AI Models as Tools and Targets in Foreign State Disinformation Campaigns

Two PRC-linked ChatGPT account clusters — 'Data Center Bandwagon' and 'Tech and Tariffs' — were identified and banned by OpenAI in early June 2026 for generating covert social media content targeting US debates over AI infrastructure costs and trade tariffs [1]. Separately, Estonia's Language Institute and civil defense collective Propastop published a benchmark ranking major commercial LLMs on resistance to 14 categories of Russian strategic narratives, tested in three languages with adversarial prompts [6]. OpenAI assessed that neither PRC campaign achieved measurable public opinion impact beyond its own generated content [1]. The Center for Foreign Interference Research has documented record global proliferation of state-sponsored AI disinformation operations during 2026 [7].

AI infrastructure is now itself a subject of foreign influence operations, not just a medium for them — the PRC campaigns explicitly targeted public narratives about US data centers and energy costs [1]. Estonia's benchmark treats LLM propaganda resistance as a measurable, auditable property rather than a matter of trust in developer self-reporting alone [6], a posture other governments may consider adopting as the broader record of state-sponsored AI disinformation activity in 2026 grows [7].

In early June 2026, two parallel developments showed AI models being used as instruments of and potential resistors to foreign state influence activity.

On June 10, OpenAI published a threat intelligence report disclosing that it had identified and banned two clusters of ChatGPT accounts linked to PRC-origin operators [1]. The first cluster, labeled 'Data Center Bandwagon,' generated social media content falsely claiming that AI data center construction was raising electricity costs for ordinary families. The second, 'Tech and Tariffs,' produced content criticizing US trade tariffs while explicitly instructing the model to avoid mentioning Xi Jinping and to center criticism on President Trump. OpenAI assessed that neither operation achieved measurable public opinion impact beyond its own generated activity, and framed public disclosure as a responsibility to help governments, industry, and civil society identify future attempts. The campaigns targeted domestic political debate over US AI infrastructure — framed by OpenAI as a foundation of US technological and economic position. Social media commentary in English, Chinese, and Japanese amplified the disclosure in the days following, with English-language accounts emphasizing the tariff and data center targeting angles [2][3][4][5].

Six days earlier, on June 4, Estonia's Language Institute (EKI) and the volunteer civil defense collective Propastop published a benchmark ranking major commercial LLMs on their resistance to Russian propaganda [6]. The benchmark covers 14 categories of Russian strategic narratives — including justifications for the war in Ukraine, denial of Soviet occupation of the Baltic states, and historical framings of NATO — and was administered in English, Estonian, and Russian. Model responses were scored by a separate AI judge calibrated against assessments from Propastop's expert volunteers. Tests ranged from neutral control questions to questions embedding propaganda assumptions to adversarial prompts specifically designed to elicit explicit misinformation.

The broader context for both developments is a documented expansion of state-sponsored AI disinformation activity globally. The Center for Foreign Interference Research has reported record proliferation of such operations in 2026 [7], suggesting the PRC campaigns OpenAI disrupted represent one visible instance of a wider pattern. OpenAI's approach relies on the platform to detect and publicly disclose misuse after the fact; Estonia's approach attempts to measure model vulnerability before deployment in adversarial conditions. The two postures are complementary but rest on different assumptions about who bears responsibility for auditing this risk.