Europe — 2026-10-25

Italy Investigates Possible Russian Role in Milan Riots as Meloni Confronts Hybrid Warfare

BLUFIt is unlikely that Rome officially attributes the October unrest to Russian direction by November 30, as coalition divisions and absent technical proof will keep the charge rhetorical.

Defence Minister Guido Crosetto said on October 20 that the unrest in Milan and other cities on October 17-18 reflected hybrid warfare conducted through TikTok and YouTube, though he presented no intelligence naming Russia 12. Interior Minister Matteo Piantedosi said there is "no evidence yet" of links to Russia or France and no clear material proof of a directing hand, while investigators examine Telegram chats and TikTok recruitment 3. Open reported that intelligence assessments found traces of amplified online mobilisation with well-shielded sources, and that Palazzo Chigi says Russian direction cannot be asserted 2. Deputy Prime Minister Matteo Salvini rejected any Russian role 2, and EU Today reported that the European Commission declined emergency action against platforms, with Russia-linked networks Operation Overload and Doppelgänger found amplifying the unrest 1.

Analysis
Analysts have moderate confidence, resting on consistent ministerial statements that no material proof exists, offset by intelligence reporting that the origin points of the mobilisation appeals are shielded. It is unlikely that Italian authorities or the government officially attribute the October 17-18 unrest, in whole or part, to Russian state direction or Russian state-linked actors by November 30, 2026. Attribution requires technical identification of the first appeals, which investigators have not yet achieved. The coalition split, with Salvini rejecting any Russian role and Crosetto arguing hybrid warfare, leaves the government positioned to keep the charge at the level of rhetoric. Amplification by Operation Overload and Doppelgänger is documented, but exploiting unrest does not establish direction. Bloomberg is the only primary report, and the secondary outlets largely rework Italian ministerial statements, so convergence is broad but not independent. Rome may instead be deliberately withholding attribution while services trace the appeals, and a technical link to Russian-linked networks could produce a formal finding quickly. Such a finding would push Brussels toward Digital Services Act enforcement and Rome toward EU or NATO hybrid-threat measures, while its absence keeps the response a domestic public-order matter.

5 sources