Sign in

CheckFirst

@checkfirst.network
1.7K followers 230 following 331 posts

We pioneered algorithm analysis and deploy expert skills to probe the digital space and its actors. checkfirst.network

PostsRepliesMedia
CheckFirst @checkfirst.network · 28/09/2026
We invite Directorates of Communication, spokespersons, crisis officials and newsrooms to attend a new immersive #webinar on disinformation organised by @samsafr.bsky.social, featuring @herve.checkfirst.network, Valentin Laebens, and @zard8.bsky.social, on 29 September. Join them 🔗 luma.com/4b39s0tf
luma.com
Webinaire - Attaques informationnelles : les détecter pour réagir à temps · Zoom · Luma
Face aux attaques informationnelles, la question n'est plus de savoir si votre organisation sera visée, mais si elle sera prête. Rumeur virale, faux comptes…
010
CheckFirst @checkfirst.network · 28/09/2026
🇦🇲 On 1 October, @nelly.checkfirst.network will take part in a discussion in Yerevan, Armenia, on how different societies have responded to election interference and what lessons can be drawn from recent electoral experiences 🔗 www.unveilthetruth.org/democracyat...
unveilthetruth.org
Democracy at the Ballot Box | Unveil the Truth
110
CheckFirst @checkfirst.network · 28/09/2026
🤖 On 29 September, Shivika Sharma will be attending the #AI Policy Summit in Zurich, Switzerland. This event will explore how public policy and societal engagement can capture the benefits of artificial intelligence, minimise its risks, and enhance its adoption. Come say hi! www.aipolicysummit.ch/
aipolicysummit.ch
AI Policy Summit 2026 - AI Policy Summit 2026
110
CheckFirst @checkfirst.network · 28/09/2026
New ways to fight online #disinformation. How public institutions can get a handle on #AI. How civil society pushes back against election interference. This week, we’re speaking at and taking part in a range of events. Different topics, same goal: building a safer online environment for everyone. ⤵️
012
CheckFirst @checkfirst.network · 15/09/2026
👀 Stay tuned ... the nitty-gritty details of how it was made possible are coming. checkfirst.network/the-kremlins...
checkfirst.network
The Kremlin’s Digital Pirates: How Russian Tracking Pixels Harvest Romanians’ Data to Fund Conspiracies and Extremism - CheckFirst
For five months, we tracked over 100,000 ads displayed across 131 websites in Eastern Europe. After decoding the hidden mechanisms behind these ads, we uncovered a network of Russian companies. This i...
020
CheckFirst @checkfirst.network · 15/09/2026
This investigation was conducted in collaboration with journalists from across Eastern Europe and made possible by Journalism Science Alliance A huge thanks to our them for this joint effort throughout the year
110
CheckFirst @checkfirst.network · 15/09/2026
International experts consulted by Snoop warn that such databases serve purposes far beyond advertising: they can become tools for surveillance and behavioral manipulation when they end up in the hands of authoritarian states.
110
CheckFirst @checkfirst.network · 15/09/2026
This article is the result of a technical investigation into the code behind the ads running on Romanians’ computers. We built custom software that allowed us to follow the Russian money flowing into Eastern European websites, including Romanian ones, over the past few months.
110
CheckFirst @checkfirst.network · 15/09/2026
🇷🇴 This investigation reveals what data is harvested from Romanians, who ends up receiving it and why the ads shown on platforms with conspiratorial and extremist content are among the most valuable to this network.
110
CheckFirst @checkfirst.network · 15/09/2026
𝗡𝗘𝗪 𝗥𝗘𝗣𝗢𝗥𝗧 👾 -by our partner Snoop.ro For 5️⃣ months, we tracked over 100,000 ads displayed across 131 websites in Eastern Europe. After decoding the hidden mechanisms behind these ads, we uncovered a network of Russian companies.
122
CheckFirst @checkfirst.network · 08/09/2026
📆 Upcoming events related to information manipulation, platform regulation and OSINT. By the way, @nellyp.checkfirst.network will be joining a panel discussion at the @mythdetector.com "Unveil the Truth" conference on October 1st! Subscribe 🔗 checkfirst.network/newsletter/
checkfirst.network
Indeed! The official CheckFirst newsletter - CheckFirst
Subscribe to our newsletter and get a monthly recap of the latest news from CheckFirst straight in your inbox
020
CheckFirst @checkfirst.network · 08/09/2026
🎙️ Our Pravda dashboard and our @radar.checkfirst.network helping to build other toolkits (👋 @edmo-belux.bsky.social and @alliance4europe.bsky.social). Maltego also released a report expanding on our investigation into the GRU's Information Operations Troops!
111
CheckFirst @checkfirst.network · 08/09/2026
👀 A sneak peek at what to expect from us at the @disinfo.eu annual conference. We'll be sharing more information soon once the full programme is online!
110
CheckFirst @checkfirst.network · 08/09/2026
📝 A 5-minute survey exploring the main issues faced by people who work on #information integrity. docs.google.com/forms/d/e/1...
docs.google.com
European Information Integrity Community Survey
What are the most pressing problems facing the European information integrity community today? And what resources, capabilities or infrastructure could help to mitigate these problems? This short survey (~5 minutes) helps us learn about what to advocate for and what to prioritise. Thank you for your input. This survey is conducted by CheckFirst and EFCSN.
110
CheckFirst @checkfirst.network · 08/09/2026
📫 You've got mail! The September edition of Indeed, our monthly newsletter, is out. 🔗 r.crossover.social/3gvudqjxzlx... Here's what's inside ⤵️
122
CheckFirst @checkfirst.network · 16/07/2026
CheckFirst is 6 years old already! 🥳 Read our blog post to find out more about our achievements of the past year: the innovative research we conducted, the fresh projects we built, and the new leadership team behind them. 🔗 checkfirst.network/checkfirsts...
checkfirst.network
CheckFirst’s 6th Birthday: a year of innovations - CheckFirst
We are delighted and proud to celebrate our sixth anniversary! We marked this occasion by reflecting on our achievements and learnings over the past year.
021
CheckFirst @checkfirst.network · 02/07/2026
➡️ Near-identical posts across Roska Bridge and the Pravda Network constitute indicators of CIB and strongly suggest a structural link with the Pravda ecosystem, although without formal proof. 📩 For any questions about this report, please contact us at info@checkfirst.network.
020
CheckFirst @checkfirst.network · 02/07/2026
➡️ Mastodon’s per-instance moderation lets Roska Bridge stay online even after partial Bluesky takedowns. ➡️ The promotion of MAX, a state-backed Russian messaging app requiring a Russian phone number, suggests the IMS targets domestic Russian audiences as well as Western ones.
120
CheckFirst @checkfirst.network · 02/07/2026
The IMS weaponizes @ap.brid.gy to cross-post from Mastodon to Bluesky in coordinated waves, laundering narratives from sanctioned Russian outlets (RT, Sputnik, Pravda Network) and pro-Russian Telegram channels before moderation catches up.
220
CheckFirst @checkfirst.network · 02/07/2026
𝗡𝗘𝗪 𝗥𝗘𝗣𝗢𝗥𝗧 🌉 𝗥𝗼𝘀𝗸𝗮 𝗕𝗿𝗶𝗱𝗴𝗲: how a pro-Russian IMS exploits vulnerabilities of decentralised platforms to spread propaganda 🔗 checkfirst.network/roska-bridge...
"Roska Bridge": How a pro-Russian IMS exploits vulnerabilities of decentralised platforms to spread propaganda.
134
CheckFirst @checkfirst.network · 11/06/2026
Pashinyan won. The operations fired blanks at the ballot box. Our report 🔗 checkfirst.network/noise-witho...
checkfirst.network
Noise without effect: anti-Pashinyan disinformation on the rise ahead of Armenian parliamentary elections - CheckFirst
We spent one month ahead of Armenian parliamentary elections monitoring disinformation spread by foreign Information Manipulation Sets and tracking what recommendation algorithms were pushing to diaspora users searching for content about the vote.
010
CheckFirst @checkfirst.network · 11/06/2026
On TikTok, French users searching "Pashinyan" were served hostile content, notably AI-generated videos, sometimes from accounts linked to the Kremlin, Azerbaijan, and the Armenian diaspora.
110
CheckFirst @checkfirst.network · 11/06/2026
Russia deployed a network of 72 fake news sites linked to #Storm1516, 56 of those domains pushed narratives targeting PM Pashinyan. 17 had also previously targeted France's municipal elections.
410
CheckFirst @checkfirst.network · 11/06/2026
𝗡𝗘𝗪 𝗥𝗘𝗣𝗢𝗥𝗧 🇦🇲 In the month ahead of #Armenia's June 7 parliamentary #elections, we monitored how Russian information manipulation sets were targeting the vote, and what #TikTok and #YouTube’s algorithms were actually serving to French users searching for content about it.
Cover of CheckFirst's investigation "Noise without effect: anti-Pashinyan disinformation on the rise ahead of Armenian parliamentary elections", featuring Armenian flags, a picture of the Armenian National Assembly, and a man's silhouette.
283
CheckFirst @checkfirst.network · 28/05/2026
Read ObSINT guidelines 🔗 obsint.eu/guidelines-...
obsint.eu
Guidelines for Public Interest OSINT Investigations | ObSINT
These Guidelines have been produced by organisations conducting Open Source Intelligence (OSINT) based research for public interest in Europe. The organisations having participated in the redaction of those Guidelines are EU DisinfoLab, CheckFirst, Centre for Information Resilience, DFR Lab, Open Facto, OSINTCurious, and Logically. We acknowledge that we do not represent the entire OSINT community […]
010
CheckFirst @checkfirst.network · 28/05/2026
🎦 On May 19th, in a @disinfo.eu webinar, our COO @nellyp.bsky.social shared how @obsint.eu guidelines can support ethical #OSINT research. Watch the replay 🔗 checkfirst.network/watch-the-r...
checkfirst.network
Watch the replay: Ethics in the fight against disinformation: from theory to practice - CheckFirst
On May 19th, Nelly Pailleux discussed the ethical implications while conducting OSINT investigations in light of the ObSINT guidelines.
112
CheckFirst @checkfirst.network · 19/05/2026
Today, during a webinar hosted by @disinfo.eu, our COO @nellyp.bsky.social will discuss the ethical questions that surround the use of OSINT in disinformation investigations and how the @obsint.eu guidelines can help. Join the discussion at 2:30 pm, CEST 🔗 www.disinfo.eu/19-may-ethic...
022
CheckFirst @checkfirst.network · 29/04/2026
Today, we’re releasing the CheckFirst Import Connector on Filigran’s #opensource cyber threat intelligence platform, #OpenCTI. This connector is built to help track and monitor the #Pravda network. 🔗 checkfirst.network/checkfirst-...
The CheckFirst Import Connector landing page on the OpenCTI platform, behind CheckFirst, OpenCTI and Filigran logos.
062
CheckFirst @checkfirst.network · 27/04/2026
Watch the replay 🔗 checkfirst.network/watch-the-r...
checkfirst.network
Watch the replay: Decoding Russian intelligence: what medals and insignia reveal - CheckFirst
On April 23rd, Hervé Letoqueux presented findings from two recent investigations merging OSINT and phaleristics.
021
CheckFirst @checkfirst.network · 27/04/2026
🎦 What can old military decorations found on the Internet reveal about the most opaque Russian intelligence infrastructures? In a webinar hosted by @disinfo.eu, @herve.checkfirst.network answered that question by presenting findings from two recent investigations merging #OSINT and phaleristics. ⤵️
130
CheckFirst @checkfirst.network · 23/04/2026
Today, alongside @disinfo.eu, we are inviting you to attend a webinar in which we will explore our #OSINT investigations into Russian military awards. @herve.checkfirst.network will talk about our methodology, our findings and more! Join us 🔗 www.disinfo.eu/23-april-dec...
disinfo.eu
23 April: Case Study - Decoding Russian intelligence: What medals and insignia reveal
Explore how OSINT analysis of Russian military medals and insignia reveals hidden structures within the FSB and GRU’s cyber and intelligence operations.
023
CheckFirst @checkfirst.network · 22/04/2026
Join us tomorrow at 2:30 pm (CET) to find out more about our #OSINT work featuring Russian military awards!
012
CheckFirst @checkfirst.network · 09/04/2026
Grab your pen, your notebook and your laptop, it's today! 🔥
020
CheckFirst @checkfirst.network · 07/04/2026
Want to know how #disinformation campaigns work? Come and see us at the Agora for #Journalism in Tours, France, on 9 April, where we'll be showcasing tutki.tech in a 90-minute workshop with @samsafr.bsky.social. Join us 🔗 journalisme.com/programmati...
'90 minutes dans la bataille informationnelle', a French language workshop set for April 9 in Tours, France, organized by CheckFirst and Samsa.
031
CheckFirst @checkfirst.network · 13/03/2026
How did we do that? With Tutki, our training platform designed to simulate disinformation campaigns. Tutki is also available as a standalone platform for trainers 🔗 tutki.tech/ We will also run another session in Tours on April 9th. See you there! 🔗 journalisme.com/programmati...
journalisme.com
90 minutes dans la bataille informationnelle - Journalisme.com
Atelier immersif avec Samsa et CheckFirst
011
CheckFirst @checkfirst.network · 13/03/2026
We partnered with @samsafr.bsky.social to help @radiofrance.fr journalists to learn how to identify and analyze #disinformation campaigns in electoral context. 🔗 checkfirst.network/check-first...
checkfirst.network
Check First and Samsa immerse French journalists in a virtual foreign interference campaign - CheckFirst
We constructed a one-day training with the French training organisation Samsa to help French journalists to learn how to identify and analyze information manipulation, disinformation campaigns, and coordinated inauthentic behavior in electoral context.
141
CheckFirst @checkfirst.network · 12/03/2026
🗳️ Pour en savoir plus sur les tentatives de manipulations de l'information pendant la campagne municipale française, on vous invite à écouter l'interview de notre CEO @herve.checkfirst.network dans @propagationspod.bsky.social ! 🎧 shows.acast.com/propagations...
shows.acast.com
Municipales 2026 : la désinfo russe au programme ? | Propagations
36000 communes, combien d'attaques informationnelles ?
023
CheckFirst @checkfirst.network · 09/03/2026
Read this edition ➡️ r.crossover.social/3gt9o97xzlx... Subscribe ➡️ checkfirst.network/newsletter/
checkfirst.network
Indeed! The official Check First newsletter - CheckFirst
Subscribe to our newsletter and get a monthly recap of the latest news from CheckFirst straight in your inbox
000
CheckFirst @checkfirst.network · 09/03/2026
Subscribe to our newsletter to learn more about our media interventions (including @herve.checkfirst.network's interview with @propagationspod.bsky.social), our selected publications on topics of interest, and upcoming events related to #disinformation, #OSINT, and more!
120
CheckFirst @checkfirst.network · 09/03/2026
📫 You've got mail! The March issue of our monthly newsletter 'Indeed' is out. This edition features a glimpse of our latest #investigation into the GRU's Information Operations Troops (VIO), using photographs of medals and #OSINT.
131
CheckFirst @checkfirst.network · 09/02/2026
Read our full #investigation 🔗 checkfirst.network/unveiling-g... Subscribe to our monthly newsletter 🔗 checkfirst.network/newsletter/ Thanks for reading!
This report demonstrates that the methodology we used in our previous investigation into the infrastructure of the FSB’s 16th Center is efficient and can be easily replicated in further research. We will continue our research into decorations linked to the GRU’s VIO, and will extend our investigations to other Russian security and intelligence services in the months ahead.

Read the full report:
https://checkfirst.network/
Contact us:
info@checkfirst.network
193
CheckFirst @checkfirst.network · 09/02/2026
Our visuals below provide you with a first glance at our findings, with examples of units featuring a comprehensive description of the VIO.
Navy-blue shield patch with orange border showing crossed sword, sealed scroll, three-flame grenade and psi-shaped arrowhead symbol, annotated explanations.Blue infographic describing the Computer Network Operations department, insignia with diamond, lightning bolt and crossed swords, and Unit 74455 based in Khimki.Blue report slide detailing the Encryption & Cryptanalysis Department, badge with crossed keys and three-flame grenade, and Unit 78430 location in Ekaterinburg.Blue slide explaining the Psychological Operations Department insignia and Unit 54777 emblems, showing badges, an owl clutching a snake, and the Greek letter psi (which the central stem ends with an arrowhead).
151
CheckFirst @checkfirst.network · 09/02/2026
🏅 We have gathered 118 photos from specialised websites and forums. 🗺️ We have concluded that the VIO is composed of at least 15 units across Russia. 🔎 These units are divided into three specialities: encryption/cryptoanalysis, computer network operations (CNO), and psychological operations.
In 2025, we published a report delving into the infrastructure of the FSB’s 16th Centre, combining a one-year exploration of websites and forums specialised in insignia collecting and traditional OSINT techniques. 

Building on this initial study, and once again relying on the analysis of military decorations — known as phaleristics — we are now publishing a report focused on the Information Operations Troops (VIO) of Russia’s military intelligence service, better known by the acronym GRU. Key findings graphic: 118 photos collected, at least 15 units identified, and 3 departments noted, set on a blue wave-patterned background.
161
CheckFirst @checkfirst.network · 09/02/2026
🔴 𝗡𝗘𝗪 𝗥𝗘𝗣𝗢𝗥𝗧 Last year, we've been able to unearth the infrastructure of the FSB's 16th Centre, combining #OSINT techniques and photos of old medals. We replicated this method to explore the Information Operations Troops (#VIO) of #Russia’s military intelligence service (#GRU).
Report cover showing a dark blue patch with crossed sword, arrow and scroll emblem, titled "Unveiling GRU's Information Operations Troops (VIO)"
12719
CheckFirst @checkfirst.network · 03/02/2026
𝗜𝗡𝗙𝗢𝗥𝗠𝗔𝗧𝗜𝗢𝗡 📍 Pan Piper, Paris 📆 Feb 5th, 11:35 (panel discussion) and 15:00 (podcast recording) CET Registration link 🔗 video-mobile.org/RIE2026/pro... Programme 🔗 yp.events/fe97b31e-0b...
yp.events
Rencontres de l'innovation éditoriale 2026 - 5 février 2026 à 08:30 - Paris - Yurplan
010
CheckFirst @checkfirst.network · 03/02/2026
Hervé has also been invited to speak on the 'Propagations' podcast (hosted by @guillaumeled.it) for a second time! His interview will be recorded in public at the same event.
110
CheckFirst @checkfirst.network · 03/02/2026
We invite you to attend @samsafr.bsky.social's 'Meetings of Editorial Innovation' and meet our CEO @herve.checkfirst.network. He will be taking part in a panel discussion on new security protocols alongside @cforissier.bsky.social (@contexte.com), Elodie Vialle and Carole Caumont (Samsa).
143
Reposted by CheckFirst
EU DisinfoLab @disinfo.eu · 21/01/2026
🛠️ Killing the supply chain: applying the IMS framework to Russian FIMI. Any doubt on how? 🗓️ Thursday 22 January | 14:30 CET Join our private webinar on building a common operational picture of FIMI. 🔗 Registration with a professional email address is required us06web.zoom.us/webinar/regi...
144
CheckFirst @checkfirst.network · 20/01/2026
𝐈𝐍𝐅𝐎𝐑𝐌𝐀𝐓𝐈𝐎𝐍 📍 @maisoneuropeparis.bsky.social, Paris 📆 01/21, 6:00 PM - 9:00 PM (Paris time) 🔗 www.eventbrite.fr/e/billets-de...
eventbrite.fr
De l’Ukraine à l’Europe: la dimension cybersécurité de la guerre en Ukraine
L’objectif de cet événement est d’échanger sur les enseignements stratégiques du conflit en Ukraine .
020