When France’s security services say a Kremlin-linked network is already working to shape the next presidential race, they are not describing an isolated scare but the latest round in a long, methodical campaign to manipulate French public opinion from abroad.
Key Points
- French authorities recently traced a disinformation campaign against Raphaël Glucksmann to Storm‑1516, a network they link to Russian intelligence.
- The operation used cloned media websites, forged documents, and AI‑generated audio and video to fabricate a “scandal” designed to damage Glucksmann’s credibility.
- Storm‑1516 and related pro‑Kremlin networks have also targeted other French politicians, including presidential hopeful Édouard Philippe and local candidates, ahead of key elections.
- These episodes fit a broader pattern of Russian interference efforts in French votes since at least 2017, combining hacks, leaks, propaganda, and deepfakes.
- France has responded by building institutional defenses, notably the Viginum agency and a wider “toolkit” for monitoring and countering foreign disinformation.
France’s Latest Warning: Storm‑1516 and the 2027 Presidential Race
The immediate trigger for renewed concern in Paris was a highly targeted operation aimed at Raphaël Glucksmann, a left‑wing member of the European Parliament and one of the figures widely discussed as a potential presidential candidate for 2027. According to a French security source cited by AFP and national media, the campaign was detected in late July and quickly attributed to “Storm‑1516,” a disinformation network previously documented as linked to Russian military intelligence.
The mechanics of the attack illustrate how far these operations have evolved. Investigators and open‑source researchers describe a cloned version of the investigative outlet Blast, complete with copied branding and layout, used as a vehicle for fabricated investigative reporting. Within that fake environment, actors published forged documents and employed AI to reproduce the voice of a well‑known journalist, lending the narrative a veneer of authenticity. The core allegation: a concocted conspiracy in which Glucksmann’s partner, television host Léa Salamé, supposedly bribed their broadcaster to promote his agenda and tilt coverage in his favor. The story was then pushed out through coordinated social media accounts, including likely bots, to simulate organic outrage and raise doubts about Glucksmann’s integrity.
From Individual Smears to a Strategic Campaign Against French Democracy
Glucksmann’s case is not an aberration; it is one episode in a systematic effort to weaken confidence in French democratic institutions and shape electoral outcomes. France’s defense ministry and independent researchers have linked Storm‑1516 to a series of operations in the French information space since 2024, many of them timed to elections or nationally significant events. Earlier narratives pushed by the same network ranged from fabricated scandals about Ukrainian refugees to inflammatory content around the Paris Olympics, all designed to polarize debate and erode trust.
Politicians from different parts of the spectrum have been targeted. Former prime minister Édouard Philippe, who declared his candidacy for the presidency, faced a campaign spreading false claims about his health, again associated with Storm‑1516. A separate operation impersonated the website of Paris mayoral candidate Pierre‑Yves Bournazel, publishing fabricated content to undermine his campaign; French officials publicly accused a Russian group tied to military intelligence of orchestrating that interference. The common pattern is clear: clone or forge the familiar—websites, logos, journalistic voices—and inject false narratives that, once shared and discussed, blur the line between established media and manipulated content.
Technical Playbook: Cloned Brands, Deepfakes, and AI Amplification
Russian‑linked interference in France today is less about crude propaganda and more about exploiting the texture of local media ecosystems. Investigations highlight scores of newly registered websites dressed up to resemble French outlets, from national dailies to niche online platforms. These sites deliver “near‑seamless” deepfake videos, AI‑generated articles, and fabricated documents tailored to existing political fault lines—immigration, Europe, Ukraine, social inequality—so that the disinformation feels like a continuation of domestic argument rather than an imported script.
Storm‑1516 itself has been mapped as a hybrid network: a Moscow‑based propagandist, John Mark Dougan, working with AI tools and a constellation of anonymous domains, Telegram channels, and social media accounts to seed and then amplify false stories. In several French cases, AI‑reproduced voices of recognizable journalists have been used to narrate invented investigations, while deepfaked video “evidence” is woven into articles that imitate the fonts, layouts, and author bylines of genuine outlets. Once online, these pieces are pushed by bot networks and sympathetic influencers, often with hashtags and framing designed to attract fact‑checkers and mainstream journalists—forcing newsrooms to spend time debunking lies, which itself increases their visibility.
A History of Interference: From Macron’s 2017 Campaign to Today
The current fears are grounded in a decade of experience. In 2017, Emmanuel Macron’s presidential campaign was hit by a large‑scale hack‑and‑leak operation just hours before the second‑round vote. A trove of internal emails and documents—some genuine, some apparently fabricated—was dumped online, in a pattern closely resembling the 2016 U.S. election interference case. French and international analyses later attributed the intrusion to APT28 / Fancy Bear, a group associated with Russian military intelligence. Although the timing minimized electoral impact, the episode convinced Paris that its elections were a live target.
Beyond hacking, French officials have repeatedly accused Kremlin‑backed outlets RT and Sputnik of pushing distorted or outright false narratives about pro‑EU candidates, including Macron, while boosting more Russia‑friendly figures. Those stories, carrying personal attacks and conspiracy‑colored claims, were then recycled by partisan websites and social media pages inside France, making attribution and response more complicated. As one analysis put it, 2017 became a “showcase” of the Kremlin’s playbook: combined personal smears, false narratives, hacks and leaks, and a multi‑layered amplification strategy running from “cyber underground” forums to mainstream television.
France’s Institutional Response: Viginum and a National Toolkit
Confronted with repeating cycles of interference, France has invested heavily in institutional defenses. Central to this response is Viginum, a dedicated agency under the prime minister’s office tasked with detecting and analyzing foreign digital interference. Viginum’s reports have publicly documented roughly two dozen separate attempts—primarily Russian and Chinese—to influence legislative and European elections in 2024, often by circulating fabricated videos and divisive narratives across major platforms.
Alongside Viginum, the French foreign ministry and other bodies have developed what they describe as a “toolkit” against disinformation: systematic monitoring of foreign propaganda, rapid public attribution where evidence allows, diplomatic measures such as expelling individuals seen as conduits for Russian campaigns, and support for independent fact‑checking initiatives. One high‑profile case saw France expel a Russian media commentator for acting “as a conduit for disinformation campaigns” aimed at destabilizing public order, underscoring that Paris views information operations as a security threat, not merely a media ethics issue.
How Effective Are These Interference Campaigns?
There is an understandable tendency to assume that every foreign operation shifts votes dramatically; the evidence is more nuanced. In the 2017 case, detailed analysis by think tanks such as CSIS concluded that Russian interference neither altered the outcome nor seriously antagonized French society; Macron won decisively, and the leaks failed to gain broad traction before the vote. Similarly, a review of the 2022 presidential election found no significant evidence of foreign involvement in the disinformation that did circulate around that contest.
Where these operations appear more successful is in shaping the background noise of politics: flooding the information space with contradictory narratives, undermining trust in mainstream media, and convincing some citizens that “everyone lies” so there is no point distinguishing between vetted reporting and anonymous Telegram posts. For a foreign power seeking to weaken support for Ukraine, European integration, or sanctions policy—as analysts say is the case with Storm‑1516—the goal is long‑term corrosion of consensus, not necessarily flipping a single election.
Why France Is a Prime Target
France sits at the intersection of several strategic interests for Moscow. It is a central player in EU decision‑making, a significant military power, and one of the loudest voices in support of Ukraine and against Russian aggression. When French leaders call out Russian war crimes, push for additional sanctions, or deepen defense cooperation with partners, they become natural targets for informational retaliation.
Moreover, France’s political landscape—fragmented into multiple parties, with strong extremes on both left and right and an increasingly online campaign culture—offers fertile ground for manipulation. Pro‑Kremlin narratives can attach themselves to existing grievances about globalization, NATO, or perceived elite arrogance, allowing foreign scripts to travel under domestic colors. That is why operations like the fake Blast website and AI‑generated “investigations” focus not on abstract geopolitics but on personal scandals and media trust: they work where French politics is already sensitive.
Looking Ahead: What Defending the 2027 Election Will Require
French authorities’ recent statements about Storm‑1516 “beginning operations to destabilise the 2027 election campaign” are not alarms about the distant future; they are acknowledgments that the contest has already begun in the invisible layer of the information space. Defending that election will require continued technical monitoring and attribution, but also something more demanding: persuading citizens to care about the provenance of what they see and share.
France’s experience suggests three durable lessons. First, resilience matters: when political actors respond quickly and transparently to fabricated scandals, the oxygen available to disinformation shrinks. Second, institutions like Viginum can make foreign interference visible and costly for its sponsors, especially when paired with diplomatic and legal consequences. Third, strengthening independent media and fact‑checking, and teaching digital literacy across age groups, is not a luxury add‑on but a core component of national security in an era when foreign intelligence services can impersonate a journalist’s voice with a few minutes of audio.
The story of Russian meddling in French elections is therefore not simply about Moscow’s intent; it is about how a modern democracy adapts to an environment where the battlefield includes cloned websites, synthetic voices, and viral lies. The campaigns aimed at Raphaël Glucksmann and other French politicians show that adaptation is now a permanent task, not a one‑off response—and that the integrity of elections hinges as much on the health of the information ecosystem as on the count of ballots themselves.
Sources:
insiderpaper.com, euronews.com, lemonde.fr, politico.eu, afpc.org, insightnews.media, disinfo.eu, apnews.com, ground.news, csis.org, quointelligence.eu, idmo.it, youtube.com, consilium-europa.libguides.com, gmfus.org, abc.net.au, congress.gov, facebook.com, ghrd.org, reddit.com, 24newshd.tv, uk.news.yahoo.com, en.wikipedia.org, pbs.org, dw.com
