Microsoft details Russia-linked covert disinformation targeting Kamala Harris campaign
With Harris at top of Democratic ticket, her campaign moves into focus for Russia-aligned actors
The video was seen millions of times across social media, but some viewers were suspicious: It featured a young Black woman who claimed U.S. Vice-President Kamala Harris left her paralyzed in a hit-and-run accident in San Francisco 13 years ago.
In an emotional retelling from a wheelchair, the alleged victim said she "cannot remain silent anymore" and lamented that her childhood had "ended too soon."
Immediately after the video was posted on Sept. 2, social media users pointed out reasons to be wary.
The purported news channel it came from, San Francisco's KBSF-TV, didn't exist.
A website for the channel set up just a week earlier contained plagiarized articles from real news outlets.
The woman's X-ray images shown in the video were taken from online medical journals.
And the video and the text story on the website spelled the alleged victim's name differently.
The caution was warranted, according to a new Microsoft threat intelligence report, which confirms the fabricated tale was disinformation from a Russia-linked troll farm.
Shift in focus after Biden's exit
The tech giant's report, released on Tuesday, details how Kremlin-aligned actors that at first struggled to adapt to U.S. President Joe Biden dropping out of the presidential race have now gone full throttle in their covert influence efforts against Harris and Democrats.
It also explains how Russian intelligence actors are collaborating with pro-Russian cyber "hacktivists" to boost allegedly hacked-and-leaked materials, a strategy the company notes could be weaponized to undermine U.S. confidence in November's election outcome.
The findings reveal how even through dramatic changes in the political landscape, groups linked to foreign adversaries of the U.S. have redoubled their commitment to sway political opinion as the election nears, sometimes through deeply manipulative means.
They also provide further insight into how Russia's efforts to fight pro-Ukrainian policy in the U.S. are translating into escalating attacks on the Democratic presidential ticket. The report builds on previous concerns the U.S. has had about Russian interference in the upcoming election.
Earlier this month, the Biden administration seized Kremlin-run websites and charged two Russian state media employees in an alleged scheme to secretly fund and influence a network of right-wing influencers.
Russia-linked actors have spent several months seeking to manipulate American perspectives with covert postings, but until this point, their efforts saw little traction. Notably, some of the recent examples cited in the Microsoft report received significant social media engagement from unwitting Americans who shared the fake stories with outrage.
"As the election approaches, people get more heated," Clint Watts, general manager of the Microsoft Threat Analysis Center, said in an interview.
"People tend to take in information from sources they don't really know or wouldn't even know to evaluate."
Effort to create authentic-seeming accounts
Microsoft explained that the video blaming Harris for a fake hit-and-run accident came from a Russian-aligned influence network it calls Storm-1516, which other researchers refer to as CopyCop.
The video, whose main character is played by an actor, is typical of the group's efforts to react to current events with authentic-seeming "whistleblower" accounts that may seem like juicy unreported news to U.S. voters, the company said.
The report revealed a second video disseminated by the group that purported to show two Black men beating up a bloodied white woman at a rally for Republican presidential nominee Donald Trump. The video racked up thousands of shares on the social platform X, formerly Twitter, and elicited comments like, "This is the kind of stuff to start civil wars."
Microsoft's report also pointed to another Russian influence actor it calls Storm-1679 that has recently pivoted from posting about the French election and the Paris Olympics to posting about Harris. Earlier this month, the group posted a manipulated video depicting a Times Square billboard that linked Harris to gender-affirming surgeries.
The content highlighted in the report doesn't appear to use generative artificial intelligence tools. It instead uses actors and more old-school editing techniques.
Watts said Microsoft has been tracking the use of AI by nation states for more than a year, and while foreign actors tried AI initially, many have gone back to basics as they've realized the technology was "probably more time-consuming and not more effective."
Aiming to undermine support for Ukraine
Asked about Russia's motivation, Watts said the Russia-aligned groups that Microsoft tracks may not necessarily support particular candidates, but they are motivated to undermine anyone who "is supporting Ukraine in their policy."
Harris has vowed to continue supporting U.S. ally Ukraine in its fight against Russia's invasion if elected president.
Trump has demurred when asked about whether he wants Ukraine to win the war, saying in the recent presidential debate, "I want the war to stop."
At a forum in early September, Russian President Vladimir Putin appeared to suggest jokingly that he would support Harris in the upcoming U.S. election. Intelligence officials have said Moscow prefers Trump.
The Harris campaign declined to comment.
The Russian Embassy in Washington did not immediately respond to emailed requests for comment.