Skip to content

Security1 publisher3 min readPublished

Influence Operations Now Target Construction Schedules, Not Just Elections

Recorded Future logged three CopyCop impersonations against the US-Armenian Firebird AI data center in a 20-day window, the last of them fabricating an Iranian military case for hitting it.

The Watch · Security desk

Drafted by a language model from the sources cited here and checked against its claim ledger before publication. How we use AISend a correction

What happened

  • Recorded Future's Insikt Group assesses the Russian influence network CopyCop (Storm-1516) very likely targeted the joint US and Armenian-backed Firebird AI data center in Hrazdan, Armenia, and documented three separate CopyCop media impersonations targeting the facility between June 24 and July 13, 2026, ahead of its July 2026 opening. The impersonations fabricated an imminent earthquake risk, cast doubt on the facility's economic and infrastructure viability, and impersonated official Iranian military communications justifying treating the data center as a legitimate military target.
  • Beginning June 24, 2026, Insikt Group observed a CopyCop amplifier account on a major Western social media platform sharing a video impersonating TechCrunch, titled "Armenia AI Hub at Risk, Authorities Warn of Major Quake," which claimed a magnitude 7.4 earthquake could imminently strike Kotayk Province and threaten the Firebird facility.
  • Reach expanded substantially across the three instances, growing from limited initial engagement to over 1.6 million combined views by the third.
  • Firebird, a US and Armenia-based AI cloud and infrastructure company, is constructing the Caucasus region's first large-scale AI data center in Hrazdan, Kotayk Province, as a public-private collaborative effort with the US and Armenian governments and NVIDIA.
  • Phase One, scheduled for launch in July 2026, amounts to an approximately $500 million investment; once operational the facility will host more than 6,000 NVIDIA Blackwell GPUs delivering up to 110.6 exaflops of AI compute at 18 megawatts of power capacity.

Compiled by The WatchSomething wrong?How this is made

Why it matters

Recorded Future's Insikt Group reports that the Russian influence network CopyCop, also tracked as Storm-1516, very likely targeted the joint US and Armenian-backed Firebird AI data center in Hrazdan, Armenia, and documented three separate media impersonations aimed at the facility between June 24 and July 13, 2026, ahead of its scheduled July 2026 opening [1]. That is three fabrications inside a 20-day window against one construction site [1], which puts influence-operation monitoring on the project risk register alongside geotechnical surveys and grid interconnects.

The sequence escalated. According to Insikt Group, the first instance, beginning June 24, was a CopyCop amplifier account on a major Western social media platform sharing a video impersonating TechCrunch, headlined "Armenia AI Hub at Risk, Authorities Warn of Major Quake," which claimed a magnitude 7.4 earthquake could imminently strike Kotayk Province and threaten the facility [2]. The second cast doubt on the project's economic and infrastructure viability [1]. The third impersonated official Iranian military communications justifying treatment of the data center as a legitimate military target [1]. Reach grew from limited initial engagement to more than 1.6 million combined views by the third instance [3].

The target explains the effort. Firebird, a US and Armenia-based AI cloud and infrastructure company, is building the Caucasus region's first large-scale AI data center in Hrazdan, Kotayk Province, as a public-private effort with the US and Armenian governments and NVIDIA [4]. Phase One is roughly a $500 million investment hosting more than 6,000 NVIDIA Blackwell GPUs, up to 110.6 exaflops at 18 megawatts [5]. Phase Two takes the commitment to about $4 billion and adds more than 41,000 GPUs, which Recorded Future says would place Armenia among the top five countries globally for AI computing infrastructure [6]. That is an increment of roughly $3.5 billion, about eight times the Phase One figure [2], and a built-out fleet of more than 47,000 GPUs [3].

It is also a diplomatic pillar. The project rests on an August 2025 US-Armenia framework on semiconductors and AI [7]; US Vice President JD Vance announced Phase Two during a February 2026 visit to Yerevan [8]; and in May 2026 Secretary of State Marco Rubio, the first sitting Secretary of State in the South Caucasus since 2012, signed a Charter on Comprehensive Strategic Partnership and a critical minerals and rare earths framework [9]. Armenia has frozen participation in the Russia-led CSTO since February 2024, with Prime Minister Nikol Pashinyan calling the shift "irreversible" in December 2024, and the Kremlin has signaled that Armenia's preferential gas pricing depends on staying inside Russia's regional integration frameworks [10]. The Firebird campaign follows CopyCop's multi-month operation against Armenia's June 7, 2026 parliamentary elections, which sought to denigrate Pashinyan and the Civil Contract party; Insikt Group assesses the network redirected to the data center after his reelection [11].

Two things to watch. Recorded Future expects CopyCop to keep targeting Western investment in Armenia, citing reuse of the same amplifier network against other Armenia-linked Western projects [12], so the practical indicator is whether the same accounts surface against the critical minerals work signed in May [9]. The second is the military-target framing: an impersonated targeting justification is a different category of output from an invented earthquake, and it lands on contractors, insurers and site staff rather than on a communications team. One caution for anyone citing the report downstream: it describes the Hrazdan site as 200,000 square miles [13], a figure that does not survive contact with a map.

Loading claim ledger
Loading source directory links
Loading share composer
Loading topic controls
Loading related stories