What nearly two decades of observing dark web ecosystems taught me about how influence operations really work. It often starts much deeper in underground communities most people never see.

A lot of people across Eastern Europe have quietly decided that "disinformation" is a fake problem. A word the powerful use to dismiss anyone who disagrees with them. A control mechanism dressed up as a public-safety concern. If you have ever thought "they just call it disinformation when they don't like what I'm saying," this article is written for you and I am not going to tell you that you are stupid for thinking it.

I have spent nearly two decades observing underground networks, dark web ecosystems, and the machinery of influence operations from the inside. And here is the uncomfortable thing I have to report from that vantage point: the suspicion is half right. There is a lie being told. It is just not the one you think.

Your frustration is real. Start there.

Before anything else, let me say the part that most articles on this subject skip, because skipping it is exactly why those articles fail.

If you are frustrated with the way life works right now, the prices, the wages that do not stretch, the sense that the deck is stacked, the feeling that the people who decide things do not live in the same reality you do you are not wrong, and you are not imagining it. The economic squeeze is real. The gap between what a month of work buys now and what it bought before is real. Your anger is a rational response to a real situation. Nobody gets to tell you that feeling is invented.

That is the foundation of everything that follows, so I want it to be unmistakable: this is not an article telling you to trust authority, calm down, and accept what you are told. The opposite, actually. It is an article about who is using your entirely legitimate frustration and how.

The trap is built out of something true

Here is a pattern I have watched many times. It is most effective on people who are 40 and older, and the reason is not that they are gullible. It is that they have lived through more than one system, and memory does a quiet, dishonest thing to all of us.

When we look back at the past, we remember the good parts in high definition and we let the bad parts blur. The security we felt. The sense that things were simpler. The community. What fades is the queuing, the shortages, the fear, the things we could not say. So we end up making a comparison that is rigged before it starts: the best of what was, measured against the worst of what is. The good of then versus the bad of now. No present could ever win that contest, because it is not a fair fight it is nostalgia grading its own exam.

This is not a character flaw. It is how human memory works, in every country, in every generation. But it creates a vulnerability. And vulnerabilities, in the world I come from, are not left lying around unused.

What the operations actually do

Here is the part people get wrong about influence operations, and it is the heart of this whole piece.

Foreign influence operations and yes, are state-sponsored and well-documented in public reporting by EU, NATO, and national intelligence services( the most documented ≠ all of them , because the ops are worldwide ) though they are far from the only ones do not invent your frustration. They do not need to. Inventing anger is expensive and unconvincing. Amplifying anger that already exists is cheap and almost undetectable, because the raw material is genuine. You are not being fed a fake emotion. You are being fed a real emotion, carefully aimed.

The operation's job is not to make you feel something false. It is to take what you already feel the legitimate economic frustration, the legitimate distrust, the genuine nostalgia and gently steer it: toward a specific conclusion, a specific enemy, a specific candidate, a specific paralysis. The content that does this does not arrive with a flag on it. It arrives looking like an ordinary person who feels exactly what you feel, who happens to have an explanation ready, and whose explanation always points the same direction.

That is why it works on smart, skeptical people. The skepticism is real. The frustration is real. Only the steering is artificial and the steering is the only part you cannot see.

Where it actually begins: the part nobody shows you

Most people picture disinformation as something that lives on the surface a post on Facebook, a video on Telegram, a comment under an article. That is where you see it. It is not where it starts.

In the ecosystems I monitor, the visible post is the last step in a long supply chain, and most of that chain runs underground. This is the connection that surprises people: the dark web and closed underground communities are not just for ransomware and stolen credit cards. They are also the infrastructure layer of influence operations. Specifically:

• Recruitment happens there first. Before an "authentic local voice" ever posts, the people who will run, seed, and amplify a campaign are often recruited inside underground forums and closed channels sometimes knowingly as paid operators, sometimes as ideologically aligned volunteers who never realize whose strategy they are serving.

• The capabilities are bought there. Aged social media accounts that look like real people with years of history. Networks of bots. Deepfake and synthetic-media services. Fake-engagement vendors. None of this is built in public. It is procured quietly, in the same markets that sell everything else.

• The money moves there. Operators get paid in cryptocurrency, routed through mixers designed to break the link between who pays and who posts the same financial plumbing used by the rest of the underground economy.

• It regroups there. When a public platform takes a network down, the community does not die. It reconverges because the relationships, not the platform, were the real infrastructure. The takedown moves the furniture. The operation continues.

So the thing you see on the surface the angry post that happens to match your mood — sits on top of a recruitment, procurement, payment, and coordination stack that mostly lives where you will never look. That is not a theory I read somewhere. It is the structure I have spent years watching assemble itself, piece by piece.

So who is lying to you?

Let us go back to where we started the suspicion that "disinformation" is just a control word.

The lie is real. But the liar is not necessarily the one standing in front of you wearing an official badge. The more sophisticated lie is the one wearing your own face the account that feels like you, frustrated like you, nostalgic like you, and that quietly hands you a conclusion you think you reached on your own. The control you should worry about is not always the obvious, clumsy kind from above. Sometimes it is the invisible kind, coming from a server farm in another country, routed through someone who looks exactly like your neighbor.

That is the genuinely unsettling part. The operation does not want your obedience. It wants your agreement agreement that feels like your own idea, because it was built out of feelings that genuinely were.

What to actually do and it is not "trust the state"

I am not going to end this by telling you to believe official sources, calm down, and stop questioning things. That would be insulting, and it would also be exactly the move the operations are betting I will make, because it confirms everything the skeptic already suspects.

Here is the better defense, and it costs nothing:

Defend your own mind, from everyone. Not from the state. Not from foreign operations. From anyone who wants to do your thinking for you.

• When a piece of information makes you feel a strong emotion fast anger, vindication, fear treat that speed as a warning light, not a green light. Strong instant emotion is the signature of content engineered to bypass thought. Slow down precisely when you feel pushed to speed up.

• Check more than one source and sources that disagree with each other. Not one outlet, not one channel, not one "person who finally tells the truth." If a claim only exists in places that already share its conclusion, that is not corroboration. That is an echo.

• Ask the question the operation hopes you will not ask: who benefits if I believe this and act on it? Follow it past the obvious answer.

• Notice when an explanation is too clean. Real life is messy and contradictory. Narratives that explain everything, blame one enemy for all of it, and leave you with a single clear action — those are manufactured more often than they are true.

None of this means trusting authority. It means refusing to outsource your judgment to anyone your government, a foreign actor, a charismatic account, or me. Your frustration is yours. It is legitimate. The whole game is about who gets to aim it. The answer should be: nobody but you.

That is the real lie worth being angry about not that someone called something disinformation, but that someone took a feeling that genuinely belonged to you and quietly pointed it where they wanted. You have every right to be frustrated. You also have every right to make sure the frustration stays yours.

Full Reports on this subject you can find at Aether-Intel

Adrian Alexandru is an independent cyber threat intelligence analyst specializing in passive digital HUMINT, behavioral analysis, and dark web ecosystems, based in Brașov, Romania. He publishes open intelligence research at [aether-intel.com]

This article is analytical commentary; it names no individuals and characterizes no specific community