Qurium can reveal that Doppelganger is using a hidden Cloaking service, making it possible for everything from Russian disinformation to Bitcoin scams to bypass both automatic and manual moderation of content in Facebook. The service, known as “Redirect.pro” is provided by Kehr.io, an actor known for providing a variety of online scam and fraudulent services.
The investigation also links Doppelganger with VexTrio, a sophisticated cyber criminal operation that has been operating for years.