To combat FIMI threats the European External Action Service (EEAS) Data Team released a comprehensive OSINT (Open-Source Intelligence) guide that provides structured methodologies to detect, analyze, and counteract FIMI operations.


This article breaks down the key lessons from the EEAS report, demonstrating how OSINT can be leveraged to protect democracy.


Understanding FIMI & Identity-Based Disinformation (IBD)

What is FIMI?

Foreign Information Manipulation and Interference (FIMI) refers to covert, deceptive efforts by state or non-state actors to manipulate public discourse, disrupt elections, and weaken democratic institutions.

These efforts often employ disinformation, cyberattacks, and social engineering to exploit societal divisions.

What is Identity-Based Disinformation (IBD)?

A particularly insidious form of FIMI, IBD targets individuals or groups based on gender, race, ethnicity, or sexual orientation.

By manipulating identity politics, foreign actors inflame divisions and erode trust in public institutions.

Example Case Study:

  • French Elections 2024 – A coordinated Russian campaign spread misleading narratives about minority candidates, portraying them as "foreign agents" to undermine their credibility. The EEAS noted that these false narratives were amplified by fake grassroots accounts, creating the illusion of public outrage.

EEAS Report: "Identity-based disinformation is a key vector in foreign influence campaigns, often amplifying pre-existing societal tensions to destabilize democratic processes."


How Foreign Interference Works – Breaking Down the EEAS Frameworks

The EEAS provides structured methods for detecting and analyzing disinformation campaigns:

The ABCDE Framework:

This model is used to systematically break down FIMI campaigns and understand their impact.

  • A – Actors: Identifying the individuals or organizations responsible for spreading disinformation. The EEAS reported that a network of fake EU-focused news websites systematically pushed narratives aimed at discrediting democratic institutions.
  • B – Behavior: Looking at deceptive patterns, such as coordinated inauthentic activity. Analysis of Telegram groups linked to foreign intelligence agencies showed pre-planned message sequences for manipulating social media trends.
  • C – Content: Examining the narratives being pushed. In the 2022 French elections, fake videos circulated on Telegram, falsely claiming certain candidates were involved in corruption scandals.
  • D – Degree: Assessing the scale of the campaign. The EEAS found that automated bots and human influencers worked together to increase reach and credibility.
  • E – Effect: Understanding the real-world impact, such as decreased voter trust or social unrest.

The DISARM Red Framework:

  • This framework tracks how disinformation spreads and who amplifies it. A case study in Germany’s 2023 state elections showed how an initially obscure rumor about voter fraud was amplified by fringe media, later picked up by larger social media influencers, and eventually reported as “controversy” in mainstream outlets.

STIX (Structured Threat Information Expression):

  • A format used to categorize and share intelligence across agencies and platforms, ensuring real-time tracking of influence operations.

Tools & Techniques for OSINT Investigations

How to Start an OSINT Investigation

An OSINT investigation requires a multi-step approach, using a combination of human analysis and technical tools:

  • Identify suspicious narratives early – EEAS analysts identified a campaign where a false EU corruption scandal was seeded on Reddit before spreading to mainstream media.
  • Verify content authenticity – Fact-check images and videos using forensic tools to ensure they haven’t been manipulated or taken out of context.
  • Map out amplification networks – EEAS investigations found that state-backed narratives often use coordinated Twitter bot networks to gain legitimacy.

OSINT Tools for Archiving & Evidence Collection:

  • Wayback Machine – Used for capturing deleted or altered web pages. The EEAS tracked a fake NGO website promoting anti-EU conspiracy theories before it was taken down.
  • CrowdTangle – Helps track viral content. It was used to follow how false election fraud claims spread from Telegram to Facebook.
  • OSINT Archive – A valuable repository for archiving evidence of manipulation campaigns.

Real-World Case Studies from the EEAS Report

Gender-Based Disinformation Against Female Politicians

A common FIMI tactic is to discredit female politicians through fabricated scandals.

In 2023, a viral Telegram post claimed that a high-profile EU official had secretly met with foreign agents. Forensic analysis revealed the image had been digitally altered.

Ethnic & Racial Disinformation in Elections

Foreign actors often exploit racial tensions to create divisions.

In the 2024 Dutch elections, false claims circulated suggesting that immigrant communities were being given extra voting rights, a claim later debunked by independent journalists.

Deepfakes & Fabricated Narratives

Deepfake videos continue to be a major threat. In a recent case, a video surfaced showing an Italian candidate allegedly making racist remarks.

AI analysis confirmed the voice was synthetically generated to mimic the politician.


Policy & Recommendations from EEAS

The EEAS suggests:

  • Stronger regulations on disinformation, including mandatory transparency for online platforms.
  • International intelligence-sharing initiatives to track cross-border FIMI threats.
  • Public education campaigns to increase digital literacy and counter misinformation.

Conclusion – Why OSINT Matters & How You Can Get Involved

The EEAS OSINT Guidelines provide an essential blueprint for detecting and countering FIMI threats.

By applying these frameworks, researchers, journalists, and everyday citizens can help safeguard democratic processes.


Call to Action:

  • Explore the Full EEAS Guidelines → [Link to Report]
  • Start Learning OSINT → Use the tools and frameworks outlined above.
  • Stay Vigilant → Share knowledge and help expose disinformation threats.

Democracy depends on an informed, vigilant public. OSINT is one of the most powerful tools in the fight against foreign interference—let’s use it wisely.


Support our efforts: https://www.gofundme.com/f/support-disinformation-education-public-education-forum

Get a two bucks membership to keep our Forum going: https://buymeacoffee.com/nafoforum/membership

Too much trouble using BMAC or GoFundMe?

Here's our PP link: https://www.paypal.com/donate/?hosted_button_id=STDDZAF88ZRNL