Russian Disinformation, Oct 15, 2026: UK Warns, Kits Cut
Information war: UK warns of industrial-scale Russian info assault, Microsoft seizes phishing-kit domains, Maricopa apology claim false.
Information War · at a glance
- 5fronts covered
- 1claims verified
- 1claims rated false
- 1unverified or disputed
- 78cited sources
Key Takeaways: 5 things to know
- Britain told the UN First Committee that Russia and other hostile actors are conducting an industrial-scale assault on the UK and allied information environment (US and allied countermeasures).[28]
- Microsoft, with Japanese police and Health-ISAC partners, used a US court order to seize domains behind YAM Store, CoGUI and Iron Man phishing platforms (Chinese operations; AI/platforms).[29]
- Fact-checkers rated a Maricopa County 2020-apology claim false and an Ohio rally protester image fake, while confirming Trump did post an AI tiger video (Fact-checks).[30]
- Ukraine said Starshield mobile connectivity was partly restored after speed limits disrupted drone and vehicle links; Musk said the US government sets those limits (AI/platforms; US countermeasures).[31]
- No new Russian “protecting compatriots” instance appeared in opened sources this window after yesterday’s Catherine Forum remarks (Russian operations).[32]
Report detailsInformation War desk · Information War, No. 6 · Data cutoff Oct 15, ~7:45 AM ETDetails
Information war: Britain warned of an industrial-scale Russian assault on the information environment, Microsoft disrupted three Chinese-language phishing platforms, and fact-checkers labelled a Maricopa 2020-apology claim false.
- Publisher: Peter’s World (Information War desk)
- Edition: Information War, No. 6
- Coverage window: Oct 14, 2026, ~7:30 AM ET to Oct 15, 2026, ~7:30 AM ET
- Data cutoff: Oct 15, 2026, ~7:45 AM ET
- Times: Eastern (ET) unless noted
- Style: Rev. 3
- Sources: government and official channels first, then fact-checkers and trusted outlets; state media and parties to a conflict are attributed and tagged reported
- Notes: one numbered footnote per sentence; outlets are named only in footnotes; false claims are named only to label them false or unverified
Britain told the UN First Committee on Oct 15 that hostile actors including Russia are waging an industrial-scale assault on the UK and allied information environment, a warning that follows the platform and bot-claim fights covered in yesterday’s Information War update.[1] The same window brought a US court-backed Microsoft takedown of three Chinese-language phishing-kit services and a cluster of midterm-season fact-checks, from a false Maricopa apology rumor to verified AI video posts.[2]
Russian operations
Pro-Kremlin channels continued to recycle justifications that cast strikes on Ukraine as defence against “Nazism” or as retaliation, a pattern documented in the Oct 9 East StratCom / StopFake “Kremlin method” file that remains the best opened synthesis for this narrative family.[33] Britain’s OSCE statement rejected false equivalence by noting Ukraine’s constructive reply to a US-proposed energy ceasefire while Russia kept striking Ukrainian energy sites on Oct 12–13 and by citing more than 150 Ukrainian civilian deaths from Russian air attacks in the prior week.[34]
StopFake separately labelled false a circulating claim that Ukrainian MPs had been ordered to leave Kyiv by Oct 17; Ukrainian faction spokespeople denied any such instruction, and the originating outlet admitted it could not verify its anonymous source—an older piece still useful when the rumor reappears in feeds.[35] Compatriots watch: opened government, fact-checker and Ukrainian English feeds in this window carried no new “protecting compatriots” intervention frame beyond the Oct 13 Catherine Forum instance logged yesterday.[36]
Chinese operations
<!– wr:op Operation: YAM Store / CoGUI / Iron Man disruption Actor: Operators of Chinese-language phishing marketplace services (company attribution) Target: Consumers and 75,000+ organizations in 150+ countries; >1B malicious messages since Jan 2026; >750M aimed at Microsoft customers; Iron Man >2,300 lure templates Platform: Phishing-kit domains and subscription lure pages (YAM Store, CoGUI, Iron Man) Technique: Phishing-as-a-service (credential and payment theft) Verdict: Domains seized and redirected under US court order (Oct 14, 2026) Source: Microsoft Digital Crimes Unit; The Record –>
Microsoft’s Digital Crimes Unit said an investigation that began with Japan’s National Police Agency into scam traffic hitting Japan traced into a Chinese-language cybercrime marketplace selling accounts, hosting and fake-site tooling.[37] With Health-ISAC and other partners, Microsoft obtained a US court order seizing and redirecting the domains behind those three services, interrupting the subscription model that supplied criminals with ready-made impersonation sites.[38] The disruption is a criminal-marketplace action attributed by the company to Chinese-language operators, not a public attribution of a PRC state influence network.[39]
No new Graphika, Google TAG or Microsoft state-linked influence report dated inside this window appeared beyond that marketplace disruption.[40]
Iranian and other state actors
war.gov News RSS in this window carried no Iran or information-operations item; the lead defense story was an Autonomous Warfare Command remarks piece unrelated to FIMI.[41] A Bosnian national, Sasa Micev, was sentenced in New Mexico to 60 months for conspiring to broker SA-18 Igla missiles from North Korea in violation of US sanctions and export rules—a proliferation case, not an influence campaign, logged here because court papers described pricing talks and falsified documentation aimed at OFAC-prohibited procurement.[42] That enforcement path matters for hybrid security even when the indictment is not an influence-ops charge, because the same covert brokers can finance both weapons and information infrastructure, and no new verified Iranian deepfake or Starlink-jamming disclosure unique to this window appeared beyond coverage already filed on Oct 14.[43]
AI, deepfake and platform developments
President Trump posted an AI-generated Truth Social video of himself with a tiger on Oct 13 after sharing authentic footage of a fatal UK wildlife-park mauling; fact-checkers rated the “did he post it” claim true and noted the family’s criticism of the authentic clip’s recirculation.[44] An image purporting to show a protester in an “Release the Epstein Files” shirt being dragged at a Youngstown, Ohio, Trump rally was rated fake after SynthID flagged Google AI generation and the Threads poster indicated the graphic was intentional symbolism.[45] Full Fact found that videos shared as the Oct 10–11 Riyadh King Khalid International Airport attacks included AI-generated footage and older Dubai airport clips mixed with at least one genuine Riyadh clip.[46]
Ukraine’s Defence Ministry sources told trade press that Starshield connectivity while moving had been restored after overnight restrictions capped how fast a terminal could travel and still hold a link, disrupting drone missions until partial recovery.[47] Musk wrote that Starshield systems are owned and controlled by the US government and that speed or usage limits are decided by the US military and ultimately the president.[48]
US and allied countermeasures
Britain’s UN First Committee statement said strategic competition is intensifying and that “we are witnessing an industrial-scale assault by hostile actors like Russia on the information environment in the UK and many of our allies,” before recommitting to sovereignty, territorial integrity and international law.[49] The same FCDO feed carried an OSCE statement arguing that only a just and lasting peace ends the Ukraine war, that Ukraine answered a US energy-ceasefire idea constructively, and that Russia continued energy strikes and bore responsibility for a deadly week of civilian casualties.[50]
Microsoft’s court-ordered domain seizures, detailed in the Chinese operations section above, are the principal US private-sector countermeasure disclosed this window.[51] CISA’s newest opened feed item remained the earlier China-based cybersecurity company advisory (Oct 8), outside the daily news peak but still the standing federal technical warning partners cite.[52]
Fact-checks of viral claims
- Verified: 2
- False: 4
- Misleading: 1
- Unverified: 4
| Date | Claim | Who said it | Verdict | Evidence | Source(s) |
|---|---|---|---|---|---|
| 2026-10-15 | On Oct 13 President Trump posted an AI video of himself playing with a tiger on Truth Social. | Social media users; Truth Social post by realDonaldTrump | True/Verified | The archived Truth Social post shows the AI clip; it followed his share of authentic UK tiger-attack footage. | [53] |
| 2026-10-15 | Microsoft disrupted YAM Store, CoGUI and Iron Man phishing platforms used by Chinese-language cybercriminals. | Microsoft Digital Crimes Unit; trade press | True/Verified | Microsoft published the investigation and court-ordered domain seizure with Japan NPA and Health-ISAC partners. | [54] |
| 2026-10-15 | Maricopa County Elections apologized to Trump after finding 2020 ballots destroyed and illegal immigrant votes counted for Biden. | Unattributed viral posts repeating a prior misinformation account | False | No credible reporting of such an apology; searches traced the text to a user with prior false Georgia 2020 claims; AP’s battleground audit found no large-scale fraud. | [55] |
| 2026-10-15 | A circulating photo authentically shows a protester in an “Release the Epstein Files” shirt dragged at Trump’s Youngstown rally. | Threads/X users sharing the image | Edited/false | SynthID indicated Google AI tools; the Threads user described the graphic as symbolic; a real scuffle occurred but this image is not authentic footage. | [56] |
| 2026-10-15 | Videos circulating online are genuine recordings of the Oct 10–11 Riyadh airport attacks in every clip shared. | Unattributed social posts | Edited/false | Full Fact found AI-generated footage and older Dubai airport video mixed into packs that also included at least one genuine Riyadh clip. | [57] |
| 2026-10-15 | James Talarico was hospitalized at an Ohio mental-health facility during his early-October campaign absence. | Conservative influencers on X; amplified online | False | Facility denied; home-camera images placed him in Texas with flu. | [59] |
| 2026-10-15 | New York Democrats are fining unvaccinated Amish children $2,000 per day. | Facebook/Instagram/X posts | Misleading | Schools, not children, were fined in 2022; ongoing fines undetermined. | snopes.com [58] |
| Date | Claim | Who said it | Verdict | Evidence | Source(s) |
| — | — | — | — | — | — |
| Date | Claim | Who said it | Verdict | Evidence | Source(s) |
| — | — | — | — | — | — |
Date = date the claim was checked. Verdicts follow the cited fact-checkers and official records; “Unattributed viral post” means the report names no original author. Full citations are in the footnotes.
Domestic Affairs
US domestic information space this week was midterm-driven: false 2020 Maricopa myths, AI rally images and candidate medical rumors competed with authenticated AI posts from the president’s own account, forcing fact-checkers to separate “he posted this” truths from “officials apologized for fraud” falsehoods.[60] Britain’s dual track—naming Russian information assault at the UN while pressing Russia at the OSCE on energy strikes—shows allied capitals treating narrative and kinetic pressure as one file.[61] Ukraine’s Starshield outage-and-restore cycle immediately entered domestic Ukrainian defence debate and US tech-politics argument via Musk’s attribution of control to Washington.[62] Those channels decide whether foreign FIMI finds grooves already cut by local rumors, a pattern watched on the Information War News Hub.[63]
War Crimes and Civilian Harm
Allegations are attributed; findings are not established unless stated.
Britain’s OSCE statement cited a Russian glide bomb that killed 33 civilians on two buses on Oct 8 and a missile that killed 22 people, including five children, in Pryluky, plus more than 150 Ukrainian civilian deaths from Russian air attacks in the prior week—attributed official UK figures used to reject false equivalence, not as ICC findings.[64] StopFake’s “Kremlin method” review continues to document how state media deny or invert documented attacks on civilians; those narrative tactics are information-domain conduct adjacent to the underlying harm allegations, not a substitute for legal adjudication.[65] No new ICC arrest warrant or OHCHR Africa/Ukraine civilian-harm bulletin unique to this information-war window was opened beyond those narrative files, so the information-war contribution this day is documentation of denial narratives rather than a new legal filing.[66]
Statements by Officials
United States statements come first; statements by other governments, companies and state-linked voices follow and are labeled. Quotes are verbatim and attributed.
United States
| Date | Speaker | Role/Org | Quote | Context/Topic | Source |
|---|---|---|---|---|---|
| 2026-10-14 | Ryan Ellison | First Assistant US Attorney, District of New Mexico | “U.S. sanctions mean little if those who knowingly evade them face no consequences.” | North Korea missile-broker sentencing | justice.gov [67] |
| 2026-10-14 | Steven Masada | Associate General Counsel / GM, Microsoft Digital Crimes Unit | “What appears to be a simple scam message is often the visible end of a much larger transnational cybercriminal operation.” | YAM/CoGUI/Iron Man disruption | blogs.microsoft.com [68] |
Paraphrased US-linked (not tabled): none beyond the Starshield control remark already noted in the AI and platforms section above.[69]
United Kingdom and partners
| Date | Speaker | Role/Org | Quote | Context/Topic | Source |
|---|---|---|---|---|---|
| 2026-10-15 | UK statement | UK mission, UN First Committee | “We are witnessing an industrial-scale assault by hostile actors like Russia on the information environment in the UK and many of our allies.” | Russian FIMI naming | [70] |
| 2026-10-15 | UK statement | UK mission, OSCE | “Ukraine has demonstrated that it wants peace. It agreed to a full, immediate and unconditional ceasefire when the US proposed one back in 2025.” | Energy ceasefire / Russia pressure | [71] |
What to Watch (Assessment)
- Whether follow-on UK or Five Eyes products operationalize the “industrial-scale assault” line with named networks or only keep the diplomatic formula.[72]
- Whether YAM Store, CoGUI and Iron Man infrastructure reappears under new domains within days of the seizure.[73]
- Starshield formal speed-limit status after partial restore and any US policy clarification beyond Musk’s posts.[74]
- Recurrence of Maricopa apology or similar 2020-fraud myths as midterm advertising heats up.[75]
- Fresh East StratCom or StopFake tallies of Kremlin war-crimes inversion claims after the OSCE casualty figures.[76]
- Any new “protecting compatriots” framing from Russian officials after the Catherine Forum instance.[77]
- Cross-posting of Riyadh airport deepfakes into other Middle East flashpoints covered on the Middle East War Update Oct 14.[78]
Geography & Strategic Position
London’s UN First Committee statement framed information assault as a homeland and allied problem, not only an Eastern Front narrative fight, tying UK defence of the information environment to sovereignty language also used on Ukraine.[3] Phishing-kit infrastructure disrupted in the Microsoft case spanned templates aimed at Australia, Japan, India and more than 150 countries, showing how criminal marketplaces sit offshore from their victims.[4] Ukraine’s Starshield connectivity dispute, partially restored after speed limits disrupted mobile drone links, keeps battlefield communications inside the same US–Ukraine technology geography as the information fight.[5]
Military & Security
UK remarks at the OSCE again contrasted Ukraine’s readiness for an energy-infrastructure ceasefire with continued Russian strikes on Ukrainian energy facilities after a US proposal, using casualty figures from the prior week to reject false equivalence.[6] StopFake’s ongoing documentation of Kremlin justifications for strikes on Ukraine remains the documentary backbone for war-crimes narrative denial in this theatre.[7] A Bosnian arms broker’s US sentencing for trying to source North Korean SA-18 Igla missiles shows sanctions enforcement intersecting proliferation and covert procurement—not classic influence ops, but a hard-security adjunct to hybrid pressure.[8]
Alliances & Diplomatic Networks
Britain used consecutive multilateral forums—the UN First Committee and the OSCE—to lock partners into a shared description of Russian information and kinetic behaviour.[9] Microsoft’s disruption ran with Japan’s National Police Agency, Health-ISAC and other private partners, a public–private alliance model that parallels EU and UK FIMI institutions built earlier this month.[10] No new EEAS East StratCom review dated inside this window appeared beyond the Oct 9 “Kremlin method” piece already in allied libraries.[11]
Economic & Industrial Power
Microsoft’s disclosed takedown targets a subscription phishing economy that, on the company’s figures in the operation card above, has generated tens of millions of dollars by selling kits and identity tooling rather than running one-off scams.[12] That service-economy model is what made a single court order interrupt traffic across more than 150 countries.[13] Brooklyn prosecutors’ separate disruption of a crypto scam aimed at Russian-speaking communities shows diaspora fraud markets running beside state-linked influence stories.[14]
Technology & Critical Infrastructure
The seized kits’ lure-page catalogues, detailed in the operation card, impersonated postal, tax, bank and telecom brands at industrial scale.[15] Starshield’s temporary speed limits forced Ukrainian units to cancel missions until connectivity while moving was partly restored, with Elon Musk stating that usage limits are set by the US government and ultimately the president.[16] AI-generated political imagery—an Ohio rally protester photo flagged with Google SynthID, and a Truth Social tiger video the president did post—shows generative tools now sitting inside both satire and campaign rumor cycles.[17]
Domestic Politics & Information
US midterm-season rumor traffic again mixed election myths (Maricopa apology), identity smears (Talarico hospital claim) and AI imagery, requiring same-day fact-checker rebuttals before narratives harden.[18] Full Fact’s Riyadh airport video review found old Dubai footage and AI-generated clips circulating as if they were the Oct 10–11 King Khalid attacks, a Middle East spillover into European social feeds.[19] Rating: 4 | Confidence: Medium | Trend: Deteriorating
Strategic Leverage & Outcomes
For US interests on the War Room dashboard, the leverage question is whether court-ordered domain seizures and allied diplomatic naming raise costs faster than phishing-kit and deepfake supply regenerates.[20] Britain’s explicit “industrial-scale” label gives partners a shared vocabulary; Microsoft’s seizure shows private infrastructure owners can still interrupt Chinese-language criminal marketplaces when police partners share leads.[21] Starshield’s control dispute is a US policy choice with Ukrainian tactical effects, not a Russian information win, but it will be narrated as abandonment if outages return.[22]
Strategic assessment
- Relative advantage
- UK and Microsoft issued primary, dated disclosures partners can cite directly.[23]
- Critical vulnerability
- Midterm rumor velocity still outruns corrections when AI images and recycled clips spread first.[24]
- Decisive uncertainty
- Whether Starshield limits were policy or configuration remains under talks with SpaceX.[25]
- Likely trajectory
- More allied FIMI naming and kit takedowns alongside daily election and war fakes.[26]
- Strategic outcome
- Not yet determinable; US interest is Ukraine connectivity plus election-info integrity.[27]
Analysis by Peter’s World using the Seven Lenses framework. Numbered notes link to the footnotes at the end of this report. Scores, where shown, are judgments, not measurements.
Additional sources
- war.gov News RSS checked Oct 15; no IO-specific item.
- EUvsDisinfo feed, DFRLab feed, CISA news XML, OpenAI news RSS, EEAS press material, Graphika reports listing, ISD, NewsGuard special reports, Ukrainska Pravda English RSS, FBI press RSS opened for situational awareness.
- FactCheck.org grid-reliability analysis and Full Fact small-boat crossings piece reviewed; not lead-fact-checked here.
Footnotes
- [1] UK Government, “We are witnessing an industrial-scale assault by hostile actors like Russia on the information environment in the UK: UK Statement at the UN First Committee”, https://www.gov.uk/government/speeches/we-are-witnessing-an-industrial-scale-assault-by-hostile-actors-like-russia-on-the-information-environment-in-the-uk-uk-statement-at-the-un-first-comm. Published: Oct 15, 2026. Retrieved: 2026-10-15.
- [2] Microsoft On the Issues, “Disrupting the service economy behind transnational cybercrime operations”, https://blogs.microsoft.com/on-the-issues/2026/10/14/disrupting-the-service-economy-behind-transnational-cybercrime-operations/. Published: Oct 14, 2026. Retrieved: 2026-10-15; Snopes, “Maricopa County didn’t apologize to Trump after uncovering fraud in 2020 election, despite claims”, https://www.snopes.com/fact-check/maricopa-county-apologize-trump/. Published: Oct 15, 2026. Retrieved: 2026-10-15.
- [3] UK UN First Committee statement, Retrieved: 2026-10-15.
- [4] Microsoft On the Issues, YAM/CoGUI/Iron Man post, Retrieved: 2026-10-15; The Record, “Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals”, https://therecord.media/microsoft-takes-down-3-major-chinese-phishing-platforms. Published: Oct 14, 2026. Retrieved: 2026-10-15.
- [5] The Record, “Ukraine says Elon Musk’s Starshield service partially restored after restrictions disrupted drone missions”, https://therecord.media/ukraine-says-starshield-working-again-after-disruption. Published: Oct 14, 2026. Retrieved: 2026-10-15.
- [6] UK Government, “A just and lasting peace requires continued pressure on Russia: UK statement to the OSCE”, https://www.gov.uk/government/speeches/a-just-and-lasting-peace-requires-continued-pressure-on-russia-uk-statement-to-the-osce. Published: Oct 15, 2026. Retrieved: 2026-10-15.
- [7] StopFake / EUvsDisinfo, “How to Justify Crimes Against Humanity: the Kremlin Method”, https://www.stopfake.org/en/how-to-justify-crimes-against-humanity-the-kremlin-method/ and https://euvsdisinfo.eu/how-to-justify-crimes-against-humanity-the-kremlin-method/. Published: Oct 9, 2026. Retrieved: 2026-10-15.
- [8] US Department of Justice, “Bosnian National Sentenced for Violating International Sanctions Against North Korea”, https://www.justice.gov/opa/pr/bosnian-national-sentenced-violating-international-sanctions-against-north-korea. Published: Oct 14, 2026. Retrieved: 2026-10-15.
- [9] UK UN First Committee and OSCE statements, Retrieved: 2026-10-15.
- [10] Microsoft On the Issues, YAM/CoGUI/Iron Man post, Retrieved: 2026-10-15.
- [11] EUvsDisinfo feed https://euvsdisinfo.eu/feed/ opened Oct 15, 2026; newest item Oct 9.
- [12] Microsoft On the Issues, YAM/CoGUI/Iron Man post, Retrieved: 2026-10-15.
- [13] Microsoft On the Issues, YAM/CoGUI/Iron Man post, Retrieved: 2026-10-15.
- [14] The Record, “Brooklyn DA’s office disrupts crypto scam targeting Russian community”, https://therecord.media/brooklyn-da-server-takedowns-crypto-scam-russian-speakers. Published: Oct 14, 2026. Retrieved: 2026-10-15.
- [15] The Record, Microsoft phishing platforms article, Retrieved: 2026-10-15.
- [16] The Record, Starshield article, Retrieved: 2026-10-15.
- [17] Snopes, “Did Trump post AI video of himself playing with tiger after deadly UK attack?”, https://www.snopes.com/fact-check/trump-posts-tiger-video-ai/. Published: Oct 14, 2026. Retrieved: 2026-10-15; Snopes, “Does image show protester removed from crowd at Trump rally in Ohio?”, https://www.snopes.com/fact-check/image-ohio-trump-rally-protester/. Published: Oct 14, 2026. Retrieved: 2026-10-15.
- [18] Snopes Maricopa article; FactCheck.org, “Talarico’s Campaign-Trail Absence Sparks False Rumor”, https://www.factcheck.org/2026/10/talaricos-campaign-trail-absence-sparks-false-rumor/. Published: Oct 13, 2026. Retrieved: 2026-10-15.
- [19] Full Fact, “Old and fake videos shared as Riyadh airport attacks”, https://fullfact.org/conflict/videos-riyadh-airport-attacks-altered-and-false/. Published: Oct 14, 2026. Retrieved: 2026-10-15.
- [20] Microsoft On the Issues; UK UN First Committee statement. Retrieved: 2026-10-15.
- [21] UK UN First Committee statement; Microsoft On the Issues. Retrieved: 2026-10-15.
- [22] The Record, Starshield article, Retrieved: 2026-10-15.
- [23] UK UN First Committee statement; Microsoft On the Issues. Retrieved: 2026-10-15.
- [24] Snopes Maricopa and Ohio articles; Full Fact Riyadh article. Retrieved: 2026-10-15.
- [25] The Record, Starshield article, Retrieved: 2026-10-15.
- [26] UK UN First Committee statement; Microsoft On the Issues; Snopes/Full Fact window checks. Retrieved: 2026-10-15.
- [27] UK OSCE statement; The Record Starshield article. Retrieved: 2026-10-15.
Show 51 more sources
- [28] UK UN First Committee statement, Retrieved: 2026-10-15.
- [29] Microsoft On the Issues; The Record Microsoft phishing article. Retrieved: 2026-10-15.
- [30] Snopes Maricopa, Ohio, and tiger articles, Retrieved: 2026-10-15.
- [31] The Record, Starshield article, Retrieved: 2026-10-15.
- [32] Negative finding from opened UK FCDO, UP English RSS, StopFake, EUvsDisinfo and DOJ items on Oct 15, 2026.
- [33] StopFake / EUvsDisinfo Kremlin method article, Retrieved: 2026-10-15.
- [34] UK OSCE statement, Retrieved: 2026-10-15.
- [35] StopFake, “Fake: Ukrainian MPs Will Be Moved Out of Kyiv by Oct. 17 as Russian Strikes Intensify”, https://www.stopfake.org/en/fake-ukrainian-mps-will-be-moved-out-of-kyiv-by-oct-17-as-russian-strikes-intensify/. Published: Oct 5, 2026. Retrieved: 2026-10-15.
- [36] Negative finding, opened sources Oct 15, 2026.
- [37] Microsoft On the Issues, YAM/CoGUI/Iron Man post, Retrieved: 2026-10-15.
- [38] Microsoft On the Issues; The Record Microsoft phishing article. Retrieved: 2026-10-15.
- [39] The Record Microsoft phishing article, Retrieved: 2026-10-15.
- [40] Graphika https://graphika.com/reports and Google TAG https://blog.google/threat-analysis-group/ listing checks Oct 15, 2026.
- [41] war.gov News RSS opened Oct 15, 2026.
- [42] DOJ Micev sentencing release, Retrieved: 2026-10-15.
- [43] Negative finding vs Oct 14 Information War file; no new primary Iranian IO disclosure opened Oct 15.
- [44] Snopes tiger AI article, Retrieved: 2026-10-15.
- [45] Snopes Ohio protester image article, Retrieved: 2026-10-15.
- [46] Full Fact Riyadh airport videos article, Retrieved: 2026-10-15.
- [47] The Record Starshield article, Retrieved: 2026-10-15.
- [48] The Record Starshield article (Musk X quote relayed), Retrieved: 2026-10-15.
- [49] UK UN First Committee statement, Retrieved: 2026-10-15.
- [50] UK OSCE statement, Retrieved: 2026-10-15.
- [51] Microsoft On the Issues, Retrieved: 2026-10-15.
- [52] CISA news XML https://www.cisa.gov/news.xml opened Oct 15, 2026.
- [53] Snopes tiger AI article, Retrieved: 2026-10-15.
- [54] Microsoft On the Issues; The Record Microsoft phishing article. Retrieved: 2026-10-15.
- [55] Snopes Maricopa article, Retrieved: 2026-10-15.
- [56] Snopes Ohio protester image article, Retrieved: 2026-10-15.
- [57] Full Fact Riyadh airport videos article, Retrieved: 2026-10-15.
- [58] Snopes, “Claim NY Democrats fined unvaccinated Amish children $2K per day distorts facts”, https://www.snopes.com/fact-check/new-york-unvaccinated-amish-children/. Published: Oct 14, 2026. Retrieved: 2026-10-15.
- [59] FactCheck.org Talarico article, Retrieved: 2026-10-15.
- [60] Snopes Maricopa, Ohio, tiger; FactCheck.org Talarico. Retrieved: 2026-10-15.
- [61] UK UN First Committee and OSCE statements, Retrieved: 2026-10-15.
- [62] The Record Starshield article, Retrieved: 2026-10-15.
- [63] Synthesis; Information War hub https://petersworld.org/information-war-news-hub/.
- [64] UK OSCE statement, Retrieved: 2026-10-15.
- [65] StopFake / EUvsDisinfo Kremlin method article, Retrieved: 2026-10-15.
- [66] Negative finding from opened ICC news listing and window feeds Oct 15, 2026.
- [67] (statement) DOJ Micev sentencing release, https://www.justice.gov/opa/pr/bosnian-national-sentenced-violating-international-sanctions-against-north-korea. Statement made Oct 14, 2026, time not shown; published Oct 14, 2026. Retrieved: 2026-10-15.
- [68] (statement) Microsoft On the Issues, YAM/CoGUI/Iron Man post, https://blogs.microsoft.com/on-the-issues/2026/10/14/disrupting-the-service-economy-behind-transnational-cybercrime-operations/. Statement made Oct 14, 2026, time not shown; published Oct 14, 2026. Retrieved: 2026-10-15.
- [69] The Record Starshield article, Retrieved: 2026-10-15.
- [70] (statement) UK UN First Committee statement, Retrieved: 2026-10-15. Statement made Oct 15, 2026, time not shown.
- [71] (statement) UK OSCE statement, Retrieved: 2026-10-15. Statement made Oct 15, 2026, time not shown.
- [72] UK UN First Committee statement, Retrieved: 2026-10-15.
- [73] Microsoft On the Issues, Retrieved: 2026-10-15.
- [74] The Record Starshield article, Retrieved: 2026-10-15.
- [75] Snopes Maricopa article, Retrieved: 2026-10-15.
- [76] UK OSCE statement; StopFake Kremlin method. Retrieved: 2026-10-15.
- [77] Negative finding / watch item, Oct 15, 2026.
- [78] Full Fact Riyadh article; related Middle East update https://petersworld.org/middle-east-war-update-oct-14/.
Sources
- UK Government
- Microsoft On the Issues: Disrupting the service economy behind transnational cybercrime operations
- Microsoft On the Issues: Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
- The Record
Related coverage
- War Room dashboard
- Information War News Hub
- Information War Update — October 14, 2026
- Middle East War Update — October 14, 2026





