On November 9, a short video began to move across X with the force of something alarming and unresolved. It showed two men confronting a group after what sounded like shots fired overhead, in a setting described as Canada. Within a day, the clip had been watched more than 900,000 times in the posts tracked by researchers. The scene is chaotic in the way real moments often are: voices are raised, accusations are thrown, and the people filming are demanding that the group stop firing. There is no voice-over, no expert analysis, no clear context. The recording lasts only about 53 seconds. It captures complaints about shots allegedly passing overhead and the frustration of people who believe they were put in danger. But it does not capture the identity of the shooters, their immigration status, or even the exact location of the incident. It is natural to want an explanation, especially when a video shows something dangerous. But the explanation has to come from evidence, not assumptions. That has not stopped the video from being used as evidence for a much larger political argument. Russia’s state-controlled broadcaster RT helped spread the footage and described the people involved as “careless migrants.” Other posts went further, calling them “Indian migrants” and using the phrase “total remigration”—a term associated with far-right calls for removing immigrants from society. The problem is that none of these labels appears anywhere in the dialogue. No one in the video identifies the shooters as migrants, foreign nationals, or foreign residents. The circumstances of the incident remain independently unverified. This is a case where a real and frightening public-safety concern—reckless gunfire is a serious matter—is being fused with an unsupported claim about who is responsible. The danger of that fusion is not just that it is misleading; it is that it can turn a local incident into a national political weapon.
How the story spread matters as much as the story itself. The earliest identified copy in the collection reviewed by DisinfoWatch came from Max Genest, a Canadian commentator, who described the people in the video as “Indian migrants” and called for “total remigration.” About two hours and 46 minutes later, RT uploaded its own version and repeated the migrant label. That timing suggests Russian state media is actively monitoring the Canadian information space, ready to pick up and amplify content that fits its preferred narratives. It does not necessarily mean RT directed Genest to post anything. The available data does not show that RT produced the original footage or coordinated with Genest. But RT’s decision to attach its own distribution to an already loaded claim is a familiar pattern: take a real event, add an inflammatory label, and let the platform’s algorithms do the rest. Another account quoted Genest’s post to argue that mass immigration threatens public safety, which is a considerable leap from a 53-second clip of a confrontation. The video may indeed show reckless and dangerous behavior. But it cannot show what many of the posts claimed it showed: that immigration itself is the problem. The speed with which this leap was made is itself part of the story. In the modern information environment, a caption is not just a description of a video; it is a framing device that tells people what to think before they even press play. It can also tell them who to blame, and that is exactly what happened here.
The reach of these posts is worth examining carefully. DisinfoWatch reviewed a 24-hour X API collection that contained 797 posts gathered through searches for the video and related migration-and-shooting language. Not all of those posts were directly about this incident; the number is not a count of posts amplifying this video. But the most visible posts show how quickly a local event can become a global talking point. At the November 9 collection snapshot, Genest’s post had recorded 1,340,017 impressions, 910,228 video views, 21,323 likes, and 3,217 reposts. RT’s upload had recorded 139,352 impressions, 80,102 video views, and 550 reposts. Together, the two posts accounted for nearly 1.48 million displayed impressions. It is important to note that these are displayed impressions, not unique viewers, and the figures are drawn from the data available at that moment. Still, the scale is real. The difference between the two posts matters. The largest visible audience was on Genest’s upload, not RT’s. RT’s role was to carry an existing allegation through a Russian state-media channel, lending it institutional legitimacy even without manufacturing the original footage. As the clip moved beyond those two posts, the details began to mutate. A “UK Patriot” account described the incident as occurring in America, despite Genest’s Canadian setting. Another post introduced an unverified claim that the incident took place during a Diwali celebration. None of these additions was supported by evidence. But each new layer of narrative made the video more useful to a wider range of political actors. This is how a single ambiguous event can become a meme: it is reshaped to fit the concerns of different audiences, and with each resharing, the original facts become less important than the story the video is used to tell. The video is real; the meaning assigned to it is not.
This is not the first time Russian-linked accounts have used real unrest to push anti-immigration messages. In France, a similar method has been documented. On November 9, Reuters reported on an EU assessment of how the Matryoshka network—also called Operation Overload—exploited protests and riots in France. The network reportedly used accounts impersonating Western news outlets to circulate fabricated videos alleging migrant attacks and imminent terrorism, while trying to discredit French authorities. The goal was not to create the unrest from nothing; it was to use unrest that was already happening and amplify it in ways that served Russian interests. According to figures reported by the French Foreign Ministry and summarized by Meduza, the ten most-viewed pro-Russian posts about the French unrest drew an estimated 2.8 million views over three days in October. Accounts associated with the U.S. MAGA movement and Israeli sources also promoted immigration-related narratives during the same period, and those posts received substantially more views. European investigators did not find evidence that Russia instigated the French unrest. Their concern was exploitation: taking real events, injecting divisive narratives, and letting the content travel through networks of sympathetic or unwitting accounts. Reuters noted that it could not independently verify all of the findings in the assessments it reviewed. But the pattern is consistent with what happened in Canada. A real event is not necessarily invented. It is selected, labeled, and pushed into the information stream with a meaning attached. The label may be false, but it is designed to stick. The Canadian video fits that template almost perfectly: a genuine incident, a missing identity, and a label that filled the gap.
Why does this matter in Canada? The video may show a genuine and dangerous firearms-safety incident. If shots were fired over people’s heads, that is a serious matter for law enforcement. But the way the video was promoted turned it into a claim about an entire group: that immigration endangers Canadian public safety. The recording cannot establish the subjects’ nationality or immigration status, yet those assumptions became central to how it was framed. At no point in the supplied dialogue does anyone identify the shooters as migrants. At no point does an official source confirm their status. The evidence documents an unsupported immigration label attached to an apparently real confrontation, then amplified by RT and other accounts. It does not establish that there was a centrally coordinated campaign around this specific video. But it does show how quickly a local incident can be absorbed into larger political narratives. RT did not need to fabricate the incident in order to amplify a divisive interpretation of it. The framing can travel through shorter clips, new uploads, and cross-border political accounts. The available evidence cannot predict the scale of future circulation or demonstrate changes in public opinion. What it can show is that an event with no apparent connection to immigration was presented as proof of a threat from immigration. That is a dangerous kind of storytelling. It takes the understandable fear that people feel when they hear gunfire and redirects it toward a target that the evidence does not support. For Russian information operations, the objective is not necessarily to persuade Canadians that Russia is wonderful. It is to intensify conflict and division within Canadian society. A video like this is useful because it is ambiguous enough to be claimed by many sides and emotional enough to provoke a reaction before the questions are asked.
Looking ahead, it is reasonable to expect more of the same. Russian information operations appear to be intensifying their targeting of immigration-related issues worldwide, using disinformation and amplification of voices that align with this Russian government objective. This pattern will likely continue in Western democracies, including Canada. Immigration is a subject that stirs real passions, and that is precisely why it has become a preferred arena for information warfare. It is easy to understand why people share a clip like this: they are afraid, they are angry, and the caption offers a simple explanation for a frightening moment. But simple explanations are not always true explanations. The playbook is not always to create fake videos; it is often to find real videos, strip them of context, attach an incendiary label, and let the outrage do the work. The case of the gunfire video is a warning. It shows that the raw material of division is not always invented. It can be a real event, recorded on a phone, shared by a concerned person, and then reshaped by actors with larger agendas. The people watching the video deserve better than a caption that tells them who to blame without evidence. The people in the video deserve not to have their identities assumed for political purposes. And the public conversation deserves a standard of care that distinguishes between what a video shows and what a caption claims. As this content continues to circulate, the best defense is not simply to debunk the most obvious lies. It is to slow down, ask who is trying to frame the story, and refuse to accept that a 53-second clip can answer questions as large as immigration and public safety. That is a difficult discipline in an age of instant sharing. But it is the only one that prevents a real incident from becoming a false symbol. In the end, the clip from Canada is not just a story about gunfire or migrants. It is a story about how quickly evidence can be turned into ideology—and how much we lose when we let that happen.