IN THIS EDITION
ON THE RISE
Weekly Watch of Emerging Disinformation Risks
Incident or Deliberate Action? It Doesn’t Matter: Drone Crashes Are Always Good for Spreading Conspiracy Theories and Fearmongering
Russia is ultimately to blame for the drones that keep crashing on the fringes of the Russo-Ukrainian war. Sometimes the drones that go out of control are Ukrainian, such as the naval drone that exploded in Romania in early June, the one found in Greece in early May, or the aerial drones that crashed in Estonia or Latvia. Yet it is evident that if Russia were not attempting to conquer Ukraine, Kyiv would not be forced to launch frequent swarms of thousands of drones, with the attendant risk that some may be lost due to Russian electronic warfare measures or technical failures.
The only scenario in which Ukraine could reasonably be blamed would involve a false-flag operation by Kyiv: that is, if a Russian drone were deliberately redirected by Ukraine to strike a NATO member state in the hope of dragging it into a direct war with Moscow. To date, however, no convincing evidence of a Ukrainian false-flag operation has emerged in any of the incidents involving either Russian or Ukrainian drones. That, of course, has not prevented Russian disinformation outlets from advancing precisely this narrative, most recently in relation to the drone that crashed in Galați, Romania. Unfortunately, this false-flag conspiracy theory has also found support among far-right political groups in Romania and in other EU States.
There is, naturally, also a pro-Ukrainian propaganda surrounding these incidents, one that tends to portray them as deliberate actions planned by Russia. According to experts, however, the more plausible explanation is that with thousands of drones flying in both directions over distances of hundreds of kilometres, some are inevitably affected by Russian or Ukrainian electronic countermeasures and end up veering off course. A different case altogether is that of Russian drones that have violated the airspace of some European states in recent months without any connection to ongoing combat operations; these incidents were believed to be deliberate actions by Moscow.
Whether intentional or accidental, the Kremlin undoubtedly exploits such events to reinforce one of its core propaganda messages: the risk of an uncontrolled escalation of the war in Ukraine, one that will gradually draw European countries into the conflict and ultimately lead to nuclear catastrophe. We have seen this narrative promoted, for example, ahead of recent elections in Armenia, Hungary, and previously in Moldova and Georgia. Moreover, according to recent reports, pro-Russia accounts on Telegram, X, Facebook, YouTube, TikTok and VK have pushed these false narratives in a large number of languages, gaining traction and reaching mainstream audiences also in Latin American and African countries.
This fearmongering narrative does not depend on any single event. It is advanced continuously, but it readily seizes upon incidents such as drone crashes whenever they occur, using them as opportunities to reintroduce and amplify messages of fear among the public. Its aim is to weaken European public support for Kyiv by exploiting concerns that the war could spread beyond Ukraine’s borders, potentially even involving the use of nuclear weapons.
Should Moscow’s recent difficulties on the battlefield in Ukraine continue or worsen, it is likely that this narrative will circulate even more widely in the months ahead.
ZOOM-IN
A Closer Look at Cases Detected by the EDMO Network
The Ukraine war shows that drone attacks are no longer purely kinetic events. They are simultaneously information events, where the struggle over attribution, interpretation, and legitimacy can be nearly as consequential as the physical strike itself. Whether or not a particular attack was actually a “false flag”, the claim that it was one often becomes strategically significant in its own right. The result is a battlespace where information operations and physical military operations increasingly reinforce one another.
Informational uncertainty regarding operational capabilities, intelligence penetration, escalation thresholds and responsibility for attacks create a vacuum that can quickly be filled by competing interpretations. EDMO Network investigations highlight how social media amplification can provide a strategic terrain for coordinated disinformation campaigns aimed at filling that vacuum, while delaying political responses and increasing polarisation in societies.
Two Drones Crashed in Romania in Seven Days: How the Topic of Drones Was Kept Alive Online
Funky Citizens examines how two separate drone incidents – the crash of a Russian Geran-2 drone in Galați on 29 May, and the self-detonation of a Ukrainian Magura maritime drone in Constanța on 5 June – generated distinct disinformation dynamics online. It argues that while narratives around the Constanța incident emerged organically during a temporary information vacuum, the Galați incident was sustained through a coordinated amplification campaign lasting seven consecutive days.
The analysis of the Constanța event identified 1,116 posts across X, Reddit, Bluesky, and media sources, generating an estimated 2.3 million views in less than ten hours. Four competing narratives dominated discussion: that the drone was Ukrainian, that authorities were incompetent, that the drone was Russian, and various “attribution reversal” theories blending facts with speculation.
The article’s central finding is the scale of coordinated activity that kept the Galați drone story alive. Between 29 May and 5 June, synchronized networks repeatedly pushed near-identical messages. Daily campaigns involved between 28 and 105 accounts, with aggregate audiences ranging from 5.5 million to 49 million followers. Their cumulative engagement metrics were enormous: individual networks recorded 10 to 155 million views and 52,000 to 1.7 million shares. Additional coordinated content appeared each day in 3,400 to 6,800 posts. Across the week, researchers collected ad analysed 116,014 social media posts from Telegram, X, Facebook, Instagram, Tiktok, Reddit, as well as media articles, and documented hundreds of synchronized messages designed to artificially maintain public attention and amplify misleading narratives.
Russian Drone Attack in Galati Was Not a Ukrainian “Staging” Backed Up By Bucharest and Brussels
The article by Context.ro examines and rejects claims that the drone which struck a residential building in Galați on May 29 was part of a Ukrainian-orchestrated provocation allegedly approved by authorities in Bucharest and Brussels. The conspiracy theory was promoted by pro-Russian commentators and politicians who argued, without evidence, that the incident was staged to increase anti-Russian sentiment, strengthen support for Ukraine, justify defense spending, or draw Romania into a broader conflict.
The fact-check reviews evidence released by Romania’s Ministry of National Defence, which reportedly identified the drone as a Russian-made Geran-2 attack drone. Investigators found markings and technical components consistent with other Russian drones previously recovered in Romania. The article states that the explosive payload and damage pattern also matched known characteristics of the Geran-2/Shahed-136 family of drones.
Addressing arguments that a drone of this type should have caused greater destruction, Context.ro cites examples from Ukraine where similar drones struck apartment buildings without causing catastrophic structural collapse. It concludes that available evidence supports Russian responsibility and that the “staged incident” narrative relies on speculation rather than verifiable facts.
Drones Downed in The Baltic States Are Not an Affair of Arms Manufacturers
Recent drone crashes in the Baltic states are not evidence of a conspiracy by weapons manufacturers seeking to profit from heightened security fears, according to Re:baltica analysis. Such claims emerged following a series of incidents in which Ukrainian drones entered or crashed in Baltic territory. Investigations by Baltic authorities have attributed the incidents to operational realities of the war, including navigation failures and Russian electronic warfare interference, rather than deliberate attempts to create demand for weapons purchases. According to the article, proponents of the “arms industry plot” theory provide little or no evidence and rely largely on speculation.
The report places the incidents within a broader pattern of disinformation narratives that seek to portray NATO members, Baltic governments, and defense institutions as manipulating public opinion for political or financial gain. It emphasizes that drone incursions have occurred repeatedly in the region and are a recognized consequence of the ongoing conflict near NATO’s eastern border. However, there is no credible evidence linking the crashes to an orchestrated scheme by defense companies and that the conspiracy narrative misrepresents both the available facts and the security situation.
ELECTION BEAT
Tracking electoral disinformation through EDMO Hubs
A Preliminary Analysis of Armenian Elections
Armenia’s June 2026 parliamentary elections are being targeted by a sophisticated foreign influence operation, largely traceable to Russian state-affiliated networks. Analysis of over 1.5 million social media posts across Telegram, TikTok, Facebook, X, and the web reveals coordinated, inauthentic behaviour designed to delegitimise Prime Minister Pashinyan’s government and Armenia’s European integration path.
Leaked documents from Russia’s Social Design Agency expose the strategic intent: discrediting leadership, splitting elites, and manipulating public knowledge spaces, including a Wikipedia-style clone seeding pro-Russian narratives into search results. On Telegram, relay networks amplify Russian-origin content through Armenian-language channels within minutes, creating a false impression of organic local dissent.
The playbook mirrors tactics documented in Moldova and Romania: civil society organisations are smeared as foreign agents, electoral outcomes are pre-emptively delegitimised, and identity, religion and anti-establishment grievance are fused into algorithmically amplified content. Key narratives escalate sharply around trigger events, notably the European Political Community Summit in Yerevan.
Ex Post Analysis of the Rapid Response System During Malta’s 2026 General Elections
Malta’s snap election in May 2026 provided a test case for the EU’s Rapid Response System, a cooperation framework allowing researchers to flag disinformation and electoral integrity threats directly to platforms. Over 21 days, the MedDMO team reported 296 URLs to Meta and Google, the vast majority concerning unlabelled political advertising in breach of the EU’s political advertising regulation and the platforms’ own terms of service.
Platforms were generally responsive, acting on most flagged content within a day or two. However, recurring problems emerged. On Google, unlabeled or covert ads were removed but almost immediately republished by the same advertisers, pointing to the need to tackle political advertisers rather than individual ads. On Meta, a coordinated, inauthentic network of Facebook pages and Instagram profiles linked to a suspected influence operation was removed, then partially reinstated on election day before being taken down again.
The experience underlines both the value and the limits of the current system: effective when active, but temporary, and reliant on platforms’ own inconsistent moderation practices.
GLOBAL PULSE
Disinformation narratives shaping the world’s conversations
Before the First Whistle: How Disinformation Is Warming Up for the FIFA World Cup
Viral claims that the US “closed its borders” to African travelers ahead of the 2026 World Cup are misleading. There is no blanket ban but singular, though untransparent, restrictions affecting non‑citizens who recently visited Ebola‑affected countries.
Travel is still possible, often with health checks, but the measures have raised debate and concern about how they are applied. Overlapping cases such as Somali FIFA referee Omar Abdul-Kadir Artan denied entry despite holding a visa illustrate how broader travel restrictions can have larger repercussions. With a global event like the World Cup attracting massive attention, it is likely to become a flashpoint for further information manipulation that the EDMO network will monitor.
Did Israel Destroy a Lebanese Convent? Verified Images Challenge Official Denials
Conflicting narratives quickly emerged after reports that a convent in southern Lebanon had been destroyed during Israeli military operations. Israeli authorities acknowledged causing certain damage but denied that the site had been destroyed, presenting the incident as limited and accidental. These denials were echoed in public messaging, creating uncertainty about what had actually happened on the ground.
However, an analysis of satellite imagery, photos, videos, and eyewitness testimony paints a far more severe picture: the convent complex, along with a school and parts of the surrounding village, appears to have been largely destroyed. This discrepancy highlights a clear information manipulation dimension, where official statements downplay or contest verified damage, while independently gathered evidence suggests otherwise.
Explosion Video Misused to Claim US Strike in Kuwait
Amid heightened tensions between the US and Iran, viral posts have shared dramatic footage claiming to show a US missile strike on military bases in Kuwait. In reality, the video has nothing to do with the conflict. It actually shows an explosion at a fireworks factory in Malta on June 1, 2026.
The clip spread widely online, often accompanied by alarming captions about escalation in the region. But verification – through reverse image searches and matching news footage – shows it is authentic video taken out of context, not evidence of any attack in Kuwait.
This case highlights a recurring pattern: real, striking visuals are repurposed and relabeled to fit unfolding geopolitical events, making them particularly convincing. In fast‑moving crises, such misleading use of genuine footage can distort understanding of what is actually happening on the ground.
ON A DIFFERENT NOTE
We underline […] that democratic resilience cannot be sustained solely through national or supranational means. Democracies rooted in subsidiarity and proximity to citizens are better equipped to build trust.
Paolo Cesarini, Editorial Director
Tommaso Canetta, Editor-in Chief
Editorial Staff include Elena Coden, Paula Gori, Elena Maggi
This edition draws in part on automated translation and reflects information available as of 10 June 2026. Later developments may not be included.
