Germany's security apparatus is grappling with a coordinated Russian disinformation offensive designed to destabilize the country's political landscape ahead of critical state elections in September 2026, marking what officials describe as a professionally orchestrated hybrid warfare campaign targeting democratic institutions and public trust.
A fabricated video featuring German Chancellor Friedrich Merz allegedly announcing his resignation has circulated on social media, bearing the Deutsche Welle logo and falsely claiming to cite internal CDU party documents leaked to the Handelsblatt business newspaper. Both outlets swiftly denied any involvement. The video is attributed to Storm-1516, a disinformation unit believed to be operated by Russia's military intelligence service, the GRU, according to German security sources cited by Bild.
Why This Matters
• Electoral interference intensifies: Russia-backed campaigns are targeting all German parties except the far-right AfD and BSW, which advocate pro-Moscow positions including lifting sanctions and ending Ukraine aid.
• Hybrid threats escalate: A drone was discovered near Ukrainian cargo planes at Leipzig/Halle Airport in early August, prompting Interior Minister Alexander Dobrindt to warn of a "hybrid attack scenario."
• September elections at risk: Voters in eastern German states—Saxony-Anhalt (September 6), Berlin and Mecklenburg-Western Pomerania (September 20)—head to polls amid unprecedented foreign influence operations.
The Deepfake Offensive
German intelligence agencies have been monitoring Russian disinformation operations, a sprawling influence campaign that has flooded social platforms with fabricated videos and posts. The operation has intensified significantly, with Storm-1516 content receiving millions of views on X (formerly Twitter) through mid-2026, according to NewsGuard analysis.
The tactics are sophisticated: deepfake videos masquerading as reports from respected outlets like BBC, ARD, and Stern.de, complete with stolen logos and mimicked production values. The content spreads false allegations ranging from embezzlement to sexual misconduct against politicians perceived as rivals to the AfD and BSW parties. Even official CDU websites have been imitated to lend false credibility to invented scandals.
The Germany Ministry of Foreign Affairs has acknowledged this "constant and continuous offensive" from Russia as an established reality, though authorities have deliberately avoided actively removing content online. Officials argue the material's reach remains limited for now, despite its professional execution. Yet the cumulative effect aims to erode confidence in Germany's information ecosystem and democratic institutions themselves.
Eastern Elections Under Scrutiny
The timing of this disinformation surge is no coincidence. Three eastern German states face pivotal parliamentary elections in September 2026. Saxony-Anhalt votes September 6, followed by Berlin and Mecklenburg-Western Pomerania on September 20.
Polling suggests the AfD is expected to perform strongly in eastern state contests, a significant development that could see the party gain regional political influence. AfD co-chair Alice Weidel has framed improved electoral performance as bringing "immediate normalization" to her party's standing. The right-wing populist movement has historically performed strongest in former East Germany, capitalizing on anti-immigration rhetoric and perceived failures of traditional parties.
Meanwhile, the Bündnis Sahra Wagenknecht (BSW)—a breakaway faction from Die Linke—is also projected for significant gains in the same contests. Led by its namesake, BSW champions a "consistent peace policy," opposes values-driven foreign relations, and takes nuanced stances on migration that overlap with some AfD positions. Wagenknecht has signaled openness to regional collaboration with the AfD, a prospect that could reshape coalition dynamics.
Notably, Russian disinformation operations have conspicuously spared both AfD and BSW from attacks, focusing fire instead on the CDU, SPD, Greens, and FDP. The selective targeting underscores Moscow's strategic preference for political forces aligned with its interests: ending sanctions, halting military aid to Kyiv, and fracturing European unity.
Physical Threats and Hybrid Warfare
Beyond digital manipulation, Germany faces tangible security incidents that officials classify as hybrid operations. In early August, security personnel discovered an explosive-laden drone in the taxiway area of Leipzig/Halle Airport, positioned near Ukrainian Antonov cargo aircraft. Separately, an unidentified drone struck a DHL cargo plane in flight, which landed safely in Hanover with minor fuselage damage.
Interior Minister Alexander Dobrindt characterized the Leipzig incident as representing a "new danger level" and consistent with hybrid attacks, though investigation outcomes remain pending. Leipzig/Halle serves as a crucial NATO logistics hub and a primary conduit for military supplies bound for Ukraine, making it a high-value target.
Ukraine's ambassador to Germany, Oleksii Makeiev, publicly suggested Russian involvement, asking rhetorically, "Who else could it be if not Russia?" The Russian Embassy in Berlin dismissed the allegations as a "hastily orchestrated provocation" serving "exclusively the goals of Kyiv and the militarist wing of European political classes."
German authorities have documented multiple suspected hybrid incidents domestically as part of broader incidents documented across EU and NATO member states. These include drone intrusions, sabotage operations targeting railways and logistics centers linked to Ukraine supply chains, and infrastructure disruptions traced to Russian military intelligence. The frequency of drone sightings at German airports has increased markedly through 2026.
Why This Matters for European Residents
For people living in Germany and across Europe, including Italy, these developments carry significant implications. First, expect heightened security protocols at airports and critical infrastructure sites, particularly those connected to military logistics. The Leipzig incident signals that hybrid warfare risks extend beyond cyberspace into physical domains affecting civilian transportation networks across the continent.
Second, the information environment will remain contested through election season. Residents should exercise skepticism toward viral political content, especially videos claiming to reveal scandals involving mainstream party figures. Verify claims through established news organizations before sharing, as disinformation operations specifically engineer content designed to look authentic.
Third, German eastern state elections carry implications for broader European stability. Strong performances by pro-Moscow parties in Germany could embolden Russian interference strategies in other European democracies, including potential future interference in Italian and other EU member state elections. These September contests serve as a stress test for European democratic resilience under sustained foreign pressure and establish precedents for interference tactics.
For Italian residents and EU citizens broadly, the outcome also matters for EU policy cohesion on Ukraine, sanctions enforcement, and NATO alliance solidarity. If pro-Moscow parties gain significant influence in German regional governments, it could complicate EU decision-making on critical foreign policy questions affecting all member states. Germany's handling of this disinformation campaign also provides a model—for better or worse—that other European democracies may face in coming elections.
The Germany Federal Office for the Protection of the Constitution continues monitoring these threats, maintaining an elevated alert level in response to Russian hybrid operations. While officials acknowledge the sophistication of the campaigns, they've indicated confidence that awareness itself serves as a defense—provided citizens remain vigilant about sources and skeptical of emotionally charged content appearing suddenly in their feeds.
Germany's Defensive Posture
Unlike previous influence operations, authorities have adopted a strategy of public exposure rather than aggressive content removal. The calculation reflects a delicate balance: taking down material could trigger accusations of censorship and inadvertently amplify narratives about government suppression, while allowing limited circulation lets security services track the networks and methods behind the campaigns.
The German Foreign Ministry has emphasized maintaining "full awareness" of the threat landscape, a diplomatic formulation that acknowledges both the reality of Russian operations and the limitations of democratic governments in controlling information flows without undermining the free speech principles they're defending.
This approach contrasts with more interventionist responses in some neighboring states, but it aligns with Germany's constitutional framework prioritizing press freedom and open discourse. The tradeoff accepts some degree of disinformation circulation in exchange for preserving democratic norms—betting that an informed public can distinguish propaganda from journalism when given proper context.
As September 2026 approaches, the intersection of digital manipulation, physical security incidents, and electoral politics creates what security analysts describe as a "controlled chaos" strategy. Moscow's objective isn't necessarily to install specific candidates but to deepen polarization, erode institutional trust, and weaken European unity on Ukraine policy and sanctions enforcement. Whether Germany's transparency-based defense proves sufficient will become clearer when voters cast ballots in the contested eastern states next month.
