French watchdog Viginum links four disinformation attacks on Gabriel Attal to Russian network

Coordinated campaigns in August

French state agency Viginum, the service charged with detecting and countering foreign digital interference, identified multiple coordinated operations targeting Gabriel Attal during August 2026. Attal, the former Prime Minister and declared candidate for the Renaissance party in the 2027 presidential election, faced four distinct destabilization attempts over the course of three weeks. The operations used fabricated multimedia items across social media to spread falsehoods about his personal health and falsely accuse him of financial corruption. Attal declined to comment to journalists on the latest disclosures but lodged a formal judicial complaint regarding the attacks. Agency specialists confirmed that the digital campaigns relied on synthetic assets designed to imitate legitimate news broadcasting.

consists of a succession of videos broadcast for several days and containing narratives that are generally inauthentic, manifestly inaccurate or misleading, and disseminated through inauthentic means

Fabricated media and AI imagery

The disinformation sequence intensified across two documented phases on the social media platform X. On 12 August 2026, an operation distributed an artificial-intelligence-generated video depicting an unflattering caricature of Attal projected onto the walls of the Pantheon in Paris, accompanied by abusive slogans. French authorities initiated verification procedures to establish whether any physical projection occurred on site or whether the footage was entirely synthetic. One week later, on 19 August 2026, the network published ten falsified media assets, comprising at least five fabricated television reports and five forged front pages hijacking the visual identity of French and European outlets such as Agence France-Presse and Ouest-France. The fabricated reports asserted that Attal had been diagnosed with Parkinson's disease, claimed he faced criminal indictment for corruption, and alleged his political entourage participated in cyberattacks against the French tax administration.

The Matriochka modus operandi

Viginum technically attributed the campaigns to Matriochka, a pro-Russian information operation named after nesting dolls that has been active since late 2023. The operational method involves publishing forged press material on social networks, followed by coordinated accounts directly messaging mainstream journalists and newsrooms to demand coverage of the manufactured stories. Technical investigations showed that most of the fabricated videos and images first appeared on Russian Telegram channels before bot accounts distributed them to wider audiences on X. The perpetrators purchased views and deployed artificial amplification tools to simulate viral engagement across social feeds. The monitoring collective Antibot4Navalny, which tracks Russian-linked online influence operations, analyzed the network and determined that actual audience engagement remained negligible.

it involves a few hundred organic views per video

Judicial investigation and political targets

The targeted attacks against Attal form part of a wider pattern of digital operations aimed at French presidential candidates. The Paris public prosecutor's office announced formal judicial investigations into foreign interference on 6 August 2026 and expanded the inquiry on 18 August 2026. The judicial probe encompasses identical suspected interference operations targeting former Prime Minister Édouard Philippe as well as Social Democrat Member of the European Parliament Raphaël Glucksmann. French security services continue to monitor social media platforms for subsequent waves of manipulated content, while Viginum cautioned that broad public discussion of low-impact bot operations can inadvertently grant hostile actors the visibility their automated campaigns fail to achieve on their own.