How Russia is trying to disrupt the 2024 Paris Olympic Games

Russia is ramping up malign disinformation campaigns against France, French President Emmanuel Macron, the International Olympic Committee (IOC), and this summer’s Olympic Games in Paris. While Russia has a decades-long history of targeting the Olympic Games, the Microsoft Threat Analysis Center (MTAC) has observed old tactics blending with artificial intelligence (AI) in malign activity that may intensify as the 2024 Paris Opening Ceremony approaches. These operations have two principal aims:

• Denigrate the reputation of the IOC
• Create the expectation of violence breaking out in Paris at the Games

Several prolific Russian influence actors, which Microsoft tracks as Storm-1679 and Storm-1099, have pivoted their operations since June 2023 to focus on the Olympics. These insights are detailed in a special Microsoft Threat Intelligence report published today: “Russian Influence Efforts Converge on 2024 Paris Olympic Games.”

Olympics Has Fallen

Olympics-focused activity kicked off in June 2023, when Storm-1679 released on Telegram and then spread online a feature-length film called “Olympics Has Fallen”, mimicking the 2013 American political action thriller “Olympus Has Fallen”. Using a fake AI-generated audio impersonating the actor Tom Cruise to imply his participation, the film disparaged the IOC leadership. The use of slick computer-generated special effects and a broad marketing campaign, including faked endorsements from Western media outlets and celebrities, indicates a significant increase in skill and effort compared to most Influence Operations (IO) campaigns.

Spreading fear of violence

Storm-1679’s goals are not limited to defaming the IOC. It also seeks to spread public fear to deter spectators from attending the Games. Over the past year, it has consistently produced a collection of deceptive videos on the expectation of violence at the Games. Examples include:

• A video purporting to be from Brussels-based media outlet Euro News, claimed Parisians were buying property insurance in anticipation of terrorism at the Games.
• A fake video pretending to come from French broadcaster France24 claimed that 24% of tickets for the games had been returned due to fears of terrorism.
• Fake video press releases were produced posing as coming from the American Central Intelligence Agency (CIA) and the French General Directorate for Internal Security (DGSI) warning potential attendees to stay away from the Paris 2024 Olympics due to the alleged risk of a terror attack.

  

• Storm-1679 has also sought to use the Israel-Hamas conflict to fabricate threats to the Games. In November 2023, it posted images claiming to show graffiti in Paris threatening violence against Israeli citizens attending the Games. Microsoft assesses this graffiti was digitally generated and unlikely to exist at a physical location.
• Other images and videos referenced the 1972 Munich Olympics where members of Black September, a militant organization, killed 11 members of the Israeli Olympic team and a West German police officer. Microsoft does not presently have enough information to attribute the video to a specific actor, but its heavy amplification by pro-Russian bot accounts suggests the video may be another operation in the broader Olympics campaign.

Other Russian threat actors are joining the fray

Storm-1679 is not the only Russia-aligned actor seeking to undermine the 2024 Games. The Russia-affiliated actor that Microsoft tracks as Storm-1099, better known as “Doppelganger,” has ramped up its anti-Olympics messaging in the past two months. Using its array of 15 unique French language “news” sites, including its core disinformation outlet Reliable Recent News (RRN), it makes claims of rampant IOC corruption and warns of potential violence at the Games. The actor also makes forgeries of French outlets Le Parisien and Le Point to echo such claims and castigate Macron and his government, his supposed showmanship around the Games and his indifference to the hardships faced by French citizens.

Looking forward

With the Olympic Games opening ceremony less than three months away on July 26^th, MTAC expects Russian Olympics-focused malign activity to intensify. Predominantly French-language activities will likely expand to English, German, and other languages to maximize visibility and traction online and the use of generative AI will also likely increase. While video has traditionally been a powerful tool for Russian IO campaigns and will remain so, we are likely to see a tactical shift towards online bots and automated social media accounts. These can offer the illusion of widespread support by quickly flooding social media channels and give the Russians a level of plausible deniability.

On the ground, Russian actors may look to exploit the focus on stringent security by creating the illusions of protests or real-world provocations, thus undermining confidence in the IOC and French security forces. In-person staging of events – whether real or orchestrated –near or around Olympic venues could be used to manipulate public perceptions and generate a sense of fear and uncertainty.

Microsoft remains committed to protecting the conduct and integrity of the 2024 Summer Olympic Games. MTAC will monitor and report on any campaigns stemming from Kremlin-backed actors in the lead up to and opening of the Paris Games.

Tags: cyber influence, influence operations, Microsoft Threat Analysis Center, MTAC, Russia