CSIN
AI Shield 路 Information Resilience of Armenia01 / 22

DIAGNOSTIC
WORKSHOP

Mapping the threat. Building the curriculum.
Yerevan 路 10-12 August 2026

Facilitated by
Petros Tovmasyan
J臋drzej B艂aszczak
Maciej Malik
Hosted with
AIISA 路 Yerevan
Programme
RITA 路 22/RITA1/2026

Scroll or use arrow keys

Before we start02 / 22

For a year, Armenia was the most-targeted country on earth for Russia's most active disinformation network.

Over thirty campaigns, April 2025 to April 2026. In a second operation, only Ukraine and France rank above it. We are here to take it apart.

Welcome 路 Three days, one objective03 / 22

WHAT WE DO THIS WEEK

Over the next three days we turn a year-long plan into something concrete and built for Armenia. We bring Poland's decade of hard-won experience; you bring what only people on the ground know.

1

Map the threat

Build one clear picture of the disinformation aimed at Armenia: the groups behind it, the stories they tell, the channels they use.

2

Test the toolkit

Put real investigation tools to work on actual Armenian cases. Not slides, hands on the keyboard.

3

Design the programme

Write the course together: the one that turns this group into trainers for the next, wider circle.

The threat 路 Armenia under fire04 / 22

ARMENIA IS A PRIORITY TARGET

No. 1

Most-targeted country on earth in Storm-1516 activity, April 2025 to April 2026: over thirty campaigns.

No. 3

Rank in Operation Overload, behind only Ukraine and France. A country of three million.

~7M

Views on the 'Ukrainization' story: that moving toward Europe means war, 'like Ukraine.'

75+

Organisations impersonated: newsrooms, but institutions and people too, their identity faked.

Rankings: Institute for Strategic Dialogue, 27 May 2026, measured per operation. Views: DFRLab (Dec 2025). Impersonations: NewsGuard.

Anatomy of the operation05 / 22

ONE NETWORK, BUILT TO BE REUSED

Russia does not build a new machine for each country it targets. Investigators traced the fake websites aimed at Armenia's election, and found the same setup recycled from earlier campaigns abroad.

72

Fake websites in one network, aimed at Armenia's election.

56

Of them ran the same attacks on Armenia's prime minister.

17

Had already been used in an earlier Russian operation in France.

Source: CheckFirst (June 2026). The 56 are part of the 72; the 17 come from a separate French-language investigation.

The adversary06 / 22

THE THREAT HAS NAMES

Storm-1516

Russia's most active network against Armenia, and the one Armenia leads the world in being targeted by. Very likely run by a US fugitive, John Mark Dougan, working with a Moscow institute and with GRU support. It nearly doubled its output in 2025: five new website networks totalling 453 sites. It makes AI deepfakes attacking the prime minister.

Operation Overload

Named by France's disinformation watchdog. It has impersonated over 75 organisations and floods journalists and fact-checkers with fakes to drown out the truth. More than 700 videos in 2025. Armenia is its third most-targeted country, behind Ukraine and France.

Doppelg盲nger

Builds pixel-accurate clones of trusted news sites at look-alike addresses, stealing the mastheads of CNN, Reuters and Euronews, so invented stories arrive wearing someone else's credibility. In Armenia: a France24 clone. In Poland it cloned our four largest outlets.

Strategic Culture Foundation

EU-sanctioned, and sanctioned by the US Treasury as SVR-directed. It is where the 'Ukrainization' narrative was authored before anyone else repeated it: the origin, not an amplifier. Its partner R-FBI ran the fake 'secret biolab' story in seven languages.

Related and overlapping, sharing infrastructure and narratives. The evidence does not support calling them centrally run, and we do not. Sources: Recorded Future (Sep 2025); VIGINUM (2024); EU EEAS (Mar 2026); DFRLab; NewsGuard; CivilNet.

The narratives07 / 22

THE PLAYBOOK AGAINST ARMENIA

  1. 1'You'll end up like Ukraine': that moving toward Europe will drag Armenia into war.
  2. 2Smearing the leader: personal attacks on PM Pashinyan, including fake AI videos.
  3. 3'Selling out the nation': that Armenia is being handed to T眉rkiye and Azerbaijan.
  4. 4Fear: warnings of an imminent Azerbaijani attack and economic ruin.
  5. 5The same script as Moldova: the identical playbook used against Moldova's president.

Why now

  • A law to pursue EU membership (2025).
  • A peace deal with Azerbaijan, without Moscow.
  • It froze its Russian-led military alliance.
  • June 2026 elections; the fake-news network still runs.

Sources: EU EEAS 4th FIMI Report (Mar 2026); DFRLab (Dec 2025); MythDetector; CivilNet.

The election 路 7 June 202608 / 22

DID IT WORK?

What happened

49.8%

Civil Contract. 64 of 105 seats. Pashinyan returned.

23.2%

Strong Armenia, the pro-Russian runner-up. Turnout 58.97%.

The verdict: CheckFirst titled its post-election report 'Noise without effect'. Electoral impact: limited.

So why are we here

Reach is not effect. We are not going to tell you this operation flipped your election, because the evidence says it did not. But the same report says the infrastructure remains active. It was built to be reused. A constitutional debate is coming, and possibly an accession referendum. The machine does not need a new build for either.

Result: ARMENPRESS, OC Media, Al Jazeera, cross-checked against OSCE/ODIHR and EVN Report. Assessment: CheckFirst, 'Noise without effect', 10 June 2026. OSCE/ODIHR recorded Russian pressure and threats at an unprecedented level.

The response 路 Why us09 / 22

POLAND: FROM TARGET TO SHIELD

One EU country went the whole way, from prime target to teacher of how to fight back. Twelve years of turning attacks into know-how: methods, tools and training, all tested against the real thing. Same script, new target: 'NATO will drag you into war' became 'the EU will drag you into war, like Ukraine.'

What Armenia receives 路 1

Method

A proven way to map coordinated campaigns (DISARM, the taxonomy the EEAS reports in).

What Armenia receives 路 2

Toolkit

The investigation tools, already tested on real cases.

What Armenia receives 路 3

Lessons

What failed too, not just what worked.

The same machine, re-skinned10 / 22

WHAT IT LOOKED LIKE IN POLAND

The same operators hit Poland first. Same tactics, same stories, a decade earlier. This is the mirror.

In PolandThe same story, aimed at you
Cloned TVN24, Onet, Interia, Wprost: our four biggest newsrooms, cloned at look-alike addresses.Cloned France24; faked CNN and Reuters logos.
'NATO faked the 2025 drones' after Russian drones crossed into Poland, to drag Poles into war.'You'll end up like Ukraine.'
PM cast as a 'puppet of Brussels' who sold out the country.The prime minister smeared, with AI deepfakes.
'Poland bankrupts itself for Ukraine', plus Volhynia: a 1943 massacre, still raw, used to split Poles from Ukrainians.Fear of attack, economic ruin, grievance.

Sources: VIGINUM; Meta; Google GTIG; DFRLab; EUvsDisinfo. Two of the same networks (Doppelg盲nger, Pravda) run in both countries; INFO OPS Poland co-studied Armenia with DFRLab.

Where we fit11 / 22

VULNERABLE, BUT NOT DEFENCELESS

18%

Of Armenians can reliably verify a dubious claim (Internews, 2024).

62%

Rely on social media as their main political news source (Internews, 2024).

Defenders: strong fact-checkers already fight back: FIP.am, MIC, PJC. EUPM Armenia: the civilian EU Partnership Mission, established 21 April 2026, two-year mandate covering FIMI, cyber and illicit finance.

The gap we fill

Armenia has strong fact-checkers and a new EU mission. The layer that is thin everywhere, here included, is standing capacity to take apart whole coordinated, AI-driven campaigns rather than single claims. Tell us if we have this wrong. That is the layer AI Shield builds, working alongside the people already in the field, not over them.

The project12 / 22

AI SHIELD AT A GLANCE

Funded by
RITA - Region in Transition (Polish-American Freedom Foundation)
Duration
June 2026 - May 2027
Lead / Partner
CSIN (Poland) 路 AIISA (Armenia)
Total budget
PLN 81,260
Two tracks
A - Experts (analysts) 路 B - Wider circle (CSOs and media)
Outcomes
5 measurable results
The model13 / 22

A CASCADE OF CAPABILITY

1

Track A: experts

12 to 15 analysts from AIISA and partner institutes go deep.

2

They become trainers

Those analysts then train the next, wider group, in Armenian.

3

Track B

30 to 36 civil-society and media staff. Broad reach.

The real test of success is not what we teach you, it is what you teach others. Track B is delivered by AIISA, not by us.

The journey14 / 22

WHERE THIS WORKSHOP FITS

  1. 1

    Diagnostic Workshop

    Yerevan 路 Aug 2026

    You are here

  2. 2

    Training the trainers

    54 h 路 Oct-Dec 2026

  3. 3

    Pilot workshops

    AIISA-led 路 Jan-Mar 2027

  4. 4

    Toolkit, report & panel

    Apr-May 2027

This week15 / 22

WHAT WE LEAVE THE ROOM WITH

1

Threat map

One shared, evidence-based map of the disinformation aimed at Armenia: who is behind it, what they claim, and where it spreads.

2

Tested toolkit

A short list of investigation tools, each tried on a real Armenian case, with notes on what works here.

3

Draft course

A working training course, with clear pass criteria, ready to run in October.

Day 1 of 316 / 22

THE LANDSCAPE

  1. 1

    Poland's path, 2014-2026

    What worked, what failed, and what actually carries over.

  2. 2

    Who is behind it

    The main Russian operations, and the local voices that echo them.

  3. 3

    Group exercise

    We build the first Armenian threat map together, on the wall.

  4. 4

    Debrief

    Gaps, blind spots, and where to dig deeper tomorrow.

Day 2 of 317 / 22

THE TOOLKIT, HANDS-ON

01

Spotting it early

Junkipedia 路 Media Cloud
02

Checking images and deepfakes

InVID WeVerify 路 Yandex 路 FotoForensics 路 Hive
03

Catching coordinated pushes

TGStat 路 Telemetrio (Telegram-first)
04

Mapping the networks

Gephi 路 NodeXL 路 Maltego

The method matters more than the tool. Older Twitter-based bot detectors no longer work; Armenia's fight is mostly on Telegram. Every tool here is tested on a real case.

Day 3 of 318 / 22

DESIGNING THE PROGRAMME

Three days of diagnosis become the plan for the next nine months.

  1. 1

    Design the 54-hour course together

    Part one in person in Yerevan, part two online over six weeks.

  2. 2

    Set the pass mark

    A measurable 30% jump in skill, from start to finish.

  3. 3

    Pick the right people

    The strongest 12 to 15 analysts, from AIISA and partner institutes.

  4. 4

    Agree roles and dates

    Who does what, by when, for October's training.

Anchored on

  • DISARM framework: the shared taxonomy for labelling disinformation tactics, adopted by the EEAS and EDMO, so Armenian reports plug into EU data.
  • Berkeley Protocol: the UN-backed method for collecting online evidence: chain of custody, hashing, archiving.
  • Learn-by-doing: teaching the Kolb cycle and teach-back, so analysts can teach this, not just do it.
Working together19 / 22

HOW WE WORK, AND THE RULES OF THE ROOM

Division of labour

  • CSIN: the method, the investigation tools, running the sessions.
  • AIISA: local knowledge, real cases, the security picture, finding the people.
  • Language: Armenian-language mentoring throughout (Karolina Grigoryan).

Rules of the room

  • Nothing is quoted by name, so speak freely.
  • Our working language is English.
  • Candid beats polite.
  • Everything this week is a working draft.
The ask20 / 22

WHAT WE ASK OF YOU THIS WEEK

  1. 1

    Your candid read of the threat. You live this, we don't.

  2. 2

    Real local cases. Bring examples we can take apart on screen, together.

  3. 3

    The right people. Your strongest 12 to 15 for the expert group.

  4. 4

    Honest feedback. On what will, and won't, work in Armenia.

  5. 5

    Ownership. By spring, this becomes your programme to run.

The horizon21 / 22

BEYOND THE WORKSHOP

A lasting capability

An Armenian team that can take apart coordinated, AI-driven disinformation on its own.

Reach into institutions

Findings feeding the foreign ministry, parliament's security committees and the EU Delegation.

A joint bid

A shared CSIN-AIISA bid for NATO science-for-peace funding in 2027.

A regional model

A blueprint other societies in the region can adopt.

Closing22 / 22

FROM TARGETS TO A SHIELD.

Thank you. Let's get to work.

Petros Tovmasyan 路 CSIN

Caucasian Social Innovation Network

contact@caucasian.network

Funded under the RITA - Region in Transition programme of the Polish-American Freedom Foundation, run by the Education for Democracy Foundation.