French intelligence services have identified an operation by the Russian disinformation network Storm-1516 aimed at disrupting the upcoming presidential election, targeting candidate and former prime minister Edouard Philippe with a wave of social media posts falsely claiming he is in poor health, media reported on July 25, 2027.
The campaign, which surfaced on multiple platforms, is the latest in a series of hybrid attacks the network has launched against democracies in Europe and the United States. Philippe, who served as prime minister from 2017 to 2020 and is now mayor of Le Havre, announced his candidacy in September 2024. The false health narratives are designed to sow doubt and polarize voters, French officials said, even though the claims can be easily debunked.
Network with intelligence links
Storm-1516 is seen by Western security agencies as a tool of Russia’s military intelligence, the GRU. It has previously been accused of interfering in elections in the United States, Germany and Hungary. The group relies on fabricated videos, deepfakes, bogus investigative reports, artificial intelligence-generated content and bot farms to amplify disinformation and erode trust in democratic processes.
Undermining unity on Ukraine
The operation against Philippe is part of a broader Russian effort to weaken European cohesion on support for Ukraine, analysts note. By fueling political crises and internal distrust within EU countries, Moscow hopes to complicate the ability of governments to maintain sanctions, military aid and long-term backing for Kyiv. The same network has run campaigns explicitly aimed at reducing international solidarity with Ukraine.
AI as a force multiplier
Security officials have warned that the group’s growing use of generative artificial intelligence allows it to produce increasingly realistic fake content faster and at lower cost, making timely detection harder. The weaponization of AI in foreign election interference is expected to intensify in the coming years, security assessments say.
The French government has not publicly detailed its countermeasures, but the incident underscores the persistent threat of weaponized information against European democracies. Intelligence agencies across the EU have been sharing data on the network’s infrastructure and attempting to coordinate responses with digital platforms.
