Report Details Doppelgänger’s Resilient Influence Operations and Multi-Platform Reach

Article Details

Publisher

DomainTools Investigations

Scope

Russian-linked influence operations, publishing infrastructure, synthetic personnel, and cross-platform amplification targeting Western audiences.

Key Statistics

• Major Telegram amplifier channels collectively exceed five million subscriber accounts; overlapping subscriptions mean this is not a unique-audience count.
• Estimated historical unique Telegram exposure per narrative wave is approximately 1.2–2.4 million viewers, accounting for subscriber overlap.
• Baseline narrative waves are estimated to reach 1.5–2.7 million users, generate 100,000–300,000 interactions, and produce 10,000–40,000 secondary mentions.
• High-intensity, event-driven waves are estimated to reach 3–5 million users, generate 250,000–700,000 interactions, and produce 40,000–100,000 secondary mentions.
• Investigations cited by the report documented approximately 39 coordinated accounts in one operation targeting U.S. audiences and more than 1,000 coordinated accounts in other clusters.

Recommendations

• Monitor domain registration, rotation, reused website templates, redirect chains, synchronized posting, and cross-platform narrative propagation together.
• Sustain domain seizures and infrastructure takedowns, collaborating with registrars and hosting providers to slow replacement cycles.
• Detect and suspend coordinated social-account clusters and amplification networks exhibiting synchronized behavior.
• Monitor Telegram amplification channels for early warning and visibility into narrative propagation.
• Address reusable fabricated personnel and personas alongside infrastructure during disruption efforts.