copies with hundreds of shares outlived X's suspensions. With CISA and federal relay channels to election officials at their weakest since 2016, fact-checkers, newsrooms and campaigns carry most of the defense. A new Storm-1516 fabrication aimed at a US candidate other than Brown or Jackson will likely be publicly reported by a fact-checker by November 10. Sourcing rests on a single primary report from NewsGuard, with PolitiFact, Fast Company and MPR News corroborating, so convergence is broad but the original reporting base is thin. The cluster may instead be a small, low-engagement operation whose reach is inflated by coverage, and the next fake could reuse an already-targeted candidate. If a new target surfaces, campaigns and station news directors should pre-position rapid denials and takedown requests. If none does, resources can shift to the election-integrity narratives expected after polls close.
4 sources
  1. In pivotal Senate race, Russia targets another Democrat; Japan PM assassination faked by China - NewsGuard Reality Check
  2. Russian influence operation linked to attacks targeting Democrats in Maine, Ohio, Texas - PolitiFact
  3. Fake videos possibly linked to Russia are targeting these two Democratic Senate candidates - Fast Company
  4. Disinformation videos, likely from Russia, are exploiting real people to malign Senate candidates - MPR News

View in full brief →

UNCLASSIFIED // OPEN SOURCE