Sergei Kiriyenko, first deputy chief of staff of the Russian Presidential Administration, set the goals for the Ukraine strand of the operation, launched in early 2023 under the codename "Uganda." Alexander Kharichev, now head of the Kremlin's Directorate for Monitoring and Analysis of Social Processes, oversaw it, according to hacked correspondence published by The Insider on 21 October.

Doppelgänger disguises Russian narratives as local news through cloned media sites, fake accounts, paid ads, and fabricated videos. The FBI named Kiriyenko among its orchestrators in 2024, and its contractor, the Social Design Agency (SDA), run by Ilya Gambashidze, is still expanding, now targeting AI chatbots. The new files go inside the Ukraine campaign and show the operation reporting even exposed fakes to the Kremlin as achievements.

Telegram channels posing as Ukrainian

An internal briefing on narratives says the project ran its Telegram channels on the principles of agent work and psychological operations, the Russian version of the investigation shows. Early on, the team decided to disguise all its outlets as Ukrainian and to run its campaigns without direct Russian propaganda. Every channel carried Ukrainian news to look unconnected to Russia. Dropping pro-Ukrainian themes, the briefing warned, would eventually expose the client and wreck the whole plan.

Explore further

Russia-linked bot networks kept their weekly rhythm after drone strikes on three Yandex data centers—disinformation monitor LetsData

Four goals and a can of stew

Kiriyenko set four goals: discredit Ukraine's military and political leadership, split its elites, demoralize its army, and disorganize its population. The SDA prepared the project's pitch and carried out the work.

Political strategist Alexander Asafov proposed fakes of his own: in May 2023, that soldiers were bribing commanders to avoid the front, and in January 2024, that Ukraine was pulling air defenses back to Kyiv to protect the authorities.

After an Il-76 military transport crashed in Belgorod Oblast on 24 January 2024, Moscow claimed it had been carrying Ukrainian prisoners of war. Kharichev's subordinate Yevgeny Kazakov, chairing a meeting in his place, proposed sending a fake to the widows of Ukrainian soldiers: "They died for an expensive Il-76—the Russians have few of those." The idea was dropped.

The same meeting produced another fake, and three days later the team launched it: that recruitment centers had sent widows a can of stewed meat with a little flag as compensation. The same producers also oversaw letters falsely attributed to Deputy Defense Minister Nataliia Kalmykova, the Russian version says.

Debunks filed as results

The SDA collected coverage of its work in a folder for the Kremlin. It filed the "Zelensky's yacht" story, which JD Vance, then a US senator and now US Vice President, echoed, together with its debunk. The report also included a TikTok campaign about former Defense Minister Oleksii Reznikov's family that the BBC had already exposed.

The Insider concludes that the team has had more failures than successes. The US sanctioned Gambashidze and the SDA in March 2024, and the UK followed in October.

Ukraine’s Security Service (SBU) detained two men suspected of scouting targets for Russian strikes on Sloviansk and Dnipro, the agency reported on 14 October. Catching both early let it secure Ukrainian reserve command posts and the gas stations the alleged agents had been hunting, the agency added.

Sloviansk anchors the northern end of the Fortress Belt, the chain of fortified cities that has held Ukraine’s defense of Donetsk Oblast since 2014. Russia is pushing to seize them, and its aircraft bombed a residential area of Sloviansk on 11 October. Where Ukrainian convoys stop and troops gather is exactly what Russian handlers allegedly asked these suspects to supply.

A gas station worker suspected of filming convoys

The first suspect worked at a gas station complex in Sloviansk, Donetsk Oblast. Russian intelligence allegedly reached him through a former classmate who left for Russia after the full-scale invasion and now works for its special services, the SBU said. He then allegedly used his phone to secretly film Ukrainian army convoys at or near gas stations. He was allegedly supposed to send the photos and videos to Russia to help it prepare a targeted strike. He also allegedly drove his own car around other gas stations and bridges that the Defense Forces use for logistics.

Spotted through Telegram comments

The second suspect, a former Pokrovsk resident, moved to Dnipro in 2024 and settled in a dormitory. Russian intelligence noticed him through pro-Kremlin comments he posted in Telegram chats, investigators say. A female handler in Russia allegedly tasked him with guiding missile and drone attacks on places in the city where Ukrainian troops and equipment were concentrated. He allegedly scouted on foot or took public transport to reach outlying districts.

Explore further

Ukrainians think their own security service is calling—it’s Russia recruiting saboteurs

Officers seized computers and smartphones containing evidence of the men’s alleged work for Russia. Both are suspected of treason under martial law and of unauthorized dissemination of information on Ukrainian troop movements or deployment, under Articles 111(2) and 114-2(2) of the Criminal Code. They remain in custody without bail and face up to life imprisonment with confiscation of property. The SBU’s office for Donetsk and Luhansk oblasts ran the operation under the Donetsk Oblast Prosecutor’s Office.