Foreign influence operations rarely manufacture a political conflict from nothing. Their more efficient strategy is to locate an unresolved grievance, attach it to a simplified explanation, and distribute that explanation through networks that make it appear widely shared. The vulnerability is therefore not only the falsehood. It is the combination of a real social tension, an untrusted institution, and an information system capable of repeatedly intensifying both.
The fourth EEAS threat report, released on 12 March 2026, shows how these campaigns reuse adaptable playbooks rather than relying on one narrative. Tactics tested around Moldova’s elections have been transferred to other political settings, while coordinated accounts, proxy outlets, artificial amplification, and cross-platform distribution make locally tailored messages appear organic. Influence should therefore be analysed as coordinated behaviour attached to real grievances, not as a collection of misleading posts.
Key takeaways
- Influence operations amplify grievances that already have social or political credibility.
- The 2026 threat picture shows reusable infrastructure adapting messages to local conditions.
- Institutional responsiveness and trusted local intermediaries reduce the available openings.
Grievance provides the entry point
Economic insecurity, dissatisfaction with public services, centre-periphery tensions, contested identity, and frustration with political elites can all become channels for manipulation. An external actor does not need to persuade a majority. It may be enough to increase suspicion between groups, crowd out reliable information, or make democratic compromise appear illegitimate.
This matters across Romania, Ukraine, and Moldova because superficially similar messages encounter different histories. A narrative about sovereignty can attach itself to EU policy disputes in Romania, wartime endurance in Ukraine, and geopolitical orientation in Moldova. The message travels because it is translated into an existing argument, not because every audience accepts the same worldview.
“Foreign influence is most effective when a manipulated explanation attaches itself to an experience the audience already recognises.”
From content to coordinated behaviour
The March 2026 EEAS report reinforces a shift from counting false claims to examining tactics, techniques, and procedures. Cloned outlets, coordinated accounts, proxy voices, artificial engagement, and the timing of publication reveal more about an operation than any one post. The same infrastructure can move from an electoral story to a security incident without changing its underlying method.
This approach also protects democratic debate. Strong criticism of government is not evidence of foreign interference. Attribution requires observable patterns, infrastructure, coordination, or a documented relationship to an external actor. Maintaining that threshold is essential when political polarization already makes accusations of manipulation easy to weaponise.
Resilience begins before the campaign
On 16 March 2026, the Council of the EU called for stronger protection of democratic processes, critical infrastructure, and candidate countries against hybrid campaigns. The useful part of this approach is its breadth: information manipulation is treated alongside cyber activity, economic coercion, sabotage, and interference rather than as a separate communications problem.
Rapid rebuttal remains valuable, particularly when false information affects safety or elections. But durable resilience reduces the distance between institutional claims and citizens’ experience. Transparent decisions, dependable services, independent media, and meaningful participation make grievance harder to appropriate. The goal is not a society without conflict; it is a democracy able to contest real disagreements without allowing covert coordination to define them.
Share this analysis
Mara Ionescu
Research ContributorInformation resilience, foreign influence narratives, and regional security in Romania, Ukraine, and the Republic of Moldova.
View contributor profile →
