Introduction
On August 12, Germany’s domestic intelligence agency, the Bundesamt für Verfassungsschutz, did something it doesn’t do often: it named a name in public. The BfV issued a warning identifying the Matryoshka network — the Russian operation that fabricates BBC and Reuters-branded video segments — as the infrastructure behind a coordinated push targeting four upcoming German elections: Saxony-Anhalt’s state parliament on September 6, Berlin and Mecklenburg-Western Pomerania on September 20, and local elections in Lower Saxony.
The mechanism is familiar to anyone who has followed this network before. AI-generated video, dressed in the visual language of the BBC and Germany’s ARD, carrying fabricated allegations — embezzlement, sexual harassment, abuse — against sitting and campaigning politicians. Posted in English, mostly, onto X, Bluesky, and TikTok, engineered to look like leaked or overlooked segments from real newsrooms rather than paid political content.
What makes this instance worth a closer look isn’t the fabrication itself. It’s the client list, and the fact that the client list is visible precisely because of who’s missing from it. According to Reuters reporting cited by German security officials, and confirmed by researcher Julia Smirnova of the Centre for Monitoring, Analysis and Strategy, the fake allegations hit candidates from the CDU/CSU, SPD, Greens, and Left party. They do not hit the AfD. They do not hit the BSW. In an operation built around manufacturing scandal, the two parties running unscathed are the two parties that happen to be the most Russia-aligned on the ballot.
That’s not a gap in coverage. It’s a signature.
What the Campaign Actually Does
The mechanics are the second generation of a tactic this platform has documented before, in The Borrowed Masthead, which traced Matryoshka’s 343-video push against Armenia’s June 2026 election using fabricated CNN and Reuters segments. The German operation runs the same playbook with a different target list and higher stakes: Saxony-Anhalt’s September 6 vote is projected to hand the AfD roughly 40 percent of the seats, potentially enough to govern the state alone — the first far-right-led German state government since the Second World War.
The fabricated segments borrow BBC and ARD branding because both outlets carry the specific kind of authority that a political attack ad doesn’t: the assumption of institutional distance from the story. A viewer who wouldn’t trust a partisan smear will often extend provisional trust to what looks like straight reportage, especially reportage carrying a masthead they already associate with fact-checked journalism. The videos exploit that gap between “this looks like news” and “this is an ad” — the same gap the Australian content-farm operation covered in The Microphone That Was Never Cut exploited with a fake ABC clip, though for a different payoff. That operation wanted clicks. This one wants seats.
Germany’s interior ministry has confirmed it is monitoring the campaign. As of this reporting, it says it is “not yet taking any active measures” — a posture that, whatever its legal justification, leaves five weeks of uncontested circulation before the first of the four elections closes.
The Tell Is What Didn’t Get Faked
Every disinformation campaign has to make choices about scope, and those choices are data. A network with the resources to fabricate BBC-branded video at volume, across multiple elections, in a foreign language, is not a network that ran out of time before it got to the AfD. The omission is deliberate, and deliberate omission is harder to explain away than a fabricated claim.
This is worth sitting with because it inverts the instinct most people bring to spotting propaganda. The reflex is to look for what’s being said — the invented scandal, the doctored image, the too-perfect villain. That’s where the emotional charge lives, so that’s where attention goes. But an operation’s actual allegiance is frequently legible in the negative space: who it declines to touch. A smear campaign against every major party except two isn’t ambiguous about its preferences just because it never says “vote AfD.” It says something closer to “everyone but them is compromised,” which, run at scale across four elections in the closing weeks of a campaign, produces roughly the same effect as an endorsement — without ever making a claim a fact-checker can mark false, because there’s no false claim being made about the untouched party. There’s just an absence.
Julia Smirnova’s framing captures the mechanism precisely: these campaigns “generally sought to discredit candidates from all democratic parties while supporting the AfD and BSW.” Support, in this case, doesn’t require a single positive claim about either party. It requires making every plausible governing alternative look compromised, one fabricated BBC segment at a time, until the party left standing looks — by contrast, and only by contrast — like the one nobody bothered to smear.
Why English-Language Video for a German State Election
One detail in the reporting is easy to skip past: the videos are predominantly in English, aimed at voters in German state elections. That’s not an operational mistake from a network sophisticated enough to fake a BBC chyron. It’s a distribution choice.
English-language content travels further on X, Bluesky, and TikTok than German-language content does — it’s legible to a bigger pool of accounts that can reshare, quote, and amplify it, including accounts with no connection to Germany at all. A fabricated scandal doesn’t need every viewer to understand it; it needs enough velocity that it reaches German voters through their own feeds once the amplification layer has done its work, arriving with the borrowed credibility of having already been shared thousands of times by people who look like ordinary users. The language choice optimizes for reach across the open, English-dominant layer of these platforms, using it as a delivery mechanism into a German-language political conversation rather than trying to seed the conversation directly.
Key Findings
- The BfV publicly named Matryoshka as the infrastructure behind a coordinated campaign targeting four German elections between September 6 and 20, 2026 — an unusually direct public attribution from German counterintelligence.
- Fabricated video impersonated the BBC and ARD, carrying invented allegations of embezzlement, sexual harassment, and abuse against candidates.
- CDU/CSU, SPD, Greens, and Left party candidates were targeted; AfD and BSW candidates were not — a targeting pattern researcher Julia Smirnova describes as consistent across the network’s broader Russian-aligned operations.
- Saxony-Anhalt’s September 6 vote is projected to give the AfD roughly 40 percent of seats, positioning it to potentially govern the state alone for the first time by a far-right party since WWII.
- Germany’s interior ministry confirmed monitoring but no active countermeasures as of this reporting, five weeks or less before the first affected election.
- The primary distribution language is English, not German — optimized for cross-platform amplification velocity rather than direct address to the target electorate.
Implications
The Influence Tactics Protocol scores content on mechanism, not message — and the mechanism worth naming here is selective omission functioning as endorsement. A reader evaluating any piece of “leaked footage” or “overlooked segment” content during a contested election should ask not just whether the claim is true, but who in the same information environment is conspicuously not being targeted by similar content. If four parties out of six are absorbing fabricated scandals and two are absorbing none, the two are not neutral bystanders in the operation — they are its intended beneficiaries, whether or not the operation ever says so directly.
This also sharpens what “media literacy” has to mean once the fabrications carry real broadcaster branding. Checking whether a BBC-logo video is real BBC output is necessary but no longer sufficient, because the next question — who does this operation never smear, across dozens of instances, over months — requires pattern visibility that a single viewer scrolling a single video cannot generate alone. It’s the kind of pattern that only becomes visible in aggregate, which is exactly why counterintelligence agencies and researchers tracking the full catalog of an operation’s output serve a function individual fact-checking can’t replace.
Conclusion
Matryoshka’s German push will likely generate its own individual debunkings in the coming weeks — a fake BBC segment here, a fabricated ARD clip there, each one traceable and each one, on its own, forgettable. The pattern that matters won’t show up in any single debunking. It shows up when you line up the target list against the ballot and notice that two names are missing from every version of the attack. An operation that fabricates scandal for four parties and none for two hasn’t stayed neutral by accident. It has simply found a way to campaign for a side without ever having to say so.