Umbrae Ex Machina
Mapping Russian Ghostwriting Operations Across African News Outlets

Overview
Russia has been planting ghost reporters and fake experts in the African media landscape to advance its strategic interests on the continent since at least 2021. For this report, we consider ghost reporters to be bylines that are used to plant articles that primarily promote Russian interests in authentic African media outlets but are not linked to a genuine journalist. Fake experts are inauthentic personas invoking claims of authority – mostly specific academic backgrounds or expertise – who have quotes attributed to them in ghost reporter-written and authentic media articles.
The ghost reporters and fake experts we identified during our research primarily spread content revolving around terrorism and security in Africa. They also promoted some or all of the following:
- Anti-France, anti-Ukraine, or anti-U.S. content
- Content critical of regional and international organizations perceived as "pro-Western," such as the Economic Community of West African States (ECOWAS) and the International Criminal Court (ICC).
- Content promoting Russian interests in Africa through praising Russian paramilitary groups active in Africa, Russian-African friendship, Russia's beneficial impact on the continent, and sovereignty-focused regional initiatives such as the Alliance of Sahel States (AES).
The research builds on previous public reporting by international news outlets and organizations like Al Jazeera, France 24, and Code for Africa (CfA) that identified websites with active ghost reporters.
We used open-source techniques to expand our list of websites hosting ghost reporter content, and used text-based detection to identify new ghost writers. We detail our detection, verification, and attribution techniques below, as well as behavioral patterns we identified among said fake personas.
For this report, we specifically looked for ghost reporters who publish content in English- and French-language African outlets. Prior research by international non-profit organizations and researchers shows that these Russian-created ghost reporters are also active in Arabic, Spanish, and Portuguese, among others, and target other regions, such as Latin America. This report provides an overview of the English- and French-speaking network of ghost reporters active in Africa and is not an exhaustive list of Russian-created journalist personas and experts. Graphika and CfA collaborated to develop this report with support from Meta.
In total, we identified 44 ghost writers and fake experts, 38 of whom are high-confidence personas. These personas were active between 2021 and 2026, and their content was duplicated or quoted on 138 websites, and were republished on at least 113 Facebook accounts and pages belonging to real users, coordinated inauthentic networks, and Russian official communication pages.
Key Findings
44 Personas, 38 Confirmed Fabricated
We identified 44 inauthentic personas — 35 ghost reporters and nine fake experts — operating primarily across African media ecosystems. We assess with high confidence that 38 of these personas were fabricated. We assess with medium confidence that the remaining six are ghost reporters or fake experts. The medium-confidence ghost reporters have names matching those of real experts; however, the authentic personas did not promote or we could not otherwise prove affiliation with the articles we suspect are ghost reporting.
Fake Experts Used as Sources
Fake experts overwhelmingly appeared as sources for quotes in articles, sometimes by real journalists and in real news outlets. Unlike the ghost reporters, they did not write long-form articles. This content was published on or shared by legitimate news outlets, their social media accounts, and sometimes on websites with known or suspected ties to Russian influence operations (IOs), such as the African Initiative.
Anti-West, Pro-Russia Narrative Focus
Content attributed to or quoting these personas focused on security issues and terrorism in Africa, and featured strong anti-Ukraine, anti-French, anti-U.S., and, more broadly, anti-West sentiments while simultaneously promoting pro-Russia, pro-Russia-backed governments, pro-Wagner/Africa Corps, and pro-Alliance of Sahel States (AES) narratives.
Coordinated, Cross-Platform Persona Creation
We identified likely coordinated patterns of persona creation, including fabricated expert identities, identity theft, cross-platform content laundering, and the systemic reuse of ghost reporters across English- and French-language media outlets.
138 Sites, 113 Facebook Accounts
We identified 138 websites and 113 Facebook accounts that published content by or quoted one or more of the ghost reporters or fake experts. A network graph of these interactions identified clusters that centered around 15 specific ghost authors and 24 websites.
658 URLs Spread Content
We identified 658 URLs, including articles and social media posts, that either featured a ghost reporter byline or quoted a fake expert.
Storm-1516 Ghost Journalists Reused
The ghost author count includes fake journalists that the Russia-aligned influence operation Storm-1516 used to plant false stories about Ukrainian and Western corruption. While these fake individuals were not used to disseminate articles targeting Africa, they posed as African and West Asian journalists and used African and West Asian media outlets to disseminate their claims.

Graphika is the most trusted provider of actionable open-source intelligence to help organizations stay ahead of emerging online events and make decisions on how to navigate them. Led by prominent innovators and technologists in the field of online discourse analysis, Graphika supports global enterprises and public sector customers across trust & safety, cyber threat intelligence, and strategic communications, spanning industries including intelligence, technology, media and entertainment, and global banking.
Download the complete PDF
The full report includes the complete network graph maps, raw attribution indicators, cross-platform topology analysis, and the full takedown timeline with platform-level data.
- Full network graph visualizations
- Attribution indicators with confidence scores
- Raw behavioral modeling data
- Takedown coordination timeline
Related Reports

Chinese State Influence: Tariffs to Tension
Selected Insights from Graphika’s Intelligence Reporting on Chinese State Influence Actors and Adjacent Communities
Read the Report
Save the Date for Spamouflage
Chinese State-Linked Influence Operation Spreads Manipulated Event Flyers Online to Disrupt Events Critical of China
Read the Report
Glass Onion
Peeling Back the Layers of a Pro-China Online Ecosystem
Read the ReportSee How Graphika Can Help Your Team Act on This Intelligence
This report is one of 600+ investigations Graphika’s team has published. Our platform gives your analysts continuous access to the same intelligence — plus the tools to apply it to your specific threat environment.