In this particular case, the attack was directed at the volunteer medical formation “Hospitallers”, which we respect and which has helped us many times.
We see that the systematic discrediting of military volunteers and volunteer medics is continuing and gaining momentum.
People need to know about this, and we need to speak about it openly.
---
On Information Discreditation Campaigns Against Ukrainian Volunteer Formations and Medical Units
1. General Context
Recently, a systematic information campaign has been observed that is aimed at discrediting Ukrainian volunteers, volunteer formations, medical units, and volunteer organizations that support the Defense Forces of Ukraine.
These campaigns do not show signs of spontaneous criticism or internal disputes. Instead, they demonstrate characteristics of a coordinated information operation with clear organization, distribution of roles, and synchronized dissemination of narratives through social networks and media.
The primary goals of such operations are:
- undermining trust in the volunteer movement;
- discrediting medical units and volunteer initiatives;
- creating internal conflicts within the Ukrainian volunteer community;
- forming a negative information background around fundraising and humanitarian assistance.
---
2. Platform for Launching Information Attacks
In most cases, the first stage of the information attack begins on the social media platform Twitter (X).
This is where initial publications appear containing:
- accusations of alleged lack of transparency in fundraising;
- manipulations regarding finances;
- facts taken out of context;
- anonymous or semi-anonymous “investigations.”
After that, the information begins to spread widely through a network of related accounts, creating the illusion of broad public resonance.
---
3. Organizational Structure of Such Groups
Analysis of the behavior of these accounts suggests that this is not a random group of users but a well-organized network.
Key characteristics include:
1. Disguising themselves as volunteer or humanitarian initiatives
Participants in the network present themselves as volunteers, medics, or humanitarian workers.
2. Clear hierarchy of roles
The network typically includes:
- coordinators who shape the narrative;
- operators who distribute the information;
- supporting accounts that create artificial engagement and support.
3. Communication control
Coordination is often conducted through:
- closed chats;
- encrypted messengers;
- private communication channels.
4. Infiltration into legitimate structures
Some participants are integrated into:
- volunteer organizations,
- humanitarian foundations,
- medical units,
- and sometimes even military structures.
This allows them to obtain internal information and manipulate it for narrative purposes.
5. Geographic characteristics
A significant portion of participants come from:
- the Baltic states,
- the United States,
- Canada,
- various European countries.
At the same time, these networks often do not contain obvious Russian participants, which reduces suspicion and complicates identifying the real source of coordination.
---
4. The Role of Media in Amplifying Narratives
After the initial launch of the information attack on social media, the next stage is its legitimization through media outlets.
In several cases, one of the first media platforms to amplify such narratives has been Hromadske.
In the specific case of the information attack against the volunteer medical unit, one of the earliest publications was a piece by the so-called journalist Denys Bulavin, who spread accusations that had originally appeared on Twitter (X).
Such publications effectively serve as multipliers of the information attack because they:
- move the discussion from social media into the media space;
- create the appearance of journalistic verification;
- allow Russian propaganda to later cite Ukrainian sources.
---
5. Repetition of the Scenario
Similar information attacks have been documented before.
Last year, the Georgian Legion also encountered similar networks and became the target of systematic information discreditation.
After conducting an internal analysis, part of the individuals involved were identified. However, many of these accounts still continue to operate while appearing to be legitimate volunteers.
---
6. Key Indicators of an Information Operation
The typical algorithm looks as follows:
1. Publication of accusations on Twitter (X).
2. Mass dissemination through networks of related accounts.
3. Introduction of pseudo-analysis and “investigations.”
4. Publication of materials in media outlets.
5. Further amplification by Russian propaganda.
---
7. Conclusion
The available facts indicate a systematic pattern of information attacks against Ukrainian volunteers, medics, and volunteer organizations.
These campaigns show signs of coordinated network activity, using social media as the primary platform for launching narratives, which are later legitimized through media outlets.
Under these circumstances, it is critically important to:
- clearly understand the sources of such information attacks;
- analyze the networks of accounts spreading them;
- distinguish between legitimate criticism and coordinated disinformation campaigns.
Understanding the structure and mechanisms of such operations allows for more effective resistance to information attacks and helps protect the Ukrainian volunteer and humanitarian movement.