Background to Assessing Russian Activities and Intentions

in Recent US Elections: The Analytic Process and Cyber

Incident Attribution

6 January 2017
Background to Assessing Russian Activities and Intentions in Recent US
Elections: The Analytic Process and Cyber Incident Attribution
Assessing Russian Activities and Intentions in Recent US Elections is a declassified version of a highly
classified assessment that has been provided to the President and to recipients approved by the
President.

The Intelligence Community rarely can publicly reveal the full extent of its knowledge or the precise
bases for its assessments, as the release of such information would reveal sensitive sources or
methods and imperil the ability to collect critical foreign intelligence in the future.

Thus, while the conclusions in the report are all reflected in the classified assessment, the declassified
report does not and cannot include the full supporting information, including specific intelligence and
sources and methods.

The Analytic Process

The mission of the Intelligence Community is to seek to reduce the uncertainty surrounding foreign
activities, capabilities, or leaders intentions. This objective is difficult to achieve when seeking to
understand complex issues on which foreign actors go to extraordinary lengths to hide or obfuscate their
activities.

On these issues of great importance to US national security, the goal of intelligence analysis is to
provide assessments to decisionmakers that are intellectually rigorous, objective, timely, and useful,
and that adhere to tradecraft standards.

The tradecraft standards for analytic products have been refined over the past ten years. These
standards include describing sources (including their reliability and access to the information they
provide), clearly expressing uncertainty, distinguishing between underlying information and analysts
judgments and assumptions, exploring alternatives, demonstrating relevance to the customer, using
strong and transparent logic, and explaining change or consistency in judgments over time.

Applying these standards helps ensure that the Intelligence Community provides US policymakers,
warfighters, and operators with the best and most accurate insight, warning, and context, as well as
potential opportunities to advance US national security.

Intelligence Community analysts integrate information from a wide range of sources, including human
sources, technical collection, and open source information, and apply specialized skills and structured
analytic tools to draw inferences informed by the data available, relevant past activity, and logic and
reasoning to provide insight into what is happening and the prospects for the future.

A critical part of the analysts task is to explain uncertainties associated with major judgments based
on the quantity and quality of the source material, information gaps, and the complexity of the issue.

When Intelligence Community analysts use words such as we assess or we judge, they are
conveying an analytic assessment or judgment.

Some analytic judgments are based directly on collected information; others rest on previous
judgments, which serve as building blocks in rigorous analysis. In either type of judgment, the
tradecraft standards outlined above ensure that analysts have an appropriate basis for the judgment.

1
 Intelligence Community judgments often include two important elements: judgments of how likely it
is that something has happened or will happen (using terms such as likely or unlikely) and
confidence levels in those judgments (low, moderate, and high) that refer to the evidentiary basis,
logic and reasoning, and precedents that underpin the judgments.

Determining Attribution in Cyber Incidents

The nature of cyberspace makes attribution of cyber operations difficult but not impossible. Every kind of
cyber operationmalicious or notleaves a trail. US Intelligence Community analysts use this
information, their constantly growing knowledge base of previous events and known malicious actors, and
their knowledge of how these malicious actors work and the tools that they use, to attempt to trace these
operations back to their source. In every case, they apply the same tradecraft standards described in the
Analytic Process above.

Analysts consider a series of questions to assess how the information compares with existing
knowledge and adjust their confidence in their judgments as appropriate to account for any
alternative hypotheses and ambiguities.

An assessment of attribution usually is not a simple statement of who conducted an operation, but
rather a series of judgments that describe whether it was an isolated incident, who was the likely
perpetrator, that perpetrators possible motivations, and whether a foreign government had a role in
ordering or leading the operation.

2
This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
This report is a downgraded version of a more sensitive assessment; its conclusions are identical to those in the more sensitive
assessment but this version does not include the full supporting information on key elements of the influence campaign.
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Assessing Russian Activities and Intentions in

Recent US Elections

ICA 2017-01D | 6 January 2017

TOP SECRET//HCS-P/SI-G//ORCON/NOFORN/FISA
This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

This page intentionally left blank.

 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Scope and Sourcing

Information available as of 29 December 2016 was used in the preparation of this product.

Scope

This report includes an analytic assessment drafted and coordinated among The Central Intelligence
Agency (CIA), The Federal Bureau of Investigation (FBI), and The National Security Agency (NSA), which
draws on intelligence information collected and disseminated by those three agencies. It covers the
motivation and scope of Moscows intentions regarding US elections and Moscows use of cyber tools
and media campaigns to influence US public opinion. The assessment focuses on activities aimed at the
2016 US presidential election and draws on our understanding of previous Russian influence operations.
When we use the term we it refers to an assessment by all three agencies.

This report is a declassified version of a highly classified assessment. This documents conclusions are
identical to the highly classified assessment, but this document does not include the full supporting
information, including specific intelligence on key elements of the influence campaign. Given the
redactions, we made minor edits purely for readability and flow.

We did not make an assessment of the impact that Russian activities had on the outcome of the 2016
election. The US Intelligence Community is charged with monitoring and assessing the intentions,
capabilities, and actions of foreign actors; it does not analyze US political processes or US public opinion.

New information continues to emerge, providing increased insight into Russian activities.

Sourcing

Many of the key judgments in this assessment rely on a body of reporting from multiple sources that are
consistent with our understanding of Russian behavior. Insights into Russian effortsincluding specific
cyber operationsand Russian views of key US players derive from multiple corroborating sources.

Some of our judgments about Kremlin preferences and intent are drawn from the behavior of Kremlin-
loyal political figures, state media, and pro-Kremlin social media actors, all of whom the Kremlin either
directly uses to convey messages or who are answerable to the Kremlin. The Russian leadership invests
significant resources in both foreign and domestic propaganda and places a premium on transmitting
what it views as consistent, self-reinforcing narratives regarding its desires and redlines, whether on
Ukraine, Syria, or relations with the United States.

i
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Assessing Russian Activities and Intentions in

Recent US Elections
ICA 2017-01D
6 January 2017

Key Judgments

Russian efforts to influence the 2016 US presidential election represent the most recent expression
of Moscows longstanding desire to undermine the US-led liberal democratic order, but these
activities demonstrated a significant escalation in directness, level of activity, and scope of effort
compared to previous operations.

We assess Russian President Vladimir Putin ordered an influence campaign in 2016 aimed at the US
presidential election. Russias goals were to undermine public faith in the US democratic process,
denigrate Secretary Clinton, and harm her electability and potential presidency. We further assess
Putin and the Russian Government developed a clear preference for President-elect Trump. We
have high confidence in these judgments.

We also assess Putin and the Russian Government aspired to help President-elect Trumps
election chances when possible by discrediting Secretary Clinton and publicly contrasting her
unfavorably to him. All three agencies agree with this judgment. CIA and FBI have high confidence
in this judgment; NSA has moderate confidence.

Moscows approach evolved over the course of the campaign based on Russias understanding of the
electoral prospects of the two main candidates. When it appeared to Moscow that Secretary Clinton
was likely to win the election, the Russian influence campaign began to focus more on undermining
her future presidency.

Further information has come to light since Election Day that, when combined with Russian behavior
since early November 2016, increases our confidence in our assessments of Russian motivations and
goals.

Moscows influence campaign followed a Russian messaging strategy that blends covert
intelligence operationssuch as cyber activitywith overt efforts by Russian Government
agencies, state-funded media, third-party intermediaries, and paid social media users or trolls.
Russia, like its Soviet predecessor, has a history of conducting covert influence campaigns focused on US
presidential elections that have used intelligence officers and agents and press placements to disparage
candidates perceived as hostile to the Kremlin.

Russias intelligence services conducted cyber operations against targets associated with the 2016 US
presidential election, including targets associated with both major US political parties.

We assess with high confidence that Russian military intelligence (General Staff Main Intelligence
Directorate or GRU) used the Guccifer 2.0 persona and DCLeaks.com to release US victim data

ii
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

obtained in cyber operations publicly and in exclusives to media outlets and relayed material to
WikiLeaks.

Russian intelligence obtained and maintained access to elements of multiple US state or local
electoral boards. DHS assesses that the types of systems Russian actors targeted or
compromised were not involved in vote tallying.

Russias state-run propaganda machine contributed to the influence campaign by serving as a

platform for Kremlin messaging to Russian and international audiences.

We assess Moscow will apply lessons learned from its Putin-ordered campaign aimed at the US
presidential election to future influence efforts worldwide, including against US allies and their
election processes.

iii
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Contents

Scope and Sourcing i

Key Judgments ii
Contents iv

CIA/FBI/NSA Assessment: Russias Influence Campaign Targeting the

2016 US Presidential Election
Putin Ordered Campaign To Influence US Election 1

Russian Campaign Was Multifaceted 2

Influence Effort Was Boldest Yet in the US 5

Election Operation Signals New Normal in Russian Influence Efforts 5

Annexes
A: RussiaKremlins TV Seeks To Influence Politics, Fuel Discontent in US 6
B: Estimative Language 13

iv
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Russias Influence Campaign Targeting the 2016 US

Presidential Election
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Russias Influence Campaign Targeting the 2016 US

Presidential Election

Putin Ordered Campaign To Influence US Putin most likely wanted to discredit Secretary
Election Clinton because he has publicly blamed her
since 2011 for inciting mass protests against
We assess with high confidence that Russian his regime in late 2011 and early 2012, and
President Vladimir Putin ordered an influence because he holds a grudge for comments he
campaign in 2016 aimed at the US presidential almost certainly saw as disparaging him.
election, the consistent goals of which were to
undermine public faith in the US democratic We assess Putin, his advisers, and the Russian
process, denigrate Secretary Clinton, and harm her Government developed a clear preference for
electability and potential presidency. We further President-elect Trump over Secretary Clinton.
assess Putin and the Russian Government
developed a clear preference for President-elect Beginning in June, Putins public comments
Trump. When it appeared to Moscow that about the US presidential race avoided directly
Secretary Clinton was likely to win the election, the praising President-elect Trump, probably
Russian influence campaign then focused on because Kremlin officials thought that any
undermining her expected presidency. praise from Putin personally would backfire in
the United States. Nonetheless, Putin publicly
We also assess Putin and the Russian indicated a preference for President-elect
Government aspired to help President-elect Trumps stated policy to work with Russia, and
Trumps election chances when possible by pro-Kremlin figures spoke highly about what
discrediting Secretary Clinton and publicly they saw as his Russia-friendly positions on
contrasting her unfavorably to him. All three Syria and Ukraine. Putin publicly contrasted the
agencies agree with this judgment. CIA and President-elects approach to Russia with
FBI have high confidence in this judgment; Secretary Clintons aggressive rhetoric.
NSA has moderate confidence.
Moscow also saw the election of President-
In trying to influence the US election, we assess elect Trump as a way to achieve an
the Kremlin sought to advance its longstanding international counterterrorism coalition against
desire to undermine the US-led liberal the Islamic State in Iraq and the Levant (ISIL).
democratic order, the promotion of which
Putin and other senior Russian leaders view as Putin has had many positive experiences
a threat to Russia and Putins regime. working with Western political leaders whose
business interests made them more disposed
Putin publicly pointed to the Panama Papers to deal with Russia, such as former Italian
disclosure and the Olympic doping scandal as Prime Minister Silvio Berlusconi and former
US-directed efforts to defame Russia, German Chancellor Gerhard Schroeder.
suggesting he sought to use disclosures to
discredit the image of the United States and Putin, Russian officials, and other pro-Kremlin
cast it as hypocritical. pundits stopped publicly criticizing the US
election process as unfair almost immediately

1
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

after the election because Moscow probably By their nature, Russian influence campaigns
assessed it would be counterproductive to are multifaceted and designed to be deniable
building positive relations. because they use a mix of agents of influence,
cutouts, front organizations, and false-flag
We assess the influence campaign aspired to help operations. Moscow demonstrated this during
President-elect Trumps chances of victory when the Ukraine crisis in 2014, when Russia
possible by discrediting Secretary Clinton and deployed forces and advisers to eastern
publicly contrasting her unfavorably to the Ukraine and denied it publicly.
President-elect. When it appeared to Moscow that
Secretary Clinton was likely to win the presidency The Kremlins campaign aimed at the US election
the Russian influence campaign focused more on featured disclosures of data obtained through
undercutting Secretary Clintons legitimacy and Russian cyber operations; intrusions into US state
crippling her presidency from its start, including by and local electoral boards; and overt propaganda.
impugning the fairness of the election. Russian intelligence collection both informed and
enabled the influence campaign.
Before the election, Russian diplomats had
publicly denounced the US electoral process Cyber Espionage Against US Political
and were prepared to publicly call into Organizations. Russias intelligence services
question the validity of the results. Pro- conducted cyber operations against targets
Kremlin bloggers had prepared a Twitter associated with the 2016 US presidential election,
campaign, #DemocracyRIP, on election night in including targets associated with both major US
anticipation of Secretary Clintons victory, political parties.
judging from their social media activity.
We assess Russian intelligence services collected
Russian Campaign Was Multifaceted against the US primary campaigns, think tanks, and
lobbying groups they viewed as likely to shape
Moscows use of disclosures during the US election future US policies. In July 2015, Russian
was unprecedented, but its influence campaign intelligence gained access to Democratic National
otherwise followed a longstanding Russian Committee (DNC) networks and maintained that
messaging strategy that blends covert intelligence access until at least June 2016.
operationssuch as cyber activitywith overt
efforts by Russian Government agencies, state- The General Staff Main Intelligence Directorate
funded media, third-party intermediaries, and paid (GRU) probably began cyber operations aimed
social media users or trolls. at the US election by March 2016. We assess
that the GRU operations resulted in the
We assess that influence campaigns are compromise of the personal e-mail accounts of
approved at the highest levels of the Russian Democratic Party officials and political figures.
Governmentparticularly those that would be By May, the GRU had exfiltrated large volumes
politically sensitive. of data from the DNC.

Moscows campaign aimed at the US election Public Disclosures of Russian-Collected Data.

reflected years of investment in its capabilities, We assess with high confidence that the GRU used
which Moscow has honed in the former Soviet the Guccifer 2.0 persona, DCLeaks.com, and
states. WikiLeaks to release US victim data obtained in

2
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

cyber operations publicly and in exclusives to These election-related disclosures reflect a pattern
media outlets. of Russian intelligence using hacked information in
targeted influence efforts against targets such as
Guccifer 2.0, who claimed to be an Olympic athletes and other foreign governments.
independent Romanian hacker, made multiple Such efforts have included releasing or altering
contradictory statements and false claims personal data, defacing websites, or releasing e-
about his likely Russian identity throughout the mails.
election. Press reporting suggests more than
one person claiming to be Guccifer 2.0 A prominent target since the 2016 Summer
interacted with journalists. Olympics has been the World Anti-Doping
Agency (WADA), with leaks that we assess to
Content that we assess was taken from e-mail have originated with the GRU and that have
accounts targeted by the GRU in March 2016 involved data on US athletes.
appeared on DCLeaks.com starting in June.
Russia collected on some Republican-affiliated
We assess with high confidence that the GRU targets but did not conduct a comparable
relayed material it acquired from the DNC and disclosure campaign.
senior Democratic officials to WikiLeaks. Moscow
Russian Cyber Intrusions Into State and Local
most likely chose WikiLeaks because of its self-
Electoral Boards. Russian intelligence accessed
proclaimed reputation for authenticity. Disclosures
elements of multiple state or local electoral boards.
through WikiLeaks did not contain any evident
Since early 2014, Russian intelligence has
forgeries.
researched US electoral processes and related
In early September, Putin said publicly it was technology and equipment.
important the DNC data was exposed to
DHS assesses that the types of systems we
WikiLeaks, calling the search for the source of
observed Russian actors targeting or
the leaks a distraction and denying Russian
compromising are not involved in vote tallying.
state-level involvement.
Russian Propaganda Efforts. Russias state-run
The Kremlins principal international
propaganda machinecomprised of its domestic
propaganda outlet RT (formerly Russia Today)
media apparatus, outlets targeting global
has actively collaborated with WikiLeaks. RTs
audiences such as RT and Sputnik, and a network
editor-in-chief visited WikiLeaks founder Julian
of quasi-government trollscontributed to the
Assange at the Ecuadorian Embassy in London
influence campaign by serving as a platform for
in August 2013, where they discussed renewing
Kremlin messaging to Russian and international
his broadcast contract with RT, according to
audiences. State-owned Russian media made
Russian and Western media. Russian media
increasingly favorable comments about President-
subsequently announced that RT had become
elect Trump as the 2016 US general and primary
"the only Russian media company" to partner
election campaigns progressed while consistently
with WikiLeaks and had received access to
offering negative coverage of Secretary Clinton.
"new leaks of secret information." RT routinely
gives Assange sympathetic coverage and Starting in March 2016, Russian Government
provides him a platform to denounce the linked actors began openly supporting
United States. President-elect Trumps candidacy in media

3
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

aimed at English-speaking audiences. RT and on Putin by airing segments devoted to

Sputnikanother government-funded outlet Secretary Clintons alleged health problems.
producing pro-Kremlin radio and online
content in a variety of languages for On 6 August, RT published an English-
international audiencesconsistently cast language video called Julian Assange Special:
President-elect Trump as the target of unfair Do WikiLeaks Have the E-mail Thatll Put
coverage from traditional US media outlets Clinton in Prison? and an exclusive interview
that they claimed were subservient to a corrupt with Assange entitled Clinton and ISIS Funded
political establishment. by the Same Money. RTs most popular video
on Secretary Clinton, How 100% of the
Russian media hailed President-elect Trumps Clintons Charity Went toThemselves, had
victory as a vindication of Putins advocacy of more than 9 million views on social media
global populist movementsthe theme of platforms. RTs most popular English language
Putins annual conference for Western video about the President-elect, called Trump
academics in October 2016and the latest Will Not Be Permitted To Win, featured
example of Western liberalisms collapse. Assange and had 2.2 million views.

Putins chief propagandist Dmitriy Kiselev used For more on Russias past media efforts
his flagship weekly newsmagazine program including portraying the 2012 US electoral
this fall to cast President-elect Trump as an process as undemocraticplease see Annex A:
outsider victimized by a corrupt political RussiaKremlin's TV Seeks To Influence
establishment and faulty democratic election Politics, Fuel Discontent in US.
process that aimed to prevent his election
because of his desire to work with Moscow. Russia used trolls as well as RT as part of its
influence efforts to denigrate Secretary Clinton.
Pro-Kremlin proxy Vladimir Zhirinovskiy, leader This effort amplified stories on scandals about
of the nationalist Liberal Democratic Party of Secretary Clinton and the role of WikiLeaks in the
Russia, proclaimed just before the election that election campaign.
if President-elect Trump won, Russia would
drink champagne in anticipation of being The likely financier of the so-called Internet
able to advance its positions on Syria and Research Agency of professional trolls located
Ukraine. in Saint Petersburg is a close Putin ally with ties
to Russian intelligence.
RTs coverage of Secretary Clinton throughout the
US presidential campaign was consistently negative A journalist who is a leading expert on the
and focused on her leaked e-mails and accused her Internet Research Agency claimed that some
of corruption, poor physical and mental health, and social media accounts that appear to be tied to
ties to Islamic extremism. Some Russian officials Russias professional trollsbecause they
echoed Russian lines for the influence campaign previously were devoted to supporting Russian
that Secretary Clintons election could lead to a war actions in Ukrainestarted to advocate for
between the United States and Russia. President-elect Trump as early as December
2015.
In August, Kremlin-linked political analysts
suggested avenging negative Western reports

4
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Influence Effort Was Boldest Yet in the US Election Operation Signals New Normal in
Russian Influence Efforts
Russias effort to influence the 2016 US presidential
election represented a significant escalation in We assess Moscow will apply lessons learned from
directness, level of activity, and scope of effort its campaign aimed at the US presidential election
compared to previous operations aimed at US to future influence efforts in the United States and
elections. We assess the 2016 influence campaign worldwide, including against US allies and their
reflected the Kremlins recognition of the election processes. We assess the Russian
worldwide effects that mass disclosures of US intelligence services would have seen their election
Government and other private datasuch as those influence campaign as at least a qualified success
conducted by WikiLeaks and othershave because of their perceived ability to impact public
achieved in recent years, and their understanding discussion.
of the value of orchestrating such disclosures to
maximize the impact of compromising information. Putins public views of the disclosures suggest
the Kremlin and the intelligence services will
During the Cold War, the Soviet Union used continue to consider using cyber-enabled
intelligence officers, influence agents, forgeries, disclosure operations because of their belief
and press placements to disparage candidates that these can accomplish Russian goals
perceived as hostile to the Kremlin, according relatively easily without significant damage to
to a former KGB archivist. Russian interests.

Since the Cold War, Russian intelligence efforts Russia has sought to influence elections across
related to US elections have primarily focused on Europe.
foreign intelligence collection. For decades,
Russian and Soviet intelligence services have We assess Russian intelligence services will
sought to collect insider information from US continue to develop capabilities to provide Putin
political parties that could help Russian leaders with options to use against the United States,
understand a new US administrations plans and judging from past practice and current efforts.
priorities. Immediately after Election Day, we assess Russian
intelligence began a spearphishing campaign
The Russian Foreign Intelligence Service (SVR) targeting US Government employees and
Directorate S (Illegals) officers arrested in the individuals associated with US think tanks and
United States in 2010 reported to Moscow NGOs in national security, defense, and foreign
about the 2008 election. policy fields. This campaign could provide material
for future influence efforts as well as foreign
In the 1970s, the KGB recruited a Democratic intelligence collection on the incoming
Party activist who reported information about administrations goals and plans.
then-presidential hopeful Jimmy Carters
campaign and foreign policy plans, according
to a former KGB archivist.

5
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Annex A

Russia -- Kremlin's TV Seeks To Influence Politics, Fuel Discontent in US *

RT America TV, a Kremlin-financed channel operated from within the United States, has substantially
expanded its repertoire of programming that highlights criticism of alleged US shortcomings in democracy
and civil liberties. The rapid expansion of RT's operations and budget and recent candid statements by RT's
leadership point to the channel's importance to the Kremlin as a messaging tool and indicate a Kremlin-
directed campaign to undermine faith in the US Government and fuel political protest. The Kremlin has
committed significant resources to expanding the channel's reach, particularly its social media footprint. A
reliable UK report states that RT recently was the most-watched foreign news channel in the UK. RT
America has positioned itself as a domestic US channel and has deliberately sought to obscure any legal ties
to the Russian Government.

In the runup to the 2012 US presidential election in November, English-language channel RT America --
created and financed by the Russian Government and part of Russian Government-sponsored RT TV (see
textbox 1) -- intensified its usually critical coverage of the United States. The channel portrayed the US
electoral process as undemocratic and featured calls by US protesters for the public to rise up and "take
this government back."

RT introduced two new shows -- "Breaking

the Set" on 4 September and "Truthseeker"
on 2 November -- both overwhelmingly
focused on criticism of US and Western
governments as well as the promotion of
radical discontent.

From August to November 2012, RT ran

numerous reports on alleged US election
fraud and voting machine vulnerabilities,
contending that US election results cannot
be trusted and do not reflect the popular
will.

In an effort to highlight the alleged "lack of Messaging on RT prior to the US presidential election
democracy" in the United States, RT (RT, 3 November)
broadcast, hosted, and advertised third-
party candidate debates and ran reporting supportive of the political agenda of these candidates.
The RT hosts asserted that the US two-party system does not represent the views of at least one-third
of the population and is a "sham."

*
This annex was originally published on 11 December 2012 by the Open Source Center, now the Open Source
Enterprise.

6
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

RT aired a documentary about the Occupy

Wall Street movement on 1, 2, and
4 November. RT framed the movement as a
fight against "the ruling class" and described
the current US political system as corrupt and
dominated by corporations. RT advertising
for the documentary featured Occupy
movement calls to "take back" the
government. The documentary claimed that
the US system cannot be changed
democratically, but only through "revolution."
After the 6 November US presidential
election, RT aired a documentary called RT new show "Truthseeker" (RT, 11 November)
"Cultures of Protest," about active and often
violent political resistance (RT, 1-
10 November).

RT Conducts Strategic Messaging for Russian Government

RT's criticism of the US election was the latest facet of its broader and longer-standing anti-US messaging
likely aimed at undermining viewers' trust in US democratic procedures and undercutting US criticism of
Russia's political system. RT Editor in Chief Margarita Simonyan recently declared that the United States
itself lacks democracy and that it has "no moral right to teach the rest of the world" (Kommersant,
6 November).

Simonyan has characterized RT's coverage of

the Occupy Wall Street movement as
"information warfare" that is aimed at
promoting popular dissatisfaction with the US
Government. RT created a Facebook app to
connect Occupy Wall Street protesters via
social media. In addition, RT featured its own
hosts in Occupy rallies ("Minaev Live," 10 April;
RT, 2, 12 June).

RT's reports often characterize the United

States as a "surveillance state" and allege
widespread infringements of civil liberties,
police brutality, and drone use (RT, 24,
Simonyan steps over the White House in the
28 October, 1-10 November).
introduction from her short-lived domestic show
RT has also focused on criticism of the US on REN TV (REN TV, 26 December 2011)
economic system, US currency policy, alleged
Wall Street greed, and the US national debt. Some of RT's hosts have compared the United States to
Imperial Rome and have predicted that government corruption and "corporate greed" will lead to US
financial collapse (RT, 31 October, 4 November).

7
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

RT broadcasts support for other Russian interests in areas such as foreign and energy policy.

RT runs anti-fracking programming,

highlighting environmental issues and the
impacts on public health. This is likely
reflective of the Russian Government's
concern about the impact of fracking and
US natural gas production on the global
energy market and the potential challenges
to Gazprom's profitability (5 October).

RT is a leading media voice opposing

Western intervention in the Syrian conflict
and blaming the West for waging
"information wars" against the Syrian
Government (RT, 10 October-9 November).
RT anti-fracking reporting (RT, 5 October)

In an earlier example of RT's messaging in

support of the Russian Government, during the Georgia-Russia military conflict the channel accused
Georgians of killing civilians and organizing a genocide of the Ossetian people. According to
Simonyan, when "the Ministry of Defense was at war with Georgia," RT was "waging an information
war against the entire Western world" (Kommersant, 11 July).

In recent interviews, RT's leadership has candidly acknowledged its mission to expand its US audience and
to expose it to Kremlin messaging. However, the leadership rejected claims that RT interferes in US
domestic affairs.

Simonyan claimed in popular arts magazine Afisha on 3 October: "It is important to have a channel
that people get used to, and then, when needed, you show them what you need to show. In some
sense, not having our own foreign broadcasting is the same as not having a ministry of defense.
When there is no war, it looks like we don't need it. However, when there is a war, it is critical."

According to Simonyan, "the word 'propaganda' has a very negative connotation, but indeed, there is
not a single international foreign TV channel that is doing something other than promotion of the
values of the country that it is broadcasting from." She added that "when Russia is at war, we are, of
course, on Russia's side" (Afisha, 3 October; Kommersant, 4 July).

TV-Novosti director Nikolov said on 4 October to the Association of Cable Television that RT builds on
worldwide demand for "an alternative view of the entire world." Simonyan asserted on 3 October in
Afisha that RT's goal is "to make an alternative channel that shares information unavailable elsewhere"
in order to "conquer the audience" and expose it to Russian state messaging (Afisha, 3 October;
Kommersant, 4 July).

On 26 May, Simonyan tweeted with irony: "Ambassador McFaul hints that our channel is interference
with US domestic affairs. And we, sinful souls, were thinking that it is freedom of speech."

8
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

RT Leadership Closely Tied to, Controlled by Kremlin

RT Editor in Chief Margarita Simonyan has close ties to top Russian Government officials, especially
Presidential Administration Deputy Chief of Staff Aleksey Gromov, who reportedly manages political TV
coverage in Russia and is one of the founders of RT.

Simonyan has claimed that Gromov

shielded her from other officials and their
requests to air certain reports. Russian
media consider Simonyan to be Gromov's
protege (Kommersant, 4 July; Dozhd TV,
11 July).

Simonyan replaced Gromov on state-

owned Channel One's Board of Directors.
Government officials, including Gromov
and Putin's Press Secretary Peskov were
involved in creating RT and appointing
Simonyan (Afisha, 3 October).

According to Simonyan, Gromov oversees

political coverage on TV, and he has
periodic meetings with media managers
where he shares classified information
and discusses their coverage plans. Some
opposition journalists, including Andrey
Loshak, claim that he also ordered media
attacks on opposition figures Simonyan shows RT facilities to then Prime Minister
(Kommersant, 11 July). Putin. Simonyan was on Putin's 2012 presidential
election campaign staff in Moscow (Rospress, 22
The Kremlin staffs RT and closely supervises
September 2010, Ria Novosti, 25 October 2012).
RT's coverage, recruiting people who can
convey Russian strategic messaging because of their ideological beliefs.

The head of RT's Arabic-language service, Aydar Aganin, was rotated from the diplomatic service to
manage RT's Arabic-language expansion, suggesting a close relationship between RT and Russia's
foreign policy apparatus. RT's London Bureau is managed by Darya Pushkova, the daughter of
Aleksey Pushkov, the current chair of the Duma Russian Foreign Affairs Committee and a former
Gorbachev speechwriter (DXB, 26 March 2009; MK.ru, 13 March 2006).

According to Simonyan, the Russian Government sets rating and viewership requirements for RT and,
"since RT receives budget from the state, it must complete tasks given by the state." According to
Nikolov, RT news stories are written and edited "to become news" exclusively in RT's Moscow office
(Dozhd TV, 11 July; AKT, 4 October).

In her interview with pro-Kremlin journalist Sergey Minaev, Simonyan complimented RT staff in the
United States for passionately defending Russian positions on the air and in social media. Simonyan
said: "I wish you could seehow these guys, not just on air, but on their own social networks, Twitter,
and when giving interviews, how they defend the positions that we stand on!" ("Minaev Live,"
10 April).

9
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

RT Focuses on Social Media, Building Audience

RT aggressively advertises its social media accounts and has a significant and fast-growing social media
footprint. In line with its efforts to present itself as anti-mainstream and to provide viewers alternative
news content, RT is making its social media operations a top priority, both to avoid broadcast TV
regulations and to expand its overall audience.

According to RT management, RT's website receives at least 500,000 unique viewers every day. Since
its inception in 2005, RT videos received more than 800 million views on YouTube (1 million views per
day), which is the highest among news outlets (see graphics for comparison with other news
channels) (AKT, 4 October).

According to Simonyan, the TV audience worldwide is losing trust in traditional TV broadcasts and
stations, while the popularity of "alternative channels" like RT or Al Jazeera grows. RT markets itself as
an "alternative channel" that is available via the Internet everywhere in the world, and it encourages
interaction and social networking (Kommersant, 29 September).

According to Simonyan, RT uses social media to expand the reach of its political reporting and uses
well-trained people to monitor public opinion in social media commentaries (Kommersant,
29 September).

According to Nikolov, RT requires its hosts to have social media accounts, in part because social
media allows the distribution of content that would not be allowed on television (Newreporter.org,
11 October).

Simonyan claimed in her 3 October interview to independent TV channel Dozhd that Occupy Wall
Street coverage gave RT a significant audience boost.

The Kremlin spends $190 million a year on the distribution and dissemination of RT programming,
focusing on hotels and satellite, terrestrial, and cable broadcasting. The Kremlin is rapidly expanding RT's
availability around the world and giving it a reach comparable to channels such as Al Jazeera English.
According to Simonyan, the United Kingdom and the United States are RT's most successful markets. RT
does not, however, publish audience information.

According to market research company Nielsen, RT had the most rapid growth (40 percent) among all
international news channels in the United States over the past year (2012). Its audience in New York
tripled and in Washington DC grew by 60% (Kommersant, 4 July).

RT claims that it is surpassing Al Jazeera in viewership in New York and Washington DC (BARB,
20 November; RT, 21 November).

RT states on its website that it can reach more than 550 million people worldwide and 85 million
people in the United States; however, it does not publicize its actual US audience numbers (RT,
10 December).

10
This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

11
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Formal Disassociation From Kremlin Facilitates RT US Messaging

RT America formally disassociates itself from the Russian Government by using a Moscow-based
autonomous nonprofit organization to finance its US operations. According to RT's leadership, this
structure was set up to avoid the Foreign Agents Registration Act and to facilitate licensing abroad. In
addition, RT rebranded itself in 2008 to deemphasize its Russian origin.

According to Simonyan, RT America differs from other Russian state institutions in terms of
ownership, but not in terms of financing. To disassociate RT from the Russian Government, the
federal news agency RIA Novosti established a subsidiary autonomous nonprofit organization, TV-
Novosti, using the formal independence of this company to establish and finance RT worldwide
(Dozhd TV, 11 July).

Nikolov claimed that RT is an "autonomous noncommercial entity," which is "well received by foreign
regulators" and "simplifies getting a license." Simonyan said that RT America is not a "foreign agent"
according to US law because it uses a US commercial organization for its broadcasts (AKT, 4 October;
Dozhd TV, 11 July).

Simonyan observed that RT's original Russia-centric news reporting did not generate sufficient
audience, so RT switched to covering international and US domestic affairs and removed the words
"Russia Today" from the logo "to stop scaring away the audience" (Afisha, 18 October; Kommersant,
4 July).

RT hires or makes contractual agreements with Westerners with views that fit its agenda and airs them
on RT. Simonyan said on the pro-Kremlin show "Minaev Live" on 10 April that RT has enough
audience and money to be able to choose its hosts, and it chooses the hosts that "think like us," "are
interested in working in the anti-mainstream," and defend RT's beliefs on social media. Some hosts
and journalists do not present themselves as associated with RT when interviewing people, and many
of them have affiliations to other media and activist organizations in the United States ("Minaev Live,"
10 April).

12
 This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

Annex B

13
This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.

This page intentionally left blank.

14
This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified
assessment but this version does not include the full supporting information on key elements of the influence campaign.