CyberSIXT Search
Original
Image: blog.google

blog.google

TAG Bulletin: Q4 2025

This bulletin compiles coordinated influence operation campaigns terminated on our platforms in Q4 2025, with the page last updated on 29 January 2026, according to Threat Analysis Group. Highlights across October to December include numerous removals of YouTube channels and blogs affiliated with various state-linked operations, including Russia, Azerbaijan, Indonesia, and the PRC, and actions such as blocking domains from Google News surfaces and Discover.

In October, for example, several campaigns linked to Russia were disrupted, with activities ranging from content critical of Moldova to broader multilingual outreach. November saw hundreds of YouTube channels terminated and multiple Ads accounts closed as part of Russia-linked operations, alongside actions targeting Indonesia, Azerbaijan, and other actors.

December listings show thousands of YouTube channels terminated and numerous domain blocks, reflecting ongoing investigations into coordinated influence operations linked to multiple countries, including the PRC and Russia.

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device