Hero image: Leon Aschemann / Pexels
Latvia Debunks NATO Drills Disinformation Video Claim
Latvia’s Defense Ministry has publicly refuted a viral video alleging a Ukrainian soldier killed NATO troops during a Baltic drill, calling the footage “fabricated.” The claim, amplified across social platforms, underscores the accelerating use of synthetic media in hybrid warfare targeting NATO’s 2026 regional exercises.
The past week saw a video purporting to show a Ukrainian soldier shooting NATO troops during a joint exercise in Latvia go viral across multiple social media platforms. The footage, which surfaced on August 18, 2026, quickly amassed millions of views and was widely shared under claims that it exposed reckless conduct by Ukrainian forces operating alongside NATO allies. Within 72 hours, Latvia’s Defense Ministry issued a categorical denial, calling the video “a deliberate disinformation campaign.” This incident is not isolated; it reflects a broader pattern of synthetic media being weaponized to undermine trust in NATO’s deterrence posture and to erode public confidence in allied military cooperation. This synthesis examines the claim, the official rebuttal, the mechanics of its spread, and the strategic implications of such disinformation campaigns.
—
Context: NATO’s 2026 Baltic drills and rising disinformation risks
NATO’s upcoming 2026 regional exercises in the Baltic states are designed to demonstrate allied readiness and interoperability in the face of heightened regional tensions. These drills, scheduled for early 2027, are expected to involve thousands of troops from multiple member states and partner nations, including Ukraine. The exercises are framed as a show of collective defense under Article 5 principles, but they also represent a high-value target for disinformation campaigns seeking to sow division, amplify skepticism, and weaken allied cohesion.
Disinformation analysts have long warned that synthetic media—including deepfake audio and video—poses a growing threat to military transparency and public trust. The rapid advancement of generative AI tools has lowered the barrier to creating hyper-realistic fake footage, enabling adversaries to fabricate events that appear to show misconduct, accidents, or even combat violations. In this environment, even a single viral video can trigger geopolitical ripple effects, especially when it aligns with preexisting narratives about NATO overreach or Ukrainian unreliability.
The current incident follows a documented rise in disinformation targeting NATO exercises in Eastern Europe. In 2024, similar fabricated videos were circulated during the “Steadfast Defender” drills, purporting to show NATO forces violating national sovereignty. While those claims were debunked within hours, the amplification vectors—social media bots, state-aligned media outlets, and encrypted messaging groups—remain active and increasingly sophisticated.
—
What TVP World reported: Latvia’s official rebuttal of the viral video
TVP World reported on August 21, 2026, that Latvia’s Defense Ministry had issued a formal statement denying the authenticity of the video, calling it “a fabricated narrative intended to destabilize regional security.” According to TVP World, the ministry emphasized that no such incident occurred during the referenced NATO drill, which was still in the planning phase as of the statement’s release. The ministry also urged the public to rely only on official communications from Latvian authorities and NATO spokespeople.
TVP World noted that the video first surfaced on August 18, 2026, on an anonymous Telegram channel before being reposted on X (formerly Twitter) and several fringe video platforms. The footage shows a masked individual firing a rifle at a group of soldiers in camouflage, with audio in Ukrainian and Russian. The caption claimed the shooter was a Ukrainian soldier participating in a NATO training exercise in Latvia. Within hours, the video had been viewed over 2.3 million times and shared by accounts with known affiliations to pro-Kremlin influence networks.
TVP World also highlighted that Latvia’s State Security Service (SAB) had launched an investigation into the video’s origins, focusing on potential foreign interference. The SAB stated that the video contained multiple inconsistencies, including mismatched uniforms, incorrect insignia, and audio that did not align with the visual timeline. These discrepancies were later corroborated by independent analysts cited by TVP World.
—
The claim dissected: timeline, actors, and inconsistencies in the video
Timeline of the video’s emergence and spread
The video first appeared on August 18, 2026, on an anonymous Telegram channel with fewer than 500 subscribers. Within two hours, it was reposted to a larger pro-Russian Telegram group with over 50,000 members, where it gained initial traction. By the evening of August 18, the video had been uploaded to an uncensored video platform and shared on X, where it was amplified by accounts with histories of spreading NATO-skeptical content. By August 20, the video had been viewed over 4 million times across platforms, despite efforts by content moderators to flag it as misleading.
TVP World reported that the video’s metadata showed it was edited using a consumer-grade video editor, with timestamps indicating multiple cuts and overlays. The audio track, which includes Ukrainian and Russian phrases, was found to be out of sync with the visuals in at least three instances. Independent forensic analysts quoted by TVP World noted that the rifle used in the video resembles a civilian variant, not the standard-issue AK-74 or M4 carbines used by NATO and Ukrainian forces in the region.
Actors and amplification networks
According to TVP World, the initial upload was traced to an IP address in Russia, though the uploader’s identity remains unknown. The video was rapidly amplified by a network of accounts with known ties to the Internet Research Agency (IRA) and other state-linked influence operations. These accounts used coordinated hashtags such as #NATOCrimes, #UkraineNATOScandal, and #BalticHoax, which trended in several Eastern European countries. The hashtags were designed to exploit existing skepticism toward NATO enlargement and Ukraine’s role in regional security.
The amplification pattern followed a documented playbook: first, fringe platforms; then, mainstream social media via bot-like accounts; finally, coverage by state-aligned media outlets in Russia and Belarus, which framed the video as “evidence” of Western hypocrisy. TVP World noted that one Belarusian state TV channel aired a segment repeating the claim without verification, further legitimizing the narrative in Russian-speaking audiences.
—
Where the narrative diverges from verified facts
The central claim—that a Ukrainian soldier killed NATO troops during a drill in Latvia—has been thoroughly debunked by Latvian authorities and independent analysts. TVP World reported that Latvia’s Defense Ministry confirmed no such incident occurred, and that the referenced exercise had not yet begun as of the video’s release. The ministry also stated that no Ukrainian troops were scheduled to participate in the drill at the time the video was filmed.
Further discrepancies include the uniforms worn by the soldiers in the video, which do not match NATO standard camouflage patterns used in the Baltic region. The insignia on the shooter’s sleeve, while resembling Ukrainian military markings, was found to be a modified version of a commercial patch, not an official insignia. The audio track, which includes phrases such as “Це наша земля” (“This is our land”) in Ukrainian, was traced to a 2023 viral meme unrelated to military drills.
Independent fact-checkers, including those cited by TVP World, noted that the video’s visuals and audio are inconsistent with known NATO exercise protocols. NATO drills in Latvia typically involve pre-announced training areas, controlled media access, and strict rules of engagement—none of which would allow for an unsupervised shooting incident involving live ammunition. The video, by contrast, shows no identifiable landmarks, no visible range control, and no emergency response personnel.
—
Who is affected: NATO, Ukraine, and regional security perceptions
The disinformation campaign has immediate implications for NATO cohesion and public trust in allied military operations. By fabricating an incident involving Ukrainian troops, the video seeks to undermine NATO’s narrative of unified deterrence and to exploit existing divisions among member states regarding support for Ukraine. TVP World reported that several Eastern European NATO members privately expressed concern that such narratives could fuel domestic opposition to continued military aid to Ukraine.
For Ukraine, the video risks reinforcing perceptions of its forces as undisciplined or provocative, despite Ukraine’s long-standing cooperation with NATO in training and logistics. The claim that a Ukrainian soldier was involved in a fatal shooting during a NATO drill plays directly into Kremlin propaganda, which has repeatedly accused Ukraine of escalating tensions in the region. TVP World noted that Ukrainian officials have not commented publicly on the video, likely to avoid amplifying the narrative, but internal sources cited by TVP World described the incident as “a textbook example of hybrid warfare.”
At the regional level, the video threatens to erode trust in Latvian authorities and NATO transparency. If left unchallenged, such disinformation could discourage public support for defense spending and military cooperation. TVP World reported that Latvian polling data from early August 2026 showed a 7% drop in public confidence in NATO exercises following the video’s release, a shift analysts attribute to the coordinated nature of the campaign.
—
How the video spread: platforms, timing, and amplification vectors
The video’s rapid spread was enabled by a multi-platform amplification strategy designed to exploit algorithmic vulnerabilities and preexisting distrust. According to TVP World, the initial upload occurred on an anonymous Telegram channel, a platform known for hosting unverified and often inflammatory content. Within hours, the video was cross-posted to X, where it was amplified by accounts with bot-like behavior patterns—rapid posting, repetitive hashtags, and engagement with low-credibility sources.
TVP World reported that the video was also uploaded to uncensored video platforms such as Rumble and Odysee, where it remained accessible for over 48 hours before being flagged. These platforms, which have looser content moderation policies, served as secondary reservoirs for the video, allowing it to be re-uploaded and re-shared even after initial removals on mainstream platforms.
The amplification vectors included coordinated inauthentic behavior: accounts with similar posting patterns, rapid reposting, and engagement with known disinformation networks. TVP World cited data from the Atlantic Council’s Digital Forensic Research Lab (DFRLab), which found that 68% of the initial shares originated from accounts that had previously amplified Russian state media content. The DFRLab also noted that the hashtag #NATOCrimes trended in Lithuania, Latvia, and Estonia within 12 hours of the video’s release, despite having no factual basis.
Television and online outlets in Russia and Belarus further legitimized the claim by broadcasting segments that repeated the video’s narrative without independent verification. TVP World highlighted that one Belarusian state TV channel aired a 90-second segment featuring the video under the headline “NATO’s Secret War in the Baltics,” which was then clipped and shared across social media.
—
Red flags checklist: spotting military disinformation in real time
- No official confirmation: If a military-related video lacks statements from relevant defense ministries, NATO spokespeople, or verified journalists on the scene, treat it as unverified.
- Inconsistent uniforms or insignia: Check insignia shape, color, and placement against official NATO or national military standards. Modified or commercial patches are red flags.
- Audio-visual sync issues: Mismatched lip movements, delayed audio, or background noise that doesn’t align with the scene suggest manipulation.
- Lack of identifiable landmarks: Military drills in NATO countries are typically conducted in controlled areas with known geography. Absence of landmarks or recognizable terrain is suspicious.
- Rapid amplification by fringe accounts: If the video is shared first by anonymous Telegram channels, bot-like X accounts, or state-aligned media, it is likely part of a coordinated campaign.
- Emotional or accusatory language in captions: Headlines that use words like “scandal,” “secret,” or “crime” without context are designed to provoke outrage rather than inform.
- No chain of custody: If the original source is anonymous or the video lacks metadata (timestamps, geolocation), it cannot be independently verified.
- Inconsistent timeline with known events: Cross-check the claimed date and location against official exercise schedules and public statements.
—
Institutional response: Latvia’s Defense Ministry and allied reactions
Latvia’s Defense Ministry acted swiftly to counter the disinformation, issuing a public statement within 48 hours of the video’s release. According to TVP World, the ministry emphasized that the referenced NATO drill had not yet begun and that no Ukrainian troops were participating at the time the video was allegedly filmed. The ministry also directed the public to its official website and social media channels for verified information.
TVP World reported that the Latvian State Security Service (SAB) launched an investigation into the video’s origins, focusing on potential foreign interference. The SAB stated that preliminary analysis indicated the video was edited using consumer-grade software and that the audio track contained elements from unrelated online content. The SAB also noted that the IP address used to upload the video was associated with a known VPN service, complicating attribution.
At the NATO level, officials declined to comment publicly on the incident, citing ongoing investigations. However, TVP World cited anonymous diplomatic sources who stated that the alliance’s StratCom (Strategic Communications) unit was monitoring the video’s spread and coordinating with member states to issue counter-narratives. The sources emphasized that NATO’s public messaging remains focused on deterrence and transparency, but acknowledged that disinformation campaigns are now a permanent feature of the security landscape.
TVP World also noted that Lithuania and Estonia issued similar denials regarding the video’s claims, reinforcing regional solidarity. In a joint statement, the three Baltic states called the video “a deliberate attempt to undermine collective defense” and urged media literacy among the public.
—
Original analysis: what the pattern suggests about hybrid warfare tactics
Taken together, the emergence, spread, and amplification of this video reflect a mature hybrid warfare playbook that has evolved significantly since the 2014 annexation of Crimea. The use of synthetic media to fabricate a high-stakes military incident is not merely opportunistic—it is calibrated to exploit preexisting fissures in public trust, particularly in countries hosting NATO exercises or supporting Ukraine. The video’s rapid amplification across multiple platforms, including fringe and state-aligned outlets, suggests a level of coordination that exceeds typical organic virality.
What is most notable is the timing: the video surfaced just months before NATO’s 2026 Baltic drills, a period when allied cohesion is under intense scrutiny. By fabricating an incident involving Ukrainian troops, the campaign seeks to delegitimize Ukraine’s role in NATO partnerships and to amplify narratives of Western overreach. The fact that the video’s inconsistencies were so glaring—mismatched uniforms, incorrect insignia, and audio from unrelated sources—indicates that the primary audience was not fact-checkers or journalists, but rather the broader public, particularly in Eastern Europe, where skepticism toward NATO is already high.
This pattern also reveals the increasing role of generative AI in enabling low-cost, high-impact disinformation. While the video itself appears to be a crude composite, the use of AI-generated audio or video overlays cannot be ruled out in future iterations. The barrier to entry for creating such content is falling, and adversaries are likely to experiment with more sophisticated fabrications in the lead-up to major military exercises.
Finally, the institutional response—rapid rebuttals from Latvian authorities, cross-border solidarity among the Baltics, and NATO’s behind-the-scenes coordination—demonstrates that democracies are developing faster detection and response mechanisms. However, the lag between viral spread and official debunking remains a vulnerability. As synthetic media becomes more realistic, the window for effective counter-messaging will shrink, underscoring the need for preemptive media literacy campaigns and platform accountability.
—
What to do: verifying military-related content before sharing
When encountering military-related videos or images, follow these steps to verify before amplifying:
- Check official sources first: Look for statements from defense ministries, NATO press offices, or verified journalists embedded with units. If none exist, do not share.
- Reverse-image search: Use tools like Google Lens or TinEye to check if the video or key frames have appeared in other contexts. Pay attention to metadata and EXIF data, if available.
- Cross-reference timelines: Compare the claimed date and location of the event with official exercise schedules, weather reports, and satellite imagery (e.g., via Google Earth or Sentinel Hub).
- Analyze visual consistency: Compare uniforms, insignia, and equipment against official military manuals or publicly available training footage. Look for anomalies in lighting, shadows, or reflections.
- Listen for audio clues: Use audio fingerprinting tools or compare speech patterns to known public speeches or interviews. Inconsistent accents or language use can indicate manipulation.
- Assess the source network: Check who is sharing the content. If it originates from anonymous channels, bot networks, or state-aligned media, treat it as unverified until corroborated by independent outlets.
- Wait for verification: Do not share content solely because it is trending or aligns with your prior beliefs. Pause and verify using the above steps.
In an era where synthetic media can be generated in minutes, the burden of verification has shifted from institutions to individuals. Sharing unverified content, even with caveats, can amplify disinformation and erode public trust in critical institutions.
—
FAQ
Can AI-generated audio-visuals be ruled out in this case?
Based on the reporting from TVP World, there is no evidence that AI-generated audio or video was used in this specific video. The inconsistencies—such as mismatched uniforms, incorrect insignia, and audio from unrelated sources—suggest a crude composite edited with consumer-grade software. However, the rapid advancement of generative AI means that future disinformation campaigns are likely to incorporate AI-generated elements, making verification even more challenging.
How do we know this isn’t staged?
TVP World reported that Latvia’s Defense Ministry confirmed no such incident occurred and that the referenced NATO drill had not yet begun at the time the video was filmed. Additionally, the video lacks identifiable landmarks, emergency response personnel, or consistent audio-visual synchronization, all of which would be expected in a real military incident. Independent analysts cited by TVP World also noted that the rifle and uniforms do not match NATO or Ukrainian military standards.
Who benefits from this narrative?
The primary beneficiaries are actors seeking to undermine NATO cohesion, delegitimize Ukraine’s role in regional security, and exploit existing skepticism toward Western military alliances. TVP World reported that the video was amplified by accounts with known ties to pro-Kremlin influence networks and state-aligned media in Russia and Belarus. The narrative aligns with long-standing Kremlin propaganda themes about NATO aggression and Ukrainian unreliability.
What platforms were most responsible for spreading the video?
According to TVP World, the video first appeared on an anonymous Telegram channel before being rapidly amplified on X (formerly Twitter) by bot-like accounts. It was also uploaded to uncensored video platforms such as Rumble and Odysee, where it remained accessible for over 48 hours. State-aligned television outlets in Russia and Belarus further legitimized the claim by broadcasting segments repeating the video’s narrative.
What should NATO and partner countries do to prevent similar incidents?
NATO and partner countries should invest in preemptive media literacy campaigns, particularly in Eastern Europe, to educate the public on recognizing disinformation tactics. They should also enhance real-time monitoring of synthetic media, coordinate rapid rebuttal mechanisms, and pressure platforms to enforce stricter content moderation policies for military-related content. TVP World reported that NATO’s StratCom unit is already monitoring such campaigns, but the lag between viral spread and official debunking remains a vulnerability.
—