Fake News Site and Amplification on Social Media
French authorities have detected and exposed an online disinformation operation aimed at falsely implicating President Emmanuel Macron in the Jeffrey Epstein case. The operation, attributed to a Russian-linked network, involved creating a fraudulent website impersonating the French newspaper France Soir. According to a government source, this fake site published an article that also stole the identity of a journalist from Le Parisien to accuse Macron of involvement.
The fabricated content was subsequently amplified on the social media platform X by accounts identified as regular conduits for pro-Russian disinformation. The fake article claimed to reveal incriminating “documents” about Macron in relation to Epstein, the American financier and convicted sex offender who died in prison in 2019. However, a search of the U.S. Department of Justice’s public “Epstein Library” database shows the cited documents do not exist.
Attribution to Known Networks: CopyCop and Storm-1516
The French agency Viginum, tasked with combating foreign digital interference, attributes the fake France Soir site with “a high level of confidence” to the information operation known as “CopyCop.” This network of sham websites is linked to John Mark Dougan, a former American police officer who has been exiled in Russia since 2016.
CopyCop frequently mimics legitimate news sites and disseminates false content created by another network, identified as Storm-1516. This group is accused of being behind numerous disinformation campaigns targeting France and other Western nations. The initial account on X to spread the false article about Macron, @LoetitiaH, is described as a “historic and frequent” relay for Storm-1516’s operations.
Pattern of Interference and Broader Threat
Viginum’s analysis indicates this operation is “very similar” to Storm-1516’s typical tactics, which involve targeting political figures—including heads of state—and quickly capitalizing on current events. The fake website was rapidly deactivated, becoming inaccessible just two days after its launch, a common pattern in such campaigns.
According to Viginum’s latest figures from May 2025, Storm-1516 is believed to be behind at least 77 information operations targeting Western countries, including France, between its emergence in late 2023 and March 2025. The agency’s report states the network’s primary goal appears to be discrediting the Ukrainian government, likely in hopes of undermining Western support for Ukraine.
Viginum has labeled Storm-1516 a “significant threat to the French and European digital public debate.” The network has also been implicated in interference surrounding the 2024 U.S. presidential election, German federal elections, and 2025 Moldovan legislative elections.
Response and Context Ahead of French Elections
The legitimate France Soir publication issued a denial on social media shortly after the fake site appeared, warning readers of the brand impersonation. The impersonated journalist from Le Parisien has filed a legal complaint.
This incident occurs as France prepares for municipal elections in mid-March and looks ahead to the 2027 presidential election. Viginum has previously attributed dozens of fake local news sites that appeared online in late 2025—publishing a mix of true and false, anxiety-inducing, and divisive content—to the same Storm-1516 network.
