Imagine scrolling through your social media feed late at night and seeing a familiar logo — BBC, ARD, Deutsche Welle — and a headline that stops you cold. A Berlin mayor is accused of murdering a professional tennis player. A candidate for parliament has a hidden, scandalous past involving secret sex parties. It looks real. It reads real. But none of it is real. This is the deception of Operation Matryoshka, a Russia-linked disinformation campaign that has set its sights on Germany’s upcoming state election in Saxony-Anhalt, scheduled for September 6. The operation has been active since at least September 2023, and it was already running during Germany’s 2025 federal election, spreading fabricated stories through multiple layers of accounts and websites. The name comes from the Russian matryoshka dolls, and the parallel is exact: every time investigators peel back one layer of the campaign, another layer is waiting underneath. The targets are not random. The fake videos and impersonated media brands are designed to damage politicians who take a tough line against Moscow, including Berlin’s mayor Kai Wegner and Left Party candidate Eric Stehr, while leaving pro-Russian parties largely untouched. German security sources who spoke to Reuters believe the campaign is centrally directed from Russia, though no specific state institution has been officially confirmed. German authorities have described the operation as an attempt to influence voters and destabilize public trust, and they have responded by creating a new center devoted to countering hybrid threats. But before looking at the response, it is worth understanding how this hidden war is actually being waged, and why it is so difficult to stop.
The mechanics of the deception are as layered as the dolls the operation is named after. An anonymous research group called Antibot4Navalny, which helped uncover the Germany-focused effort, found that a single account first publishes a piece of fabricated content, often in a niche or hard-to-find corner of the internet. Then other bots and fake accounts redistribute it, amplifying the lie until it reaches real audiences. The content itself is carefully crafted to blend into everyday life: videos, images, memes, fake front pages, and even full journalistic formats are all part of the toolkit. Some of the material includes screenshots of fake articles that look as if they were pulled directly from well-known news websites. By copying the design layout of legitimate outlets like the BBC and German broadcaster ARD, the fake news becomes almost indistinguishable from actual reporting. It slides into a person’s daily scroll and is absorbed without question, which is exactly what makes it so dangerous. The design is meant to trigger an automatic sense of credibility before the brain has a chance to ask whether the source is real. One notorious example involved Kai Wegner, Berlin’s mayor. A fake video accused him of murdering a professional tennis player. The story was built on a grain of truth — Wegner had played tennis during a January 2026 blackout in Berlin “to clear his head” — and that tiny hook made the lie easier to attach. No tennis player had actually been reported missing, but the accusation was still widely shared. It was only after fact-checkers and journalists looked closely that the video’s provenance began to unravel. Left Party candidate Eric Stehr was subjected to even wilder falsehoods: he was accused of murdering his grandmother, killing someone out of jealousy, and taking part in secret sex parties. Stehr told ZDF that the accusations were so absurd they even contradicted each other. “I was supposedly the murderer of a model whom my boyfriend or girlfriend had cheated on me with – both versions were given,” he said. The sheer inconsistency exposed the fabrication, but by then the damage was already underway. The goal is not to be consistent. The goal is to muddy the water, to create enough noise that voters cannot tell truth from lies.
Who is behind Operation Matryoshka, and what is the strategy? German security services have told Reuters that they believe the operation is centrally directed from Russia, although they have not been able to tie it conclusively to one government agency. Instead, the campaign is allegedly conducted through several companies that use social media to distribute videos carrying the logos of reputable media outlets. The typical path begins on pro-Russian websites or platforms like Telegram, often using the so-called Pravda network of pseudo-news sites, before being pushed onto mainstream platforms such as X, TikTok, and Bluesky. There are also reports of troll farms being used to create fake comments and drive engagement, making the stories seem more organic than they actually are. From there, the fake stories are picked up by real users, who may share them out of outrage or concern, never realizing they are part of an orchestrated influence operation. The selection of targets reveals a clear strategic logic. The campaign is designed to undermine politicians who are critical of the Kremlin while supporting parties that favor closer relations with Russia. German authorities confirmed that the far-right AfD and the far-left BSW, both of which have advocated warmer ties with Moscow, have not been targeted. This asymmetry is one of the clearest signs of a coordinated political operation rather than spontaneous online discussion. Julia Smirnova, from the Berlin-based Centre for Monitoring, Analysis and Strategy, told Deutsche Welle that this is not a sudden anomaly but part of a long-running Russian strategy. “This influence campaign has been active on several platforms since September 2023,” she said. “Its targets have included the federal election, elections in Moldova and Armenia, and the Olympic Games in France.” The operation, in other words, is not just about Germany. It is a flexible weapon that can be aimed at any country or event where Russia wants to shape public opinion. But the German focus is especially intense right now, because a regional election in Saxony-Anhalt is expected to be close, and because the stakes in the larger Russian conflict have made public opinion in Germany more important than ever.
The timing is not accidental. Saxony-Anhalt, a region in central-eastern Germany, is heading to the polls on September 6, and speculation is mounting about which party will come out on top. The region has often been seen as a bellwether for the broader political mood, which makes it an attractive target for foreign interference. Germany’s Federal Office for the Protection of the Constitution, the domestic intelligence agency, says it is aware of Operation Matryoshka and that its clear purpose is to influence the election result. Berlin is taking the threat seriously. In June, the government established the Joint Defence Centre for Hybrid Threats, a new body dedicated to countering foreign interference and disinformation. The center includes a working group specifically focused on disinformation and foreign interference, bringing together intelligence analysts, cybersecurity experts, and media monitors. Interior Minister Alexander Dobrindt called the broader threat “the shadow war of the 21st century,” arguing that the attackers’ ultimate goal is to destabilize Germany itself. The phrase may sound dramatic, but it is not hyperbolic. Foreign disinformation campaigns do not need to flip a single vote to succeed; they only need to make people distrust institutions, question the integrity of elections, and turn against one another. In that sense, a fake video that is later debunked can still do enormous damage. The lie has already been seen by thousands, the correction is rarely as viral, and a doubt has been planted in the public mind. That is why the German response has been so robust. Officials are not just trying to catch bots; they are trying to build resilience in the democratic culture. They have also made a point of publicizing the campaign, because awareness is itself a form of defense. When voters know that fake media brands are circulating, they are less likely to be fooled. But the effort is a race against time, and with the election only weeks away, the pressure is intense.
Operation Matryoshka is not isolated to Germany. Since the Russian invasion of Ukraine, the weaponization of information has intensified across Europe and beyond. Politicians’ reputations have been dragged through the mud in a variety of ways, often at the most sensitive moments. Moldova, which has been a frequent target of Russian influence operations, saw a wave of disinformation aimed at destabilizing the country during its own political crises last year. The same playbook appears again and again: take a real detail, wrap it in an outlandish accusation, attach the logo of a trusted news organization, and let the algorithms do the rest. It is easy to laugh at some of these absurd allegations — a mayor who supposedly murdered a tennis player, a candidate who allegedly committed multiple contradictory murders — but the laughter fades when you realize how effective the strategy can be. In a democracy, voters need a shared baseline of facts. When that baseline is shattered by a hundred small lies, people stop trusting the media, stop trusting election officials, and begin to retreat into self-reinforcing bubbles. The result is not a quick change in voting numbers but a slow erosion of faith in the entire system. That is why German security services, journalists, and researchers have worked so hard to expose Operation Matryoshka, decode its layers, and warn the public before the ballots are cast. They know that the campaign’s real target is not any single politician, but the democratic process itself. A society that cannot agree on what is true cannot solve its problems. And a democracy that loses its anchor in objective reality becomes vulnerable not just to disinformation, but to all the other forms of coercion that follow in its wake. This is the deeper danger that the matryoshka dolls hide inside their colorful shells.
Ultimately, Operation Matryoshka is a reminder that the battlefield of modern politics is not only physical. It is also digital, psychological, and deeply personal. The campaign’s name is a near-perfect metaphor: just when you think you have uncovered one layer of falsehood, another appears beneath it. The first layer is the fake video. The next layer is the bot network that amplifies it. Another layer is the legitimate-looking media design that gives it credibility. And at the center of it all is a simple, devastating human vulnerability — our instinct to trust what looks familiar. For voters in Saxony-Anhalt, and for everyone watching this election, the lesson is caution. Check the source. Look for confirmation in independent outlets. Be especially suspicious of stories that seem perfectly designed to confirm your existing beliefs. Germany’s new center for hybrid threats can help, and journalists and researchers can expose bot networks, but in the end, the first line of defense is an informed, skeptical public. The shadow war of the 21st century is not fought with heavy weapons alone; it is fought with images, whispers, and carefully engineered chaos. The answer is not to stop believing in anything, but to believe in things that can stand up to scrutiny. It is to hold onto the habit of questioning, even when the answer seems obvious, and to remember that the loudest story is not always the truest one. And perhaps that is the best way to open the matryoshka doll: not to be shocked that there is another lie inside, but to keep looking until you find the empty space at the center — the space where real understanding should live.