Operation Overload, also referred to as Matryoshka and Storm-1679, is a Russian-aligned information operation that impersonates credible sources to sow confusion and undermine public trust in European and American institutions. It posts manipulated videos and images, often branded with stolen media logos, across X (formerly Twitter), Bluesky, TikTok and Telegram. The operation also directly contacts researchers and fact checkers, likely to distract them from more pressing investigations or to generate coverage that increases its perceived influence. This Dispatch provides an update on Operation Overload’s activities in the second quarter of 2025. ISD reviewed a sample of more than 200 X accounts and dozens of Bluesky and TikTok accounts that analysts attributed to the operation with high confidence. While the operation expanded and streamlined its efforts, we found that social media platforms removed a large majority of its posts, limiting its ability to reach and influence users. Given its limited impact and the tendency of information threat actors to exploit media attention, ISD recommends reporting on Operation Overload in the future only if it gains notable organic engagement, shifts tactics, or large datasets reveal patterns that could help platforms and users detect its content.
Operation Overload’s underwhelming influence and evolving tactics – ISD
