Graphika
Research Reports/Umbrae Ex Machina
GatedAug 25, 2026

Umbrae Ex Machina

Mapping Russian Ghostwriting Operations Across African News Outlets

Influence Operations
The Graphika Team
The Graphika Team
Graphika Research Team
Share
Free Download

Access the Full Report

Get the complete findings from Graphika's latest research, including in-depth network analysis, narrative mapping, and intelligence across platforms.

By submitting this form, you agree to receive communications from Graphika.

Umbrae Ex Machina

Overview

Russia has been planting ghost reporters and fake experts in the African media landscape to advance its strategic interests on the continent since at least 2021. For this report, we consider ghost reporters to be bylines that are used to plant articles that primarily promote Russian interests in authentic African media outlets but are not linked to a genuine journalist. Fake experts are inauthentic personas invoking claims of authority – mostly specific academic backgrounds or expertise – who have quotes attributed to them in ghost reporter-written and authentic media articles.

The ghost reporters and fake experts we identified during our research primarily spread content revolving around terrorism and security in Africa. They also promoted some or all of the following:

  • Anti-France, anti-Ukraine, or anti-U.S. content
  • Content critical of regional and international organizations perceived as "pro-Western," such as the Economic Community of West African States (ECOWAS) and the International Criminal Court (ICC).
  • Content promoting Russian interests in Africa through praising Russian paramilitary groups active in Africa, Russian-African friendship, Russia's beneficial impact on the continent, and sovereignty-focused regional initiatives such as the Alliance of Sahel States (AES).

The research builds on previous public reporting by international news outlets and organizations like Al Jazeera, France 24, and Code for Africa (CfA) that identified websites with active ghost reporters.

We used open-source techniques to expand our list of websites hosting ghost reporter content, and used text-based detection to identify new ghost writers. We detail our detection, verification, and attribution techniques below, as well as behavioral patterns we identified among said fake personas.

For this report, we specifically looked for ghost reporters who publish content in English- and French-language African outlets. Prior research by international non-profit organizations and researchers shows that these Russian-created ghost reporters are also active in Arabic, Spanish, and Portuguese, among others, and target other regions, such as Latin America. This report provides an overview of the English- and French-speaking network of ghost reporters active in Africa and is not an exhaustive list of Russian-created journalist personas and experts. Graphika and CfA collaborated to develop this report with support from Meta.

In total, we identified 44 ghost writers and fake experts, 38 of whom are high-confidence personas. These personas were active between 2021 and 2026, and their content was duplicated or quoted on 138 websites, and were republished on at least 113 Facebook accounts and pages belonging to real users, coordinated inauthentic networks, and Russian official communication pages.

What We Found

Key Findings

  1. 44 Personas, 38 Confirmed Fabricated

    We identified 44 inauthentic personas — 35 ghost reporters and nine fake experts — operating primarily across African media ecosystems. We assess with high confidence that 38 of these personas were fabricated. We assess with medium confidence that the remaining six are ghost reporters or fake experts. The medium-confidence ghost reporters have names matching those of real experts; however, the authentic personas did not promote or we could not otherwise prove affiliation with the articles we suspect are ghost reporting.

  2. Fake Experts Used as Sources

    Fake experts overwhelmingly appeared as sources for quotes in articles, sometimes by real journalists and in real news outlets. Unlike the ghost reporters, they did not write long-form articles. This content was published on or shared by legitimate news outlets, their social media accounts, and sometimes on websites with known or suspected ties to Russian influence operations (IOs), such as the African Initiative.

  3. Anti-West, Pro-Russia Narrative Focus

    Content attributed to or quoting these personas focused on security issues and terrorism in Africa, and featured strong anti-Ukraine, anti-French, anti-U.S., and, more broadly, anti-West sentiments while simultaneously promoting pro-Russia, pro-Russia-backed governments, pro-Wagner/Africa Corps, and pro-Alliance of Sahel States (AES) narratives.

  4. Coordinated, Cross-Platform Persona Creation

    We identified likely coordinated patterns of persona creation, including fabricated expert identities, identity theft, cross-platform content laundering, and the systemic reuse of ghost reporters across English- and French-language media outlets.

  5. 138 Sites, 113 Facebook Accounts

    We identified 138 websites and 113 Facebook accounts that published content by or quoted one or more of the ghost reporters or fake experts. A network graph of these interactions identified clusters that centered around 15 specific ghost authors and 24 websites.

  6. 658 URLs Spread Content

    We identified 658 URLs, including articles and social media posts, that either featured a ghost reporter byline or quoted a fake expert.

  7. Storm-1516 Ghost Journalists Reused

    The ghost author count includes fake journalists that the Russia-aligned influence operation Storm-1516 used to plant false stories about Ukrainian and Western corruption. While these fake individuals were not used to disseminate articles targeting Africa, they posed as African and West Asian journalists and used African and West Asian media outlets to disseminate their claims.

Written By
The Graphika Team

The Graphika Team

Graphika Research Team

Graphika is the most trusted provider of actionable open-source intelligence to help organizations stay ahead of emerging online events and make decisions on how to navigate them. Led by prominent innovators and technologists in the field of online discourse analysis, Graphika supports global enterprises and public sector customers across trust & safety, cyber threat intelligence, and strategic communications, spanning industries including intelligence, technology, media and entertainment, and global banking.

Full Report

Download the complete PDF

The full report includes the complete network graph maps, raw attribution indicators, cross-platform topology analysis, and the full takedown timeline with platform-level data.

  • Full network graph visualizations
  • Attribution indicators with confidence scores
  • Raw behavioral modeling data
  • Takedown coordination timeline
Free Download

Access the Full Report

Get the complete findings from Graphika's latest research, including in-depth network analysis, narrative mapping, and intelligence across platforms.

By submitting this form, you agree to receive communications from Graphika.

Act on This Intelligence

See How Graphika Can Help Your Team Act on This Intelligence

This report is one of 600+ investigations Graphika’s team has published. Our platform gives your analysts continuous access to the same intelligence — plus the tools to apply it to your specific threat environment.

60+ government agencies briefed
Used by NATO and EU Parliament
Contributed to 200+ platform takedowns