← The Attention Machine

State Actors & Information War

Most harms on this site are emergent from commercial incentives. This page is the exception. Some governments have deliberately weaponised what others built.

How to read this page. Tap any underlined word to see the precise academic term and a short definition. Expand any "Deeper" box for the evidence and contested points. The main text works on its own — you can skip both and still get the whole argument.

Russia's Internet Research Agency — confirmed fact

Russia's Internet Research Agency (IRA) ran systematic, funded operations to influence the 2016 US election by creating fake American personas across Facebook, Twitter, Instagram, and YouTube — producing tens of thousands of posts designed to inflame divisions on immigration, race, and policing. This is not an allegation. It is documented in the Mueller Report (2019), the US Senate Intelligence Committee's five-volume report (2019–2020), and the platforms' own Congressional testimony.

On 4 November 2024, the day before the US presidential election, the Office of the Director of National Intelligence, FBI, and CISA issued a joint public statement: "The IC has been observing foreign adversaries, particularly Russia, conducting additional influence operations intended to undermine public confidence in the integrity of US elections and stoke divisions among Americans."

The Meliorator tool

In 2024, the FBI, Dutch AIVD and MIVD, Dutch Police, and Canadian CCCS issued a joint advisory warning social media companies about "Meliorator", which the advisory describes as Russian state-sponsored software for creating and managing fake social media accounts at scale. The same day, the US Department of Justice announced the seizure of two domain names and the search of 968 accounts on X used by the bot farm, under court warrants. The advisory described the tool as a "covert software" enabling social media farm operations. The joint statement of allied intelligence agencies is itself significant: multiple NATO democracies coordinating publicly on an active Russian information operation.

What European intelligence agencies are saying

The infrastructure that state operations exploit is the one several European intelligence agencies now name in their own caseloads: they say publicly, in their annual reports and threat updates, that much of today's radicalisation happens online. That is narrower than this site's argument about engagement ranking — the agencies describe where it happens, not what ranks it — and most of what they describe is domestic extremism, set out on the Radicalisation page. The part that concerns a state actor is this.

AIVD (Netherlands), April 2026: On the AIVD's 2025 annual report, NOS quotes Director-General Simone Smit: "In the eighty years that the AIVD and its predecessors have existed, there has never been a threat picture like the present one, with national security under pressure from so many sides at once, for so long." The report itself described a minor who mapped the digital networks of embassies and other organisations in The Hague at the request of a Russian state-backed hacking group.

VIGINUM (France), June 2026: France's service for detecting foreign digital interference — an open-source analysis service of the Prime Minister's defence secretariat, not one of the intelligence services — wrote in its report on the March 2026 municipal elections that "since the 2017 presidential election in France, no major election or referendum has been spared attempts at information manipulation involving foreign actors". Its May 2025 report documented 77 operations by the Russian influence network Storm-1516 between August 2023 and March 2025, including during the July 2024 snap legislative election. Its February 2025 review of three years of Russian operations judged their reach "relatively limited".

The structural point

State actors did not build the attention machine. They found a commercial infrastructure — designed to maximise engagement, calibrated to emotional vulnerabilities, capable of reaching billions of people with precisely targeted content — and discovered it was extraordinarily useful for their purposes.

The platforms were not designed for information warfare. They turned out to be almost perfectly suited for it. Polarising content is engaging, and engagement is what the platforms sell. Confusion benefits state actors seeking to undermine democratic institutions. The incentives aligned.

Addressing state actor misuse requires both the structural reforms described in the Laws & Regulation section and the geopolitical responses (sanctions, coordination, attribution) that are beyond the scope of this site. What this site documents: the infrastructure that makes the weaponisation possible is the same infrastructure described throughout these pages.

How we know — why this page states things as fact, and the sourcing standard +

This is the one section of the site that asserts deliberate intent, so the evidence bar is deliberately higher. The IRA claims rest on primary documents: the Mueller Report (a US Department of Justice investigation, with indictments naming the IRA and its financier) and the Senate Intelligence Committee's bipartisan five-volume report, corroborated by the platforms' sworn Congressional testimony. These are not journalistic summaries or single-source reports; they are official investigations that survived adversarial scrutiny.

How we use intelligence-agency statements. Annual reports such as the AIVD's are used as corroboration, not as the sole basis for a claim. Intelligence services have institutional incentives and cannot always show their evidence, so we treat a single agency assertion as one input. The domestic caseloads that MI5 and the BfV describe — arrest counts and recorded crimes, which are checkable — are on the Radicalisation page, beside the research they corroborate.

Where we stop. "Confirmed" applies to the existence and conduct of the operations. The effect on any election outcome is a separate, harder question that this page does not claim to settle — the same discipline applied to Cambridge Analytica on the Advertising page.

Symptoms: Elections & Democratic Harm →
Laws & Regulation: Digital Services Act →