Threat analysis by The RabitaNoor (RBTN) Cyber Research Center
Russian Influence Operations Targeting Moldova's 2025 Parliamentary Elections
The goals of this document is to provide technical and strategic analysis of a much larger document, audio etc.
The document is a product of the RBTN - CYOI Pulpit
Photo by Yeshi Kangrang
Document Summary
Ahead of Moldova's September 28, 2025, parliamentary elections, multiple Russia-linked influence operations (IOs) are active, aiming to destabilize the elections and hinder Moldova's EU accession. Key operations include Operation Overload, Foundation to Battle Injustice, and Operation Undercut, targeting Moldovan President Maia Sandu and the ruling Party of Action and Solidarity (PAS). These IOs project negative narratives about Moldova's EU integration and promote closer ties with Russia. The report highlights the involvement of Moldovan oligarch Ilan Shor and his organization Evrazia, as well as the pro-Russian media network Moldova24. The influence operations are part of a broader strategy to undermine Moldova's electoral integrity and public trust, with potential impacts on voter turnout and media integrity.
Analysis
Overview
Timestamp: 2025-09-28
Title: Russian Influence Operations Targeting Moldova's 2025 Parliamentary Elections
Severity: High
The diamond model analysis reveals Russian state-linked actors as adversaries conducting influence operations targeting Moldova's 2025 elections. Their capabilities include disinformation and deepfake technology, utilizing infrastructure such as social media platforms and websites. The primary victims are Moldovan government and citizens, with a focus on undermining electoral integrity and public trust.
Adversary
Adversary: Russian state-linked actors conducting influence operations to destabilize Moldova's elections.
Motivation: To destabilize Moldova's political landscape and hinder its EU integration.
Sophistication: High, involving coordinated disinformation campaigns and social media manipulation.
TTPs:
- Disinformation
- Social media manipulation
- Deepfakes
Capability
Capability: Use of disinformation, deepfakes, and social media manipulation to influence public opinion.
Tools: Social media platforms, Deepfake technology, Automated bots
Evasion: Impersonation of legitimate news sources
Infrastructure
Description: Network of social media accounts and websites used to disseminate disinformation.
Domains: moldova24.online, fondfbr.ru, news-pravda.com
IPs: 91.218.228.51, 95.181.226.185
Hosting Providers: Eurobyte LLC
Communication Protocols: Telegram, TikTok
Victim Profile
Targets: Moldovan government and citizens, particularly targeting pro-EU political entities.
Industry: Government, Media
Assets: Public opinion, Electoral integrity
Data at Risk: Public trust, Political stability
Impact: High