Disinformation campaigns are no longer built around a single false claim or suspicious account. Hundreds of profiles can push the same message simultaneously, creating the illusion of widespread public support. But how can journalists tell the difference between a genuine political movement and a coordinated influence operation? Romanian investigative newsroom Context.ro has built its own software to uncover such networks. During Moldova’s 2025 elections – a crucial vote that pitted closer ties with Europe against Russian influence – its journalists identified a massive pro-Moscow propaganda drive. Emma and Lise speak to investigative journalist Attila Biro, co-founder of Context.ro. He explains how the outlet looked beyond individual posts to map the wider infrastructure – from TikTok and Telegram to an anonymously distributed newspaper and crypto payments. Biro also discusses how journalists distinguish content that performs well organically from popularity that has been artificially manufactured – and why that matters more than ever: “We need to stop seeing this simply as disinformation and start treating it as a matter of defence. Our digital space is under attack, and we need to defend it.”