CheckFirst

@checkfirst.network

1680 Followers 230 Following

We pioneered algorithm analysis and deploy expert skills to probe the digital space and its actors. https://checkfirst.network

"Roska Bridge": How a pro-Russian IMS exploits vulnerabilities of decentralised platforms to spread propaganda.
Cover of CheckFirst's investigation "Noise without effect: anti-Pashinyan disinformation on the rise ahead of Armenian parliamentary elections", featuring Armenian flags, a picture of the Armenian National Assembly, and a man's silhouette.
The CheckFirst Import Connector landing page on the OpenCTI platform, behind CheckFirst, OpenCTI and Filigran logos.
'90 minutes dans la bataille informationnelle', a French language workshop set for April 9 in Tours, France, organized by CheckFirst and Samsa.
This report demonstrates that the methodology we used in our previous investigation into the infrastructure of the FSB’s 16th Center is efficient and can be easily replicated in further research. We will continue our research into decorations linked to the GRU’s VIO, and will extend our investigations to other Russian security and intelligence services in the months ahead. Read the full report: https://checkfirst.network/ Contact us: info@checkfirst.network
Navy-blue shield patch with orange border showing crossed sword, sealed scroll, three-flame grenade and psi-shaped arrowhead symbol, annotated explanations.
In 2025, we published a report delving into the infrastructure of the FSB’s 16th Centre, combining a one-year exploration of websites and forums specialised in insignia collecting and traditional OSINT techniques. Building on this initial study, and once again relying on the analysis of military decorations — known as phaleristics — we are now publishing a report focused on the Information Operations Troops (VIO) of Russia’s military intelligence service, better known by the acronym GRU.
Report cover showing a dark blue patch with crossed sword, arrow and scroll emblem, titled "Unveiling GRU's Information Operations Troops (VIO)"
Check First's logo on the left, Internet Watch Foundation membership's badge on the right.
A group of trainees huddled at a table with laptops and water bottles, discussing and reviewing material during a workshop with Hervé Letoqueux, Check First's COO.
#Disinfo2025 conference, before the overture panel.
Shivika Sharma, Senior Manager, Digital Threats and Policy at Check First. She'll be speaking at #Disinfo2025 during a panel on 16 October.
While much remains to be explored regarding 16th Center's precise operations, this study paves the way for further research on Russia's security agencies operating in Russia and abroad, including those engaged in intelligence-gathering in Ukraine and European countries. Want to know more about this story? Contact us: info@checkfirst.network
Unit 03110 (1975): The oldest insignia linked to this unit features symbols such as tropical palms and a flag that confirm that it was previously stationed in Lourdes (Cuba), before being relocated close to Sotchi (Russia) in the late 2000s. Among the ten bases we have identified, this one is the only one that equipped its antennas with radomes designed to protect the equipment from weather and hide its orientation and specifications from unwanted eyes. These domes, which may contain a radar or a dish antenna, are even depicted on one of the unit's insignia, which also portrays the facility facing the sea, with mountains in the background.
How the 16th Center depicts itself: The standard format of the shield and sword, symbols inherited from the KGB ; The Russian coat of arms (a double-headed eagle clutching a scepter and an orb surmounted by a cross, representing imperial authority and the Orthodox Church, respectively) ; A red background, a colour traditionally associated with the FSB.
For over a year, we have collected and analyzed hundreds of photographs of military insignia linked to the 16th Center of the Federal Security Service of the Russian Federation (FSB). We combined phaleristics (i.e. the study of medals, orders, decorations, and related honors issued by states, organizations, and military bodies) and traditional OSINT techniques to get insights into the history of the 16th Center, piece together part of its internal structure, and geolocate several of its interception centers within Russia.
Cover of our research "Decoding Secrets With Medals: How Military Insignia Revealed Russia’s Hidden SIGINT Network"
Our cover depicting "Operation Overload", featuring a blurry silhouette alongside screenshots and laptops.