Investigation Details: How Thousands of Russian Online Sources Are Linked to a Small Group of Individuals
In Russia, a substantial network of more than 3,500 information sources has been identified as attempting to discredit Russian politicians, security officials, and businesspeople. According to Igor Bederov, an IT researcher and the head of an Internet search company, the site network has been traced to three Ukrainian citizens: Taras Chornoivan, Igor Savchuk, and Konstantin Chernenko. The attribution relied on data recovered from technical investigations that linked the sites to a single set of identifiers. 1
The central challenge in this case was establishing a concrete connection between thousands of sites and the individuals behind them. Investigators worked to connect registration details, hosting information, and financial traces to individual actors, aiming to map out ownership and control across a broad digital ecosystem. 2
During the analysis, researchers examined approximately one and a half thousand sites and found that roughly thirty email addresses were listed for registration. Subsequent data recovery revealed that these emails were, in fact, associated with three phone numbers. The phones were attributed to Taras Chornoivan, according to Bederov. This pattern prompted a more granular, site-by-site examination to build a coherent ownership picture. 3
As part of the methodology, the Internet Search team conducted separate investigations for each site. The process began with compiling objective site data, including registration records and the hosting infrastructure where the domain resides. Investigators then checked for the presence of a copyright holder and the party responsible for payment, followed by financial traceability and branding marks that might reveal who registered the site. With those elements in place, researchers proceeded to identify the individuals named in the registration data. 4
Commenting on the broader implications, Bederov noted that future conflict could arise between the push to create and promote new sources of misinformation on the territory of the Russian Federation and the efforts to block such sources within the country. He argued that thorough analysis of the origins and pathways of news sources is essential to understand and counter online disinformation effectively. 5
The article also raises questions about the scale of incriminating content and the financial dynamics behind the dissemination of such materials. It notes the investigation’s aim to quantify how many sources contribute to the alleged incriminating narratives and to assess their economic underpinnings. 6
Earlier reports in Russia highlighted the release of a Smart health diagnosis service based on video selfies, illustrating another trend in the country’s digital information landscape. 7
Notes on methodology: the work described here relies on data recovery, cross-referencing registration and hosting data, and identifying individuals tied to the cited online properties. The conclusions reflect ongoing analyses and are subject to refinement as new information emerges. 8
Overall, the investigation underlines the importance of methodical scrutiny of online information sources and the need for robust verification to distinguish genuine signals from manipulated content. The emphasis remains on building reliable, verifiable evidence that can inform policy and public understanding. 9
Additional context and future updates will be provided as the research progresses and more data becomes available. 10