ST. PETERSBURG, Russia -- The sponsors of the Russian "troll factory" that meddled in the 2016 U.S. presidential campaign have launched a new American website ahead of the U.S. midterm election in November. A Russian oligarch has links to Maryland's election services. Russian bots and trolls are deploying increasingly sophisticated, targeted tools. And a new indictment suggests the Kremlin itself was behind previous hacking efforts in support of Donald Trump.
As the U.S. leader prepares to meet Russian President Vladimir Putin in Helsinki on Monday, many Americans are wondering: Is the Kremlin trying yet again to derail a U.S. election?
While U.S. intelligence officials call it a top concern, they haven't uncovered a clear, co-ordinated Russian plot to mess with the campaign. At least so far.
It could be that Russian disruptors are waiting until the primaries are over in September and the races become more straightforward - or it could be they are waiting until the U.S. presidential vote in 2020, which matters more for U.S. foreign policy.
In the meantime, an array of bots, trolls and sites like USAReally appear to be testing the waters.
USAReally was launched in May by the Federal News Agency, part of an empire allegedly run by Putin ally Yevgeny Prigozhin that includes the Internet Research Agency - the "troll factory" whose members were indicted by U.S. special investigator Robert Mueller this year.
USAReally's Moscow offices are in the same building as the Federal News Agency. The original troll factory was also initially based with Federal News Agency offices in St. Petersburg, in a drab four-story building where a huge "For Rent/Sale" sign now hangs. The site believed to house the troll factory's current offices is a more modern, seven-story complex with reflective blue windows in a different but similarly industrial neighbourhood of St. Petersburg. Associated Press reporters were not allowed inside, and troll factory employees declined to be interviewed.
The USAReally site appears oddly amateurish and obviously Russian, with grammatical flubs and links to Russian social networks.
It says it's aimed at providing Americans "objective and independent" information, and chief editor Alexander Malkevich says it's not about influencing the midterm election. Yet his Moscow office is adorned with a confederate flag, Trump pictures and souvenirs and a talking pen that parrots famous Trump quotations.
"Disrupt elections? You will do all that without us," he told The Associated Press. He said Americans themselves have created their own divisions, whether over gun rights, immigrants or LGBT rights - all topics his site has posted articles about.
Most online manipulation ahead of the midterm election is coming from U.S. sources, experts say. They worry that focusing on Russian spy-mongering may distract authorities from more dangerous homegrown threats.
There is Russian activity, to be sure. But it appears aimed less at swaying the U.S. Congress one way or another and more at proving to fellow Russians that democracy is unsafe - and thereby legitimizing Putin's autocratic rule at home.
While security services are on high alert, "the intelligence community has yet to see evidence of a robust campaign aimed at tampering with election infrastructure along the lines of 2016," Christopher Krebs, the undersecretary at the Department of Homeland Security, told a Congressional hearing Wednesday.
That doesn't mean there's nothing to worry about.
National Intelligence Director Dan Coats said Friday that warning lights about overall cyber-threats to the U.S. are "blinking red" - much like "blinking red" signals warned before 9-11 that a terror attack was imminent.
Coats said that while the U.S. is not seeing the kind of Russian electoral interference that occurred in 2016, digital attempts to undermine America are not coming only from Russia. They're occurring daily, he said, and are "much bigger than just elections."
Intelligence officials still spot individuals affiliated with the Internet Research Agency creating new social media accounts that are masqueraded as belonging to Americans, according to Coats. The Internet Research Agency uses the fake accounts to drive attention to divisive issues in the U.S., he said.
USAReally plays a similar role.
"USAReally is unlikely to create big momentum in its own right," in part thanks to stepped-up actions by Twitter and Facebook to detect and shut down automated accounts, said Aric Toler of the Bellingcat investigative group.
However, Toler said the site could build momentum by creating divisive content that then gets passed to other provocative news aggregators in the U.S. such as InfoWars or Gateway Pundit.
He believes that a key role for sites like USAReally is to please the Kremlin and to prove that Prigozhin's empire is still active in the U.S. news sphere.
Prigozhin, sometimes dubbed "Putin's chef" because of his restaurant businesses, has not commented publicly on USAReally. Prigozhin and 12 other Russians are personally charged with participating in a broad conspiracy to sow discord in the U.S. political system from 2014 through 2017.
Editor Malkevich confirms his site's funding comes from the Federal News Agency. But he says he has nothing to do with the indicted trolls, who once operated under the same roof.
"I absolutely don't understand this spy mania," he said. He says the site has a few thousand followers, and that his 30 journalists and editors check facts and don't use bots.
The big question is what Trump plans to do about this.
Trump is under heavy pressure to tell Putin to stay out of U.S. elections when they meet, and he said Friday that he would. But many state lawmakers and members of Congress say it's taken far too long, and that Trump's refusal to condemn Russia's interference in the 2016 election complicates efforts to combat future attacks.
Adding to the pressure on Trump is a new indictment issued Friday accusing 12 Russian military intelligence officials of extensive hacking in 2016 that was specifically aimed at discrediting Trump's rival, Democratic presidential candidate Hillary Clinton.
After the top U.S. intelligence agencies found a Putin-ordered influence campaign in which Russian hackers targeted at least 21 states ahead of the 2016 election, several state election directors fear further attempts to hack into voting systems could weaken the public's confidence in elections.
Maryland officials announced Friday that a vendor providing key election services is owned by a company whose chief investor is well-connected Russian businessman Vladimir Potanin. The FBI told state officials no criminal activity has been detected since vendor ByteGrid was purchased in 2015 by AltPoint Capital Partners.
Experts note that governments have been using technology to influence foreign powers for millennia, and caution against assuming the Russians are always at fault.
"Just because it's a troll doesn't mean it's a Russian troll," said Ben Nimmo of the Atlantic Council's Digital Forensic Research Lab. "The really big challenge for the midterms ... is differentiating what the Russians are doing, and what the Americans are doing to each other."
------
Davlashyan and Charlton reported from St. Petersburg and Moscow. Kate de Pury in Moscow, Geoff Mulvihill in Philadelphia and Christina A. Cassidy in Atlanta contributed to this report.
