State intelligence experts say that the Republic of Cyprus is the target of an organised “hybrid operation” following the release of a video alleging corruption at the Presidential Palace.
Sources within the security services told Philenews that the video, which targets former minister Yiorgos Lakkotrypis and presidential aide Charalambos Charalambous, bears the hallmark characteristics of a “Doppelganger” campaign. This Russian-linked disinformation network, active since 2021, has previously targeted France, Germany, and the United States using “kompromat”—a Soviet-era intelligence tactic involving the release of compromising material to blackmail or politically exhaust opponents.
The investigation has identified several key indicators of Eastern European origin:
- Linguistic Evidence: At least one individual who approached the targets under the guise of an investment manager spoke English with a distinct Eastern European accent.
- Methodology: The footage was published under the “cloak of investigative journalism” on an anonymous account on the platform X, without any attempt to seek a right of reply from those featured.
- Timing: Sources close to the presidency point out that the leak coincides with three major geopolitical shifts: Cyprus assuming the EU Council Presidency, a visit from Ukrainian President Volodymyr Zelenskyy, and the arrival of US officials to discuss the “Andreas Papandreou” airbase.
The Cyprus Intelligence Service (KYP) has been in contact with the Presidential Palace since the footage emerged. The material creates the impression that the Christodoulides administration used illegal cash donations to exceed the €1 million campaign spending limit and established a “pay-for-play” mechanism for corporate interests.
Lakkotrypis, who was lured into the sting by a promised €150 million energy investment from a Dutch fund, provided a formal statement to the Criminal Investigation Department (CID) Headquarters on Friday afternoon. Accompanied by his lawyer, the former minister handed over documents and correspondence related to his dealings with the fake investors.
The probe has now been upgraded, moving from Nicosia CID to the specialised units at Police Headquarters. The Cybercrime Division and the Forensic Science Department are currently examining the digital documents and metadata associated with the “Emily Thompson” account to trace the origin of the upload.
Read more: