The Kirill Dmitriev Bot Network: A Coordinated Campaign to Polish a Kremlin Envoy’s Image on X
December 25, 2025
In late 2025, as Kirill Dmitriev – CEO of the Russian Direct Investment Fund (RDIF) and Putin’s special envoy – emerged as a key figure in backchannel Ukraine peace talks (including high-profile Miami meetings with Trump aides Steve Witkoff and Jared Kushner), a sophisticated network of inauthentic accounts on X sprang into action. Their sole purpose: to flood replies with glowing, scripted praise for Dmitriev, portraying him as a “calm professional,” “trustworthy bridge-builder,” and “results-oriented” negotiator.
This wasn’t organic enthusiasm. It was a classic example of coordinated inauthentic behavior (CIB), likely orchestrated by Kremlin-linked operators to manufacture positive sentiment around a sanctioned Putin ally during sensitive diplomacy.
The Network’s Core Tactics in December 2025
The campaign peaked in mid-to-late December 2025, coinciding with news of Dmitriev’s Miami visits (around December 18–22). Key tactics included:
- Reply-Only Amplification: Accounts almost never posted original content. Instead, they targeted replies to mainstream media threads (e.g., Axios, Reuters, Sputnik, RT) about Dmitriev’s role in Ukraine talks, Trump-Russia ties, or RDIF activities. This boosted visibility without triggering X’s anti-spam filters for new posts.
- Scripted, Formulaic Phrasing: Comments followed reusable templates, varying slightly for plausibility:
- “In situations like this, you don’t need a loud voice — you need a calm professional. Dmitriev fits that role.”
- “The very fact that Kirill Dmitriev regularly participates in such meetings speaks to the high level of trust placed in him.”
- “He is results-oriented, pragmatic, and understands both American and international markets.”
- “With Dmitriev, everything is always well thought out and clear.”
- Sudden Rebranding: In December 2025, most accounts changed display names to generic Western-sounding ones (e.g., Hunter Dawson, Olivia Garcia, William Davis, Elizabeth Williams) while retaining mismatched handles (e.g., @vladimirvargas3, @jovanajole7). This evasion tactic followed likely prior detections, allowing the network to “reset” and continue.
- Profile Characteristics:
- Stock photos or generic avatars of young adults.
- Minimal bios (often just dates like “21.06.2000”).
- Low followers/following (0–few), no personal history.
- Sudden activity bursts focused exclusively on Dmitriev—no unrelated posts.
- Low-Engagement Flooding: Replies garnered zero or minimal likes/reposts, indicating no genuine audience—just volume to push praise higher in threads.
Identified Accounts and Patterns
Dozens of accounts were documented, many overlapping across screenshots and searches. Examples include, but not limited to:
- https://x.com/vladimirvargas3 (now “Hunter Dawson”);
- https://x.com/7ave_b;
- https://x.com/JosephHar_223;
- https://x.com/WilliamDav45;
- https://x.com/tank1354;
- https://x.com/OliviaGar789;
- https://x.com/jovanajole7;
- https://x.com/kieriama;
- https://x.com/AverColliqcv23;
- https://x.com/GraceWheelagg96;
- https://x.com/FarazAh87664981;
- https://x.com/ElizabethWil789;
- https://x.com/mihai_ada.
These accounts exhibited indirect coordination: no direct interactions, but synchronized timing and identical templates on shared targets.
Broader Context and Operators
The network aligns with historical Russian disinformation operations (e.g., remnants of Internet Research Agency-style troll farms). Focus on Dmitriev – sanctioned for ties to Putin – suggests state sponsorship to enhance his “professional” image amid talks promoting pro-Russian narratives (e.g., frozen frontlines, no NATO for Ukraine). Human-operated (not pure bots) for nuance, but templated for scale. Activity slowed post-December (possibly due to suspensions/detection), shifting to pro-Russian influencers. This CIB exemplifies how platforms like X can be weaponized: not for direct propaganda, but subtle reputation laundering during critical geopolitical moments. As of December 25, 2025, while talks continue, the bot-net’s efforts highlight the persistent challenge of inauthentic influence in online discourse. Vigilance from users, researchers, and platforms remains essential. The majority of these accounts underwent username/handle changes in December 2025. Current display names are generic Western-sounding (e.g., Hunter Dawson, Olivia Garcia, Elizabeth Williams, William Davis), but handles often retain random or non-matching elements (e.g., @vladimirvargas3 for “Hunter Dawson”). This is a common tactic in bot/troll networks to rebrand and evade detection after exposure.
These accounts almost exclusively reply to posts about Kirill Dmitriev’s diplomatic efforts (e.g., Miami talks with Trump aides Steve Witkoff and Jared Kushner in December 2025). They do not originate content but amplify existing posts from news outlets (e.g., Axios, Sputnik, RT) or pro-Russian accounts. Short, repetitive positive comments praising Dmitriev’s professionalism, calmness, reliability, and effectiveness in negotiations. Here is only one of dozen examples of how ridiculously AI-generated phraises to promote Dmitriev look like from one of the X-bots.
This is not the first time Kirill Dmitriev is being caught using cheap bot and troll farms technologies that are very popular in Russia. The sources inside the Russian Direct Investments Fund (RDIF) inform that Dmitriev reportedly hired new communication team before his visit to Anchorage. This team is looking for the contractors among young SMM and SEO professionals and buys paid publications from Russian bloggers.
