How Russian Hackers Fooled Google’s AI System

Picture of Kibet Bohr

Kibet Bohr

Copenhagen Travel Writer and Blogger
How Russian Hackers Fooled Google’s AI System

Experts warn that a Russian-linked disinformation campaign may have manipulated Google’s AI to spread false reports about a Danish sanctions case involving paint manufacturer Flügger.

Fake News About Flügger Spread Worldwide

In late autumn, a peculiar story spread rapidly across the internet. Articles appearing to come from credible global websites claimed that Danish paint company Flügger had never sent any paint to Russia despite European Union sanctions. The alleged “new investigation” was entirely fabricated. According to cybersecurity specialists, someone managed to trick Google’s AI tool, known as Gemini, into amplifying the false story.

The deception started when the Danish broadcaster DR exposed how at least 1,900 tons of paint under EU restrictions had been shipped from Flügger through Estonia into Russia. Shortly afterward, fake reports popped up worldwide, from Kyrgyzstan to Kenya, the United States, Brazil, and Hungary.

These reports did not actually contain articles about Flügger. Instead, hackers attached falsified text fragments to website URLs that Google’s systems considered trustworthy. Because those websites — including government domains and universities — were not properly configured, Google’s crawlers accepted the texts as valid. As a result, Gemini summarized the fake claim as if it were verified information, presenting it at the top of search results.

Google’s AI Drawn Into a Web of Disinformation

When users searched for information about the Flügger sanctions case, Google’s AI-generated summaries claimed that the Danish company had been cleared of wrongdoing and that earlier allegations were malicious. In fact, no such investigation ever existed. The manipulation worked by “poisoning” search engine results with legitimate-looking websites that had been quietly modified.

After DR confronted Google with evidence, the false summaries disappeared from simple searches. The company confirmed it had policies against manipulation and stated that its systems continuously work to detect misleading tactics and remove harmful data. Still, cybersecurity experts argue the incident exposes vulnerabilities that disinformation actors can exploit.

Possible Russian Involvement

Investigators now believe the operation likely originated in Russia. Analysts point out that no credible reason exists for random institutions in Africa, South America, or Eastern Europe to suddenly publish identical false claims about a Danish company. The methods align closely with known Russian propaganda and cyber interference campaigns.

Russia has repeatedly been accused of using online influence operations to undermine Western institutions and to weaken trust in sources of information. Analysts suggest this latest campaign fits that pattern, aiming to cast doubt on European Union sanctions enforcement.

For context, Denmark and other EU countries have been constant targets of Russian digital pressure in recent years. There have even been direct cyber-attack threats against Danish institutions, illustrating how online manipulation complements traditional cyber warfare.

A Broader Threat to Online Information

The Flügger disinformation scandal highlights broader concerns about how artificial intelligence systems may unintentionally spread falsehoods. As search engines rely increasingly on machine learning to summarize results, tampering with source data can quickly mislead millions. Once the algorithms repeat a lie, even briefly, it can take hold faster than fact-checkers can respond.

Experts also emphasize that this case shows how global information infrastructures connect in unpredictable ways. A single compromised webpage in one part of the world can feed data to an AI model used elsewhere. When trusted domains are exploited, the fabricated material appears legitimate from a machine’s point of view.

Because of that, both technology firms and governments face pressure to harden defenses. Danish authorities have already increased awareness campaigns about data security and interference risks. For foreigners living in Denmark, staying alert to misinformation and maintaining good digital security — as discussed in national guidance like security in Denmark for foreigners — remains crucial.

Damage Control and Responsibility

Flügger’s management stated it had no involvement or knowledge of the falsified campaigns and strongly distanced itself from them. Google acknowledged the issue but insisted that manipulation attempts are rare and that detection systems succeed most of the time.

Still, IT specialists call for stronger mechanisms to verify information sources. They argue that with such cases becoming more sophisticated, platforms like Google must build smarter filters to recognize fabricated connections between unrelated web pages.

In the end, this case serves as a warning about how easily truth can be distorted online. Fake headlines once limited to social media are now infecting search engines and AI-generated summaries. As digital tools evolve, so too must the strategies for protecting the integrity of public information.

Sources and References

The Danish Dream: Russian Hackers Target Denmark in Cyber Attack Threat
The Danish Dream: Security in Denmark for Foreigners
DR: Pludselig dukkede nyhed op, der kaldte Flügger-beskyldninger for ‘ondsindede’: ‘Googles AI er blevet forgiftet’

author avatar
Kibet Bohr
Copenhagen Travel Writer and Blogger

Other stories

Receive Latest Danish News in English

Click here to receive the weekly newsletter

Popular articles

Books

Social Democrats’ Rent Cap Chaos Days Before Election

Working in Denmark

110.00 kr.

Moving to Denmark

115.00 kr.

Finding a job in Denmark

109.00 kr.

Get the daily top News Stories from Denmark in your inbox