IThe apparatus
The principle is formidably simple. Take an article from Le Monde, Le Figaro or 20 Minutes. Copy it exactly: layout, typography, bylines. Replace the content with a fake: France ruined by aid to Ukraine, a corrupt minister, an army at breaking point. Publish it all on a lookalike domain, one letter away from the real one. Then buy advertising and activate networks of accounts to carry the link to millions of readers, who recognise the layout but never read the address.
VIGINUM, the French agency for vigilance against digital interference, has counted 355 domain names impersonating French media. The list of targets states the ambition: Le Monde, Le Figaro, Le Parisien, La Croix, 20 Minutes, and even the website of the foreign ministry. Germany, Italy, the United States, Israel and Ukraine have their equivalents. It has lasted four years; it is lasting still.
IIFour years of pursuit
The timeline is the demonstration: every institutional response has been right, documented, insufficient. Between the discovery and the first sanctions, two years. Between a seizure of domains and their replacement, a few weeks. The defender proceeds by reports and court orders; the attacker, by domain registrations at a few euros each. The asymmetry of tempo is the heart of the problem.
Attack by the week, response by the year
TIMELINE OF THE APPARATUS AND THE RESPONSES · 2022-2026
SOURCES: EU DISINFOLAB, META, VIGINUM/SGDSN, EU, DOJ, FRENCH MINISTRY OF THE ARMED FORCES.
IIIWhat the seized documents reveal
The American court filing of September 2024 made public the internal documents of the Social Design Agency. What they show is an industry: country briefs, numbered targets, comment quotas to be met, dashboards, objective reviews. The assigned goals are explicit: weaken Western support for Ukraine, deepen internal divisions, degrade trust in the press. Hostile influence is not a nebula. It is an organisation, with indicators, budgets, and accounts to render.
“Three years of Russian informational offensive: anatomy of an invisible front.”
FRENCH MINISTRY OF THE ARMED FORCES, OFFICIAL PUBLICATION · TRANSLATEDThe uncomfortable conclusion must be drawn: if the attack is industrialised, the artisanal defence has already lost. The correction published three weeks after the fake Le Monde front page catches no one; the audience reached by the advertising will never read it. The only defence at the level of the problem is an infrastructure: permanent watch on the domain registries, clones detected within the hour, a sourced rebuttal in under a day, relationships with the platforms and the authorities built in advance. All of it exists before the attack, or it does not exist.
IVWhy families are concerned
Doppelgänger targets states. But the technique is now within anyone’s reach: cloning a reference site costs a few hundred euros, and generative AI has removed the last obstacle, the production of credible fakes at volume. What applies to Le Monde applies to a family group’s website, to a family’s statement, to a foundation’s page. A prominent family whose public word is not authenticated, through channels of its own, an established record, a reference presence in the search engines and the AIs, offers its adversaries the very surface Russia found in the European press.
- Editorial sovereignty is watched like airspace. Domain registries, counterfeit variants, clones at birth: what is not detected within the hour will be endured for a month.
- The rebuttal is an infrastructure, not a press release. A sourced response in under twenty-four hours, alert channels agreed in advance with platforms and authorities: all of it is built before the attack.
- The adversary runs on indicators. The defence must count too. The seized documents show an industry run on dashboards. A defence that measures nothing cannot say whether it is holding.
- What reaches states will reach families. The technique always descends the ladder of targets. The cost of the fake has collapsed; the value of the authenticated word rises accordingly.