Check First

We pioneered algorithm analysis and deploy expert skills to probe the digital space and its actors.

Check Firstcheckfirst
2026-03-09

Subscribe to our newsletter to learn more about our media interventions, our selected publications on topics of interest, and upcoming events related to , , and more!
โžก๏ธ checkfirst.network/newsletter/

Check Firstcheckfirst
2026-03-09

๐Ÿ“ซ You've got mail! The March issue of our monthly newsletter 'Indeed' is out. This edition features a glimpse of our latest into the GRU's Information Operations Troops (VIO), using photographs of medals and .
โžก๏ธ r.crossover.social/3gt9o97xzlx

Check Firstcheckfirst
2026-02-09

If you have any questions on this report, please write to us at info@checkfirst.network.

Read our full on our website ๐Ÿ”— checkfirst.network/unveiling-g
Don't miss our updates by subscribing to Indeed, our monthly newsletter ๐Ÿ”— checkfirst.network/newsletter/

Thanks for reading!

This report demonstrates that the methodology we used in our previous investigation into the infrastructure of the FSBโ€™s 16th Center is efficient and can be easily replicated in further research. We will continue our research into decorations linked to the GRUโ€™s VIO, and will extend our investigations to other Russian security and intelligence services in the months ahead.

Read the full report:
https://checkfirst.network/
Contact us:
info@checkfirst.network
Check Firstcheckfirst
2026-02-09

Our visuals below provide you a first glance at our findings, with examples of units featuring a comprehensive description.

Dark blue shield patch with orange border displaying a gold psi-shaped arrowhead, crossed sword, sealed scroll and three-flame grenade.Blue infographic titled "Computer Network Operations (CNO) Department" describing Unit 74455, insignia with diamond, lightning bolt, crossed swords and a globe, and a photo of a modern tower.Blue infographic detailing the Psychological Operations Department and Unit 54777 emblems, showing the Greek letter psi (which the central stem ends in an arrowhead), three-flame grenade, and an owl clutching a snake.Blue infographic detailing an Encryption & Cryptanalysis Department badge, map coordinates, and Unit 78430 signage with gate photo and explanatory text.
Check Firstcheckfirst
2026-02-09

๐—ž๐—ฒ๐˜† ๐—ณ๐—ถ๐—ป๐—ฑ๐—ถ๐—ป๐—ด๐˜€:
๐Ÿ… We have gathered 118 photos from specialised websites and forums.
๐Ÿ—บ๏ธ Thanks to them, we have concluded that the VIO is composed of at least 15 units across Russia.
๐Ÿ”Ž These units are divided into three specialities: encryption/cryptoanalysis, computer network operations (CNO), and psychological operations.

In 2025, we published a report delving into the infrastructure of the FSBโ€™s 16th Centre, combining a one-year exploration of websites and forums specialised in insignia collecting and traditional OSINT techniques. 

Building on this initial study, and once again relying on the analysis of military decorations โ€” known as phaleristics โ€” we are now publishing a report focused on the Information Operations Troops (VIO) of Russiaโ€™s military intelligence service, better known by the acronym GRU. Key findings graphic: 118 photos collected, at least 15 units identified, and 3 departments noted, set on a blue wave-patterned background.
Check Firstcheckfirst
2026-02-09

๐Ÿ”ด ๐—ก๐—˜๐—ช ๐—ฅ๐—˜๐—ฃ๐—ข๐—ฅ๐—ง
Last year, we were able to unearth the infrastructure of the FSB's 16th Centre, combining techniques and photos of old medals found on specialised websites. We replicated this method to explore the Information Operations Troops ( ) of โ€™s military intelligence service, better known by the acronym . While some units were already wellโ€‘documented, others have been scarcely recorded โ€” or not at all โ€” in open sources.

Report cover showing a dark blue patch with crossed sword, arrow and scroll emblem, titled "Unveiling GRU's Information Operations Troops (VIO)"
Check Firstcheckfirst
2026-02-03

๐—œ๐—ก๐—™๐—ข๐—ฅ๐— ๐—”๐—ง๐—œ๐—ข๐—ก
๐Ÿ“ Pan Piper, Paris
๐Ÿ“† Feb 5th, 11:35 (panel discussion) and 15:00 (podcast recording) CET

Registration link ๐Ÿ”— video-mobile.org/RIE2026/progr
Programme ๐Ÿ”— yp.events/fe97b31e-0b8d-4379-a

Check Firstcheckfirst
2026-02-03

Are you in Paris this week?
We gladly invite you to attend Samsa.fr's 'Meetings of Editorial Innovation' and meet our CEO Hervรฉ Letoqueux. He will be taking part in a panel discussion on new security protocols alongside Clรฉmentine Forissier (Contexte), Elodie Vialle and Carole Caumont (Samsa.fr).
Hervรฉ has also been invited to speak on the 'Propagations' podcast for a second time! His interview will be recorded in public at the same event.

Check Firstcheckfirst
2026-01-20

๐ˆ๐๐…๐Ž๐‘๐Œ๐€๐“๐ˆ๐Ž๐

๐Ÿ“ Maison de l'Europe, Paris

๐Ÿ“† 01/21, 6:00 PM - 9:00 PM (Paris time)

๐Ÿ”— eventbrite.fr/e/billets-de-luk

Check Firstcheckfirst
2026-01-20

๐‘บ๐’‚๐’—๐’† ๐’•๐’‰๐’† ๐’…๐’‚๐’•๐’†!

Tomorrow, our CEO Hervรฉ Letoqueux will take part in a French-language panel discussion entitled '๐˜๐˜ณ๐˜ฐ๐˜ฎ ๐˜œ๐˜ฌ๐˜ณ๐˜ข๐˜ช๐˜ฏ๐˜ฆ ๐˜ต๐˜ฐ ๐˜Œ๐˜ถ๐˜ณ๐˜ฐ๐˜ฑ๐˜ฆ: ๐˜ต๐˜ฉ๐˜ฆ ๐˜ค๐˜บ๐˜ฃ๐˜ฆ๐˜ณ๐˜ด๐˜ฆ๐˜ค๐˜ถ๐˜ณ๐˜ช๐˜ต๐˜บ ๐˜ฅ๐˜ช๐˜ฎ๐˜ฆ๐˜ฏ๐˜ด๐˜ช๐˜ฐ๐˜ฏ ๐˜ฐ๐˜ง ๐˜ต๐˜ฉ๐˜ฆ ๐˜ธ๐˜ข๐˜ณ ๐˜ช๐˜ฏ ๐˜œ๐˜ฌ๐˜ณ๐˜ข๐˜ช๐˜ฏ๐˜ฆ'.

The discussion will explore the following topics:

โžก๏ธ How cybersecurity goes beyond its technical role in cyber defence to become its 'main battlement' ;

โžก๏ธ France's role in the construction of the EU's Democracy Shield ;

โžก๏ธ How EU regulations and norms help to reinforce EU digital sovereignty.

Check Firstcheckfirst
2026-01-16
Check Firstcheckfirst
2026-01-15

RE: mastodon.social/@DisinfoEU/115

Operation Overload, Doppelgรคnger... Weโ€™ve been documenting these disinformation campaigns for years. But what if we adopted a consistent approach to documenting, attributing and responding to these operations?

With a group of partners (including @DisinfoEU ) we applied the Information Manipulation Set (IMS) concept developed by Viginum to four well-documented operations.

Find out more about our insights ๐Ÿ”— disinfo.eu/building-a-common-o

Check Firstcheckfirst
2025-12-22

This new partnership allows us to take proactive steps to preserve the dignity of victims of child sexual abuse as well as ensure the safety of our staff when undertaking such sensitive research.

Read our full statement ๐Ÿ”— checkfirst.network/check-first

Check Firstcheckfirst
2025-12-22

๐Ÿ” As a company dedicated to analysing online harms, we strive to adopt the highest safety standards and abide by industry norms, especially when dealing with illegal and sensitive material pertaining to children. This is why we are proud to announce that we've joined Internet Watch Foundation (IWF)'s membership!

Check First's logo on the left, Internet Watch Foundation membership's badge on the right.
Check Firstcheckfirst
2025-12-19

We are already preparing for whatโ€™s coming next year and canโ€™t wait to share it with the community. See you in 2026!

Make sure you don't miss our latest updates by subscribing ๐Ÿ”— checkfirst.network/newsletter/

Check Firstcheckfirst
2025-12-19

๐Ÿ“ซ 2025 has been a year full of new investigations and products (including RADAR and Oppi.tech), fulfilling our objective to tackle at its core. All these achievements are featured in the December issue of our monthly newsletter, "Indeed", along with our selection of events, studies and investigations in the field.

Read this edition ๐Ÿ”— r.crossover.social/3gr1lvvxzlx

Check Firstcheckfirst
2025-12-08

๐ˆ๐๐…๐Ž๐‘๐Œ๐€๐“๐ˆ๐Ž๐:
๐Ÿ“ Room 3E2, European Parliament, Brussels
๐Ÿ“† December 9th (13:00-15:00)

Check Firstcheckfirst
2025-12-08

Tomorrow at 14:15 (Brussels time), Shivika Sharma, our senior manager specialising in digital threats and policy, will join a panel exploring policy, regulation and institutional response regarding disinformation in electoral context.

This panel (moderated by Alexandre Alaphilippe from @DisinfoEU) is part of the European Parliament conference "Election Integrity and Foreign Interference in Romania, Moldova, and Poland: Is There A Better Way to Shield Our Democracy?".

Check Firstcheckfirst
2025-11-14

We thank again the FBA for this opportunity, and we will continue supporting CSOs and journalists as they pursue investigations into attempts to disrupt the elections!

checkfirst.network/check-first

Check Firstcheckfirst
2025-11-14

๐Ÿ‡ฆ๐Ÿ‡ฒ In partnership with the FBA (Folke Bernadotteakademin), the Swedish agency for peace, security and development, we spent a week in Yerevan, Armenia, helping Armenian civil society organisations and journalists strengthen their defences against foreign manipulation.

During our workshops, participants were introduced to a range of OSINT techniques and took part in a simulated investigation exercise using our oppi.tech platform.

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst