Digital Forensic Research Lab

The Atlantic Council’s Digital Forensic Research Lab (DFRLab) has operationalized the study of disinformation by exposing falsehoods and fake news, documenting human rights abuses, and building digital resilience worldwide.

The Digital Forensic Research Lab (DFRLab) is a first of its kind organization with technical and policy expertise on disinformation, connective technologies, democracy, and the future of digital rights. Incubated at the Atlantic Council in 2016, the DFRLab has conducted over 1,000 investigations exposing influence operations and emerging digital threats worldwide.

With a team rooted in diverse regional expertise and subject-matter knowledge, the DFRLab works to promote digital resilience, defend democratic institutions, and ensure that objective fact remains central to public discourse in an increasingly contested information space.

Read the DFRLab’s latest case studies, learn about our initiatives, and more at DFRLab.org

STAY CONNECTED

Receive the latest research, along with discussions about disinformation and tech issues.

ABOUT US

Programs

The Democracy + Tech Initiative creates policy practices that align global stakeholders toward tech and governance that reinforces, rather than undermines, open societies. It builds on the DFRLab’s established track record and leadership in the open-source field, empowering global communities to promote transparency and accountability online and around the world.

The Atlantic Council Technology Programs comprises five existing efforts—the Digital Forensic Research Lab (DFRLab), the GeoTech Center, the Cyber Statecraft Initiative, the Democracy + Tech Initiative, and the Capacity Building Initiative. These operations work together to address the geopolitical implications of technology and provide policymakers and global stakeholders necessary research, insights, and convenings to address challenges around global technology and ensure its responsible advancement.

LATEST RESEARCH

PROJECTS

Upcoming & Recent Events

Employment opportunities

There are no employment opportunities currently open.

From the archives

Experts

Content

Issue Brief

Aug 2, 2022

Behind the rise of ransomware

By John Sakellariadis

Between 2016 and 2019, cybercriminals shifted from automated ransomware campaigns that emphasized scale to targeted extortion operations against organizations. This adaption made ransomware more disruptive and more profitable, culminating in the 2021 surge in ransomware. Though the US government has devoted more attention to ransomware since 2021, ransomware remains a significant and long-term threat to the US economy.

Cybersecurity
Two men look at the Antonovsky bridge in Kherson, Ukraine, July 27, 2022. It has been damaged by Ukrainian attacks but not destroyed. (Source: REUTERS/Alexander Ermochenko)

New Atlanticist

Jul 29, 2022

Russian War Report: Russia minimizes Ukrainian damage of strategic bridge in Kherson

By Digital Forensic Research Lab

Russian downplays damage done by Ukrainian forces to a strategic bridge in Kherson while planning to annex occupied parts of Ukraine.

Civil Society Disinformation

Conflict, Risk, and Tech

Jul 25, 2022

Hackers, Hoodies, and Helmets: Technology and the changing face of Russian private military contractors

By Emma Schroeder, Gavin Wilde, Justin Sherman, and Trey Herr

This issue brief explores the technological capabilities of Russian private military companies and how they are used across various types of missions in support of and in parallel with Russian policy.

Africa Cybersecurity

New Atlanticist

Jul 22, 2022

Russian War Report: Russia accuses Ukraine of creating ‘monster’ troops in biolabs

By Digital Forensic Research Lab

Plus, a right-wing Polish political party presented a legislative proposal to stop the "Ukrainization" of Poland.

Conflict Disinformation

In the News

Jul 16, 2022

Gering and Thibaut on the China in Africa Podcast

On July 16, 2022, Global China Hub fellow Tuvia Gering and Digital Forensic Research Lab resident China fellow Kenton Thibaut appeared on the China in Africa Podcast to discuss China’s discourse power in Africa and the Global South. More about our experts

Africa China
A view of a damaged building and a car at the site of a Russian military strike in Vinnytsia, Ukraine, July 14, 2022. (Source: REUTERS/Valentyn Ogirenko)

New Atlanticist

Jul 15, 2022

Russian War Report: Russian missiles strike Vinnytsia

By Digital Forensic Research Lab

Russian forces launched a missile attack on the Ukrainian town on Vinnytsia, Russia's public death toll grows, and Iran's coverage of the war.

Conflict Disinformation
Ukrainian forces deploy a HIMARS precision rocket launching system on July 5, 2022. (Source: EYEPRESS via Reuters Connect)

New Atlanticist

Jul 8, 2022

Russian War Report: Ukraine uses HIMARS effectively to hit Russian ammo dumps

By Digital Forensic Research Lab

Ukranian forces are using M142 HIMARS multiple rocket launchers to systematically target Russian ammunition storage facilities behind the frontlines.  

Disinformation Migration
New satellite imagery taken this morning June 30, 2022 shows smoke coming from the contested Snake Island (45.255721, 30.204173) which Russia announced its withdrawal from June 30. Russian forces have left Snake Island in the Black Sea, the Ukrainian Armed Forces said on Thursday June 30, after carrying out what they said was a successful operation. The Ukrainian Armed Forces said that the enemy hastily evacuated the remnants of the garrison in two speedboats and probably left the island. (Maxar via EYEPRESS)

New Atlanticist

Jul 1, 2022

Russian War Report: Russia claims Snake Island losses were ‘gesture of goodwill’

By Digital Forensic Research Lab

Plus, Russian diplomatic accounts spread a questionable story about anti-Russian stickers placed at an Auschwitz memorial.

Conflict Cybersecurity

New Atlanticist

Jun 24, 2022

Russian War Report: Pro-Kremlin Russian outlet refers to Russian troops in Mariupol as ‘occupiers’ 

By Digital Forensic Research Lab

News outlet Moskovsky Komsomolets published an article that referred to Russian soldiers in Mariupol as "occupiers," but it was quickly deleted. Meanwhile, fires strike Russian oil and power plants, and Chinese media report on Russia-Lithuania dispute.

China Conflict
Ukrainian service members fire a BM-21 Grad multiple rocket launch system, amid Russia's attack on Ukraine, near the town of Bakhmut, Donetsk region Ukraine June 12, 2022. REUTERS/Gleb Garanich

New Atlanticist

Jun 17, 2022

Russian War Report: Russian governor accuses Ukraine of launching multiple attacks on Kursk 

By Digital Forensic Research Lab

The governor of Russia's Kursk Oblast accused Ukrainian forces of opening fire on two locations in the region. Meanwhile, pro-Kremlin Telegram channels recycle narratives about Western weapon sales again.

Disinformation Eastern Europe