RT's Covert Information Operations

RT's Covert Information Operations

After the Russian invasion of Ukraine in February 2022 RT, an overt Russian government funded news outlet, was blocked in the west. This includes removal from broadcast TV and hosting on web platforms such as YouTube. In the aftermath of this removal RT has sought other ways to reach a western audience including mounting covert IO campaigns.

This talk will discuss findings from Google’s Threat Analysis Group respecting the evolution of RT after removal of their overt channels from western services. This will include covert TTPs they’re now using in an attempt to continue reaching their previous audience and to continue shaping the western information environment.

TTP examples include:

- Running covert personality / host driven YouTube channels with high production value content such as news, documentary, and vlogger content. This contrasts with previous efforts from e.g. IRA which used personas of westerners to deliver IO content via memes and comments with low production value. This includes channels removed from YouTube in July 2024.

- Converting previous overt RT staff to covert roles, still ultimately producing video and other content similar to (but no longer branded as) overt RT content

- Building out infrastructure in the United States and Europe to disguise RT’s activities

- Targeting audiences in multiple languages (e.g. English, Spanish (South America), and Arabic)

It is our intent to name specific outlets and campaigns, but precisely which examples will depend on approvals.