AI-generated YouTube network spreads geopolitical disinformation at scale
Free public brief. The indicators, the detections with Splunk SPL already written (plus Elastic and KQL where they apply), and a Slack alert the next time this touches a vendor you run are in the app — free account, no card.
26 coordinated YouTube channels deploy AI-generated content blending real news with fabricated events, accumulating 1.8B views targeting Russian and English speakers.
The DFRLab identified a coordinated network of 26 YouTube channels systematically publishing AI-generated political content about Russia's war in Ukraine and other geopolitical topics. The network employs synthetic news anchors, LLM-generated scripts, automated narration, and AI-generated visuals to produce high volumes of content at minimal cost. Collectively, the channels have accumulated nearly two billion views and close to two million subscribers, with content targeting both Russian-speaking and English-speaking audiences across Russia, Europe, and internationally.
A defining tactic of the network is blending factual geopolitical reporting with entirely fabricated events—such as fictional attacks on Ukrainian infrastructure, alleged strikes on Polish military targets, and AI-generated footage of US capture of Venezuelan leaders—all delivered in the same neutral tone and professional style as legitimate news. This hybrid approach leverages credibility built through accurate coverage to make false narratives more persuasive and harder for viewers to distinguish from real reporting. Coordination indicators include duplicated or near-identical videos across channels, similar branding conventions mimicking real news outlets, synchronized posting schedules, synchronized pauses and reactivation, and parallel thematic shifts (Armenia-Azerbaijan coverage pivoting to Ukraine, then Iran).
The operation demonstrates how AI production pipelines can achieve sustained algorithmic amplification within YouTube's recommendation ecosystem. While individual videos range from single digits to millions of views, the cost per video remains negligible due to heavily automated workflows. The channels lack disclosure of synthetic content and AI use beyond YouTube's default machine-dubbing labels, potentially violating YouTube's misinformation and synthetic content policies, as well as EU Digital Services Act transparency and systemic risk mitigation requirements.
Source reporting: https://dfrlab.org/2026/03/23/ai-generated-youtube-channels-co-opt-war-coverage-to-farm-nearly-two-billion-views
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), the actors and CVEs it names as live profiles, and the vendor research on the same campaign — the primary source the news paraphrased, cited and read directly.
It sits in a corpus of 13,854 reports from 146 sources, 616 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Name the vendors you run and Slack hears about the reports that touch them — about forty a week that are yours, not the four hundred that are not.
Create a free account What it costs