On March 11, 2026, the Supreme Council for National Defense (CSAT) approved the United States’ request to temporarily deploy refueling aircraft, surveillance equipment, and satellite communications systems in Romania to support U.S. operations in the war with Iran. The decision, which was subsequently endorsed by Parliament, was presented by Romanian authorities as strictly logistical and defensive in nature, with no direct Romanian involvement in combat operations.
From a strategic standpoint, the timing was sensitive for several reasons. First, it brought the role of the bases at Mihail Kogălniceanu and Deveselu back into the spotlight amid regional tensions. Second, it provided hostile actors with an ideal pretext to revive older narratives about the “military colonization” of Romania by the U.S., about the country being turned into a “target,” and about the alleged use of NATO infrastructure against the interests of Romanian citizens. Third, the lack of strategic communication and the technical language used by the authorities left ample room for manipulation, exaggeration, and so-called „încadrare alarmistă” (panic framing).
Monitoring conducted using Meltwater and Junkipedia of Russian-language online sources between March 10 and 17, 2026, shows that the CSAT decision was quickly turned into a narrative amplification campaign, in which the actual facts were repackaged in an emotional, conspiracy-driven, and anti-Western tone.
Quantitative data indicate an immediate and intense surge in interest in the topic, with a sharp spike in mentions on March 11, followed by a plateau and then a controlled decline. This dynamic is not specific to journalistic interest alone, but suggests a rapid mobilization of amplification networks. The increase of over 27% in the volume of mentions compared to the previous period, concentrated within a very short timeframe, indicates that the topic was picked up and redistributed at an accelerated pace, characteristic of opportunistic disinformation campaigns. It is not merely that the event generated interest, but rather how that interest was channeled and amplified to rapidly impose a specific dominant interpretation.
Even more relevant to understanding the mechanism is the evolution of reach, which shows a disproportionate spike on the very day the topic gained traction. The fact that nearly the entire potential impact is concentrated in a single day suggests the existence of rapid distribution mechanisms, whether through high-traffic aggregators or through social media and channels with high viral potential. This characteristic is essential: the goal is not merely to inform, but to rapidly occupy the interpretive space before the official narrative is consolidated. In practice, in the first hours following the CSAT decision, an alternative interpretation was introduced that redefined the framework for understanding the event.
An analysis of the distribution by source type reveals a classic pattern of dissemination within pro-Kremlin ecosystems. The topic initially appears in the “News – Online” section but is quickly picked up and repurposed in forums, where engagement levels become dominant. Although online media generate more mentions, forums account for the majority of interactions, indicating that they function not merely as spaces for commentary, but as hubs for reinterpretation and radicalization. In these environments, information is no longer transmitted as is, but is simplified, emotionally charged, and adapted to support predefined conclusions. Forums thus become the point of transformation where technical information is converted into a crisis narrative.
Examples of high-engagement content confirm this type of reframing. The most prominent posts do not discuss logistical support or ISR capabilities in technical terms, but instead use phrasing that suggests direct military involvement or regional escalation. For example, some posts on Russian forums refer to “key documents” regarding the strategic partnership or to redeployments of U.S. troops “near Iran,” implicitly suggesting that Romania is becoming a launchpad for attacks. Even when there are no explicitly false claims, the selection and association of information create a distorted narrative in which Romania appears as an active military actor, not as a logistical facilitator.
This distortion is also supported by the semantic structure of the content. An analysis of keywords reveals a focus on terms such as “США” (USA), “Румыния” (Romania), “Иран” (Iran), as well as military concepts such as “НАТО” (NATO), “ПВО” (air defense), “бпла” (unmanned aerial vehicles/drones), or “Пентагон” (Pentagon). This association is not coincidental: it shifts the discussion from the realm of an administrative decision to a broader military conflict framework. In this way, Romania is symbolically integrated into a theater of operations, and its role is reinterpreted accordingly. It is no longer about infrastructure or cooperation, but about war, risk, and confrontation.
The geographical distribution of the sources reinforces the conclusion that we are dealing with an external framing operation. The overwhelming majority of the content originates from Russia, with limited extensions into Ukraine and the Republic of Moldova, while Romanian sources are marginal. This disproportion indicates that the narrative was not organically generated by an internal debate, but rather constructed outside Romania and subsequently projected into the regional information space. It is a well-known pattern in influence operations: the external definition of a state’s reality and then the redistribution of this interpretation to vulnerable audiences or those already exposed to similar messages.
The mobilization of the Russian-speaking community in the Republic of Moldova—particularly the segment linked to the separatist region of Transnistria—did not merely entail passively repeating messages originating from the Russian Federation, but rather adapting them to a local context of insecurity and proximity. In this context, the narrative regarding Romania’s logistical support for the United States was reframed so that it no longer appeared to be a technical decision related to operations in the Middle East, but rather a concrete step toward the militarization of the entire neighborhood of the Republic of Moldova. The content shifted the focus from the Bucharest–Washington relationship to the idea that any military buildup in Romania inevitably has direct consequences for the area between the Prut and Nistru rivers. In this way, Romania was no longer presented merely as a U.S. ally, but as an actor that “brings war closer” to the Republic of Moldova and, by extension, to Transnistria. Narratively, this shift is significant because it introduces a regional dimension to the threat: while in the dominant Russian media ecosystem Romania is described as a logistical platform for the US, in the Transnistrian narrative it becomes a platform for destabilization in the immediate vicinity of the separatist region.
The examples of content and the narrative logic observed in such media indicate a two-pronged manipulation strategy. On the one hand, the messages take up the general theme of “Romania’s involvement in the war” and frame it in local terms: Romania, together with NATO and the U.S., is not only supporting a foreign conflict but is also contributing to the creation of a new front of tension around the Republic of Moldova. On the other hand, these messages reactivate themes already established in Transnistria-related propaganda, such as the “encirclement” of the region, the preparation of military provocations, the dangerous proximity of NATO infrastructure to the security zone, or the risk that Chișinău and Bucharest will be drawn into a joint anti-Russian scenario. In other words, the Transnistrian cluster does not produce an autonomous narrative, but functions as a regional multiplier that translates the Kremlin’s strategic discourse into a language recognizable to the local public. From an analytical perspective, this is one of its most important functions: it transforms a story about the Middle East and bases in Romania into a story about the immediate vulnerability of the Republic of Moldova and the alleged proximity of war to the Transnistrian region.
At first glance, sentiment analysis might suggest a relatively balanced distribution between neutral, negative, and positive content. In reality, this apparent neutrality is misleading. In pro-Kremlin ecosystems, content labeled as “neutral” may already contain the desired framing, while “positive” content may reflect support for the anti-Western narrative, not for the actors being analyzed. The temporal evolution of sentiment shows that the initial phase is dominated by negative and neutral messages, which introduce the topic in a serious and seemingly factual framework, followed by an increase in “positive” messages, which validate and reinforce the propagandistic interpretation. This sequence indicates a deliberate process of building narrative consensus: first the problem is established, then the conclusion is normalized.
The graph above, on the other hand, illustrates a “cloud”-like network of monitored sources and accounts, designed to highlight the density of relationships between nodes, the frequency of their appearances, and their clustering around centers of informational gravity. The size of each node reflects the frequency of monitoring or the visibility of the source within the analyzed corpus, while the links between nodes suggest propagation proximities, thematic co-occurrences, and membership in the same narrative ecosystem. Visually, several dominant hubs can be observed, around which compact groups of peripheral accounts gravitate, indicating a dissemination pattern characteristic of propaganda ecosystems: a few central sources generate or stabilize the narrative, while a multitude of smaller accounts redistribute it, adapt it, and amplify its impact. The presence of nodes explicitly associated with Transnistria, Moldova, and Russia, as well as with aggregator-type sources or local media, suggests that we are not dealing merely with a scattered conversation, but with an interconnected information environment in which narratives about Romania, the U.S., and the war with Iran are recycled and regionalized. From an analytical perspective, this representation is also useful because it reveals the method by which the message is disseminated—non-linear, carried out through a network with multiple centers of influence, in which peripheral accounts reinforce the impression of plurality and independent validation, even though, at their core, they reproduce the same narrative core.
Overall, the identified campaign relies on several recurring mechanisms. A factual statement is taken out of context and reinterpreted by omitting technical nuances. Risks are exaggerated and presented as certainties. Information is recycled into multiple, nearly identical versions to create the impression of independent corroboration. Finally, the topic is integrated into a broader set of anti-Western narratives, which amplify its impact and extend its lifespan. The result is the rapid transformation of an administrative decision into a crisis of perception.
What makes this campaign relevant is not just the content, but the effectiveness of the mechanism. The data show clear temporal synchronization, a specific distribution across source types, and high narrative coherence, all indicating an ecosystem capable of rapidly amplifying and transforming information. In the absence of robust strategic communication, such networks can quickly occupy the interpretive space and redefine the meaning of an event before official explanations become dominant.
In this case, pro-Kremlin propaganda did not need to invent an event, but merely to reinterpret it. Through a combination of selective reporting, exaggeration, and repetition, a temporary logistical support operation was transformed into a narrative about Romania’s entry into the war, its strategic vulnerability, and the risk of regional or global escalation. It is a clear example of how, in the current context, control over the narrative can be just as important as the reality of the facts themselves.
—
By Dr. Nicolae Țîbrigan, coordinating expert Digital Forensic Team, in collaboration with A4E Counter Disinformation Network (CDN)
