# Golden Owl Warns of Foreign Interference in Spanish November Elections

Strategic intelligence firm detects coordinated hybrid threats and Kremlin-linked disinformation networks targeting Spanish voters.

- **Source:** [20minutos](https://www.20minutos.es)
- **Published:** 2026-11-08
- **Topic:** [politics](https://brifing.si/c/politics)
- **Original article:** <https://www.20minutos.es/nacional/start-up-que-detecto-los-llamamientos-redes-asalto-ceuta-alerta-injerencia-extranjera-las-elecciones-generales-29n_7058109_0.html>
- **On Brifing:** https://brifing.si/s/07e0a56c-1149-4c3c-a915-c8796ba05007

## Hybrid Threats Identified

The Alicante-based firm Golden Owl warns of a diverse arsenal of hybrid threats targeting Spain's November 29 general elections. Their report highlights coordinated operations using synthetic media and clandestine digital infrastructure. These activities aim to influence public opinion by magnifying tragedies and distorting information through bots and fake online identities.

## Kremlin-Linked Telegram Networks

Investigations revealed a chain of Telegram channels reproducing content from Russian state media like Sputnik and TASS. At the center of this ecosystem is Enrique Arias Gil, a Spanish national based in Moscow. He is currently listed as a fugitive by Europol and is accused of recruiting Spaniards as paid cyber-volunteers.

## Recruitment and Digital Influence

Arias Gil allegedly manages a network with half a million subscribers, targeting both the extreme right and left in Spain. The report claims he recruits individuals for the Russian army and as informants against Spanish officials. These channels promote Kremlin narratives, often blaming Israel, the United States, or Morocco for domestic crises.

## Vietnamese Disinformation Farms

Golden Owl identified eight pages created in Vietnam that published Spanish political content during October 2026. These pages used deceptive names like 'Horizonte Político' and listed fake addresses in cities like Madrid, Seville, and Barcelona. They disguised themselves as innocuous businesses, such as clothing stores or restaurants, to avoid early detection.

## Exploiting National Tragedies

The report details how disinformation actors exploited the Urda railway accident to spread chaos. Within thirty minutes, accounts like @milexcarabanxel labeled the incident a 'terrorist attack' by Israel or the US. This coordinated effort utilized high-frequency posting to ensure these false narratives reached tens of thousands of viewers across social media platforms.

## Undermining Electoral Integrity

Foreign-backed structures are actively attempting to erode trust in the Spanish electoral system. The primary narrative pushed by these networks claims that mail-in voting is unsafe, the census is rigged, and results will be stolen. While the message originates domestically, foreign actors provide the necessary volume and reach for propagation.

## Historical Context of Operations

Golden Owl gained prominence after the Ceuta border crisis, where they identified social media mobilization as a key catalyst for the event. Their current methodology involves tracking digital footprints and infrastructure to attribute complex influence campaigns. This expertise in strategic intelligence allows them to distinguish between organic discourse and state-sponsored manipulation.

## Implications for National Security

The convergence of these distinct operations demonstrates the sophisticated variety of methods used to destabilize Spain's political environment. As the November 29 election approaches, the ability of these networks to reinforce each other poses a significant challenge. Authorities must now address both the domestic origins and the foreign amplification of these threats.

## Sources covering this story

- https://www.20minutos.es/nacional/start-up-que-detecto-los-llamamientos-redes-asalto-ceuta-alerta-injerencia-extranjera-las-elecciones-generales-29n_7058109_0.html — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
