Leaked Documents Reveal Russian ‘Cognitive Strikes’ Against the West — Including Islamophobic ‘Pig Head’ Attacks in Paris

Because many of the leaked files lack a clear author, it is not always evident whether a specific document, and the operations it describes, originated with the SDA, the presidential administration, or elsewhere. The Russian presidential administration and the SDA did not respond to requests for comment.

This is not the first time the SDA has been accused of carrying out influence operations in concert with the Russian state. The firm was sanctioned by Western countries on that basis, and in 2024 reporters from Delfi Estonia, Süddeutsche Zeitung, and other European outlets obtained a previous set of leaked files that revealed the firm’s efforts to reduce Western support for Ukraine and boost far-right parties in European Parliament elections. The same year, the U.S. Department of Justice released an affidavit in which an FBI agent testified that the company was under the Russian presidential administration’s “direction and control.”

This latest leak, parts of which were first reported by the Armenian outlet Fact Investigation Platform, showcases the SDA’s operations throughout 2025 and contains plans slated for this year. It also provides further evidence of senior presidential administration figures directing the operations, wielding budgetary power, and even keeping track of the whereabouts of the SDA’s head.

James Pamment, an expert in hostile foreign interference who directs the Psychological Defence Research Institute at Sweden’s Lund University, said the documents indicate “a pattern of reckless escalation.”

“They are trying to create conflicts between groups [in society],” said Pamment, who has extensively researched the SDA. “We’re well aware of how easy it is to inflame existing tension in Europe at the moment, particularly around issues like migration or religious tensions. It is dangerous.”

An analyst from Hybrid CoE, an organization of security experts based in Helsinki that helps EU and NATO governments counter “hybrid threats,” said the danger of SDA’s work lies in its possible long-term consequences.

“It may take years before the effects become fully visible, and by the time they do, it could already be too late to respond effectively,” said the analyst, who requested anonymity per the organization’s policy. “This is why it is so important to counter these operations right now and prevent them from spreading any further.”

False Flags in Europe

In the leaked chats, participants use pseudonyms that consist mainly of generic English names, such as “Alex Abbot” and “Sam Spencer,” though a few more fanciful aliases, like “Bruce Lee” and “Immanuel Kant,” also appear.

The screenshots are shown from the perspective of a user who uses the alias “Kristin Kiler” — an apparent reference to Christine Keeler, the infamous English showgirl whose affairs with both a U.K. minister and a Soviet naval attache helped bring down the British government in the 1960s.

“Kiler” is referred to by colleagues as “Sofia,” and according to a spreadsheet found in the leak, the pseudonym belongs to Sofia Zakharova, a senior official in the Russian presidential administration. Zakharova was sanctioned by the EU in 2024 for her work with the SDA, with the sanctions notice describing her as a communications department chief who worked “directly with [SDA head] Ilya Gambashidze.”

In the leaked chats, Sofia appears to oversee funding-related matters and on one occasion appears to defer to an even more senior official. “We’re waiting for the go-ahead from SVK,” she writes in one conversation. These initials correspond to the full name of Sergei Kiriyenko, the administration’s first deputy chief of staff. Zakharova did not respond to a request for comment.

Most of the leaked chats show Sofia and her colleagues exchanging project reports and planning documents. One of these files lays out the broad parameters of an influence campaign aimed at Western countries that is intended to assist the Russian government’s foreign policy.

“We plan to achieve this goal primarily by deepening internal contradictions between [Western] ruling elites, stimulating protest activity among opposition forces, escalating anti-government protests, and ‘stirring up’ the amorphous portion of the electorate in NATO countries and their satellites,” the document reads, which according to its metadata was created in May 2023.

The text proposes “delivering consecutive cognitive strikes” against Western audiences “on the internet platforms they control” in an unconventional manner, including by “abandoning overtly pro-Russian messages.”

“We consider the organization of mass protest actions in NATO countries to be an important supporting measure,” it reads. “We have the necessary capabilities to involve a special contingent permanently residing abroad for such events.”

According to the court verdicts handed down to the Serbs convicted of involvement in Paris pig head incidents, the group also targeted the Jewish community. The men had poured green paint on Paris’ Holocaust Museum and several synagogues and left plastic skeletons at the Brandenburg Gate in Berlin, a short distance from the Holocaust memorial. The goal of the operation, the court concluded, was to “incite religious and national intolerance” between Jews and Muslims and “destabilize the situation" in Germany and France.