Ian Campbell 🏴

NEW RESEARCH!

@DomainTools Investigations researchers have spent the past several weeks pulling apart data from Russian threat actor Doppelganger to analyze recent campaigns and explore its technical and organizational structures.

#infosec #threatintel #cybersecurity

https://dti.domaintools.com/research/doppelganger-rrn-disinformation-infrastructure-ecosystem

DomainTools Investigations | Doppelgänger / RRN Disinformation Infrastructure Ecosystem 2026

Analysis of the Doppelgänger / RRN disinformation ecosystem. Learn how this DevOps-style infrastructure uses automated media impersonation, TLD rotation, and cloud-native hosting to target global audiences and evade enforcement.

Mar 2 at 7:41pmWeb
Show threadIan Campbell 🏴Mar 2
I cannot tell you how excited I am for this one to come out.
Show threadIan Campbell 🏴Mar 2
SHOOT. Standby 1, image upload issue making the graphs illegibly small. Team responsible is working it.
Show threadSig. Ug.Mar 2
@neurovagrant @DomainTools This is a great report, congratulations.
Show threadIan Campbell 🏴Mar 2
@sig_ug @DomainTools Thank you! We're very proud of it.