European External Action Service, Strategic Communication and Foresight (SG.STRAT); foreword by HR/VP Kaja Kallas (2025), European External Action Service (institutional report) — https://www.eeas.europa.eu/sites/default/files/documents/2025/EEAS-3nd-ThreatReport-March-2025-05-Digital-HD.pdf
Key takeaways
- The EEAS proposes a “FIMI Exposure Matrix” that sorts channels into four tiers by how closely they are tied to a state actor. Applied to 505 incidents from 2024 involving about 38,000 channels, it finds that overt Russian and Chinese state media are the tip of a much larger covert and non-attributed infrastructure; non-attributed channels are 76.5% of those investigated.
Seeded from the abstract and a skim, before the reading in NOTE-060. What follows is what the work says about itself.
This is the EU diplomatic service’s third annual threat report on foreign information manipulation and interference (FIMI). It introduces the Exposure Matrix as a systematic way to classify channels and attribute them to threat actors. It then applies the Matrix to the incidents the EEAS detected between November 2023 and November 2024. The report summarises the year’s trends by target country, platform and technique, and then maps the network structure of Russian and Chinese FIMI infrastructure. Case studies cover Moldova, Sub-Saharan Africa and Chinese influence-for-hire operations. The report’s stated aim is to support attribution and give a basis for costs such as exposure and sanctions.
Standing in the record
Filed from the survey of 2026-09-25 of work the anthology set aside as out of scope (tier C): 540 seconds of active reading over 3 sessions in the papers-feed tracker. It was filed Deferred, unread. NOTE-060 is the close reading of 2026-09-25, and it placed the work: Active — worth reading as the primary statement of the EEAS’s attribution taxonomy (the Exposure Matrix) and of the covert operations it names. Its figures are counts from an avowedly non-representative monitoring sample, the network method is described only in outline, and several headline numbers need the qualifications recorded here before they are cited.
When seeded, before the reading in NOTE-060, the entry gave a priority for a deeper reading: medium — The owner spent a substantial time on it (t = 540 s), and it is the primary institutional source on FIMI methodology. The skim captures the Matrix and the headline figures; the case studies are what is left unread.
What the seeding asked a deeper reading to check (NOTE-060 is that reading):
- It is an institutional source and states its own sampling limits. It is useful as the EEAS’s stated methodology and taxonomy, not as a measurement of prevalence.
- The network section’s construction (co-involvement edges, filtering thresholds) should be checked before any figure is cited.
- It links to c01 (STIX/DISARM encoding) and c11 (the Russian framing of “information war”), and to the earlier EEAS reports it cites (1st report Feb 2023, 2nd report 2024).
- The report mentions generative AI as a threat-actor tool, but I did not read what it says about it.
Access when seeded: Downloaded and read the full 43-page PDF: the table of contents, executive summary, introduction, trends chapter, Exposure Matrix chapter, the opening of the network-analysis chapter, and the conclusions. I did not read the Moldova, Africa and China case studies closely. The date is 19.03.2025 on the EEAS landing page, and the PDF’s Last-Modified header is 2025-03-19. The file name reads “3nd”, but the cover says “3rd”.