Press Releases


  • The “Delete Negative Links” Industry

    Qurium Media Foundation has unveiled a complex operation aimed at manipulating online content by using fraudulent copyright claims to remove legitimate information from the internet. This investigation sheds light on the unethical practices employed by the “fake DMCA requests” industry.

  • How Russia uses EU companies for propaganda

    Almost two years ago Qurium exposed the modus operandi of Doppelganger – the Russia-based foreign influence operation that had been targeting European media with pro-Russian disinformation since the start of the war in Ukraine. Two years later, the disinformation campaign is still active but with refined methods to distribute links to fake content and new…

  • Tell of Spring – The industry of promoting financial scams from Tel Aviv

    (Note 16/7/2024: The contact details of one of the researchers of this investigation has been removed from this article) In the investigation Tell of Spring, Qurium has teamed up with cyber security researchers from French […] and Canadian Cyber Citoyen to bring light into the world of Affiliate networksAffiliate networksAct as intermediaries between the publishers…

  • Proxy providers used in repeated DDoS attacks against Russian exiled media Meduza.io

    Meduza is one of the largest and most influential Russian regime critical news site that delivers daily news from all across Russia in Russian and English languages. Since January 2023 Meduza has been declared undesirable in Russia since the media outlet “poses a threat to the foundations of Russia’s constitutional order and security” and their website…

  • The scam machinery – powered by paid Ads and bullet proof hosting

    In a joint investigation with Le Monde, Qurium has investigated a number of fake articles – impersonating Le Monde news paper – spreading disinformation and linking readers to fraudulent crypto currency investment scams. Our investigation lead us to RPT Company, a Russian affiliate marketing organization run by Leonid Belov and Yakov Rutman, awarded for their…

  • A lie told a million times becomes a fact

    – Russian involvement in deep fake video of Maria Ressa on Facebook 4 March 2024 Deep fake videos of celebrities promoting fraudulent Bitcoin solutions are on the rise. The purpose is to encourage viewers to enroll into fraudulent Bitcoin platforms, but the poorly crafted deep fake video of Maria Ressa promoting the crypto-currency scam “Bitcoin…

  • Monetization of hacked Facebook pages: Money to earn for everyone!

    7 February 2024 Hacked Facebook pages is no news, millions of accounts are compromised every year. But what are they used for, and who monetizes on those accounts being hacked? Qurium’s investigation starts with a handful of hacked Facebook pages belonging to the Ugandan media group “Nation Media Group” which have been used to drive…

  • Russian disinformation against Zelenskyy exposed on Times Square billboard

    2 February 2024 In November 2023 the Ukrainian president appeared in a video clip seemingly filmed from Times Square, showing Zelenskyy advertising for a drug rehab center in Los Angeles. Although it was clear that the video was an action against Zelenskyy, the question was rather how it had been done. Had the attacker paid…

  • Press release: Hundreds of sites cloned to promote a Chinese gambling network

    15 November 2023 Online gambling is an industry that moves a huge economy. Its global market size is expected to grow with 9,3% from 2022 to 89 billion dollars (89,000,000,000) in 2023 according to market research. The Asia-Pacific region, including large economies like China and India, was the largest gambling region in the world in…

  • Rotten fruit. An illustration of how the Internet is full of rotten actors.

    DDoS attacks against Hungarian media traced to yet another proxy provider

    – Attacks enabled by a stack of rotten actors 2 November 2023 No less than 40 Hungarian websites, nearly all of them regime critical media outlets, have suffered waves of DDoS attacks from April to September 2023. When the International Press Institute (IPI) reported on the attacks in late August, they became the next victim…