This new, or new-ish, publication dives deep into the Internet infrastructure that Doppelganger operators have meticulously built and use to conduct their operations. The findings show how crucial European companies and individuals have been in enabling and supporting this campaign. This support included setting up servers and renting IP addresses that were used to obfuscate the real origin of the malicious actors, which, unsurprisingly, is Russia.

https://www.qurium.org/alerts/exposing-the-evil-empire-of-doppelganger-disinformation/