Small Clues – Sovereign Media – Africa and Iran

The aligned media network: how Iran, Russia, and China coordinate influence through “independent” outlets and use anti-colonial messaging to promote extreme content

Executive Summary

A formal charter between state broadcasters in Tehran, Moscow, and Beijing has produced operational media infrastructure spanning five continents, staffed by recycled state-media personnel, and funded through layered financial vehicles. The architecture reveals not a conspiracy theory but a documented, traceable system: a leaked charter headquartered in Tehran that grants diplomatic-style immunities to member outlets; an Iranian strategy memo explicitly describing “psychological operations”; a financial invoice documenting systematic payments to Western contributors; and evidence of financial flows obscured through donor-advised funds, shell nonprofits, and cash payments via diplomats. Technical infrastructure connects ostensibly Western outlets to Iranian government servers, while personnel move between formally independent platforms, carrying institutional knowledge and relationships across the network.

The network’s most recent evolution, the Sovereign Media Collective, launched from Nairobi in June 2025, represents a deliberate response to the deplatforming of earlier vehicles. ¹ Its editor ran PressTV’s London bureau for seven years before founding African Stream, ¹ which the U.S. State Department exposed as secretly managed by RT. ² When African Stream was shut down, ³ the same personnel resurfaced ⁴ two days later under a new banner, ¹ hosted on Dutch servers, registered through a Kenyan web company, and announced through Progressive International’s website ¹ with a founding statement defending Iran’s state broadcaster. ⁵ Yet the network’s reach extends far beyond Nairobi. PressTV maintains continuous operations in London despite its 2012 broadcast licence revocation. The Sovereign Media Collective’s deployment of a field journalist at the UK Ministry of Defence in April 2026, where protesters stormed the building, represents a significant escalation: a state-aligned media collective staffed by a former PressTV bureau chief, deploying a PressTV-profiled operative at a sensitive military installation to produce viral content framing British armed police as aggressors against journalists. This incident marks the moment the network moved from information operations to real-world deployment on British soil.

Part I — The Architecture

The charter: a formal treaty between state broadcasters

The most significant document in this network is the Charter of the Aligned Media Outlets and Organizations Union, a formal agreement headquartered in Tehran. Its Executive Council comprises five founding members: IRIB (Islamic Republic of Iran Broadcasting), RT (Russia), Al-Mayadeen (Lebanon), Al-Iraqiya (Iraq), and CCTV (China). Iran holds two seats. The charter’s official languages, English, Russian, and Persian, with Persian designated as authoritative, reveal Tehran’s primacy in the arrangement. Members commit to “aligning and reinforcing common positions vis-à-vis momentous international developments,” receive diplomatic-style immunities, and pay $40,000 annually in membership fees.

This charter builds on existing infrastructure. The Islamic Radio and Television Union (IRTVU), established in 2007 ⁶ and run by the IRGC-Quds Force, already coordinates ⁷ 210+ media affiliates across 35 countries. ⁸ The U.S. Treasury designated IRTVU as a Specially Designated National ⁹ in October 2020. ⁶ The DOJ seized 33 IRTVU-affiliated websites in June 2021. ⁷ But the charter represents something qualitatively different: a formal, treaty-like instrument binding not just Iranian proxy media but Russian and Chinese state broadcasters into a unified structure with shared governance and mutual obligations.

The three-state model: who brings what

Each founding member brings distinct capabilities to the aligned network. RT provides production quality and Western media literacy. CCTV/CGTN offers financial depth and Asian-Pacific reach. Al-Mayadeen, founded in 2012 ¹⁰ by Ghassan bin Jiddo (former Al Jazeera bureau chief), ¹¹ described by Israel’s security cabinet as “in practice, the mouthpiece of Hezbollah,” ^12,13 and reportedly a joint venture between Iranian money and Rami Makhlouf (Assad’s cousin) ¹¹, provides Arabic-language coverage and Levantine operational presence. Al-Iraqiya extends reach into Iraq’s Shia media ecosystem. And IRIB/PressTV provides the institutional backbone in Tehran, including the infrastructure through which the charter operates.

The network’s Chinese dimension operates primarily through Neville Roy Singham, a 72-year-old American Marxist who sold his IT consulting firm ThoughtWorks to Apax Partners in 2017 for $785 million ¹⁴ (he owned 97% of common stock) and relocated to Shanghai, ¹⁴ where he shares office space with Maku Group, a media company promoting CCP messaging internationally. ^15,16 A July 2023 New York Times investigation documented that Singham “works closely with the Chinese government media machine and is financing its propaganda worldwide,” ¹⁷ tracking hundreds of millions of dollars to groups that “mix progressive advocacy with Chinese government talking points.” ¹⁸

Singham’s financial architecture routes money through private LLCs → donor-advised funds (notably Goldman Sachs Philanthropy Fund) → his own nonprofits → downstream organizations. The key pass-through entities, Justice and Education Fund ($15.255 million from Goldman Sachs in 2019 alone), United Community Fund, and People Support Foundation ¹⁹, use addresses at UPS Store mailboxes in Illinois, Wisconsin, and New York.

The downstream network is extensive. The People’s Forum (Manhattan) received over $20 million from 2017–2022. ^20,21 BreakThrough News, funded through the Justice and Education Fund, operates from The People’s Forum’s building ²² and staffs nearly all on-air positions with veterans of Kremlin-backed outlets: ^23,24 former Radio Sputnik host Eugene Puryear, former RT “In the Now” contributor Rania Khalek, and multiple former RT America journalists. ²⁵ Tricontinental Institute for Social Research, ²⁴ chaired by Singham on the advisory board ¹⁵ and led by Vijay Prashad ²⁶ (who also holds a fellowship at China’s Renmin University), ²⁷ received $700,000 from United Community Fund in 2019 ^28,19 and holds an endowment exceeding $14 million. ^29,24 Code Pink, co-founded by Singham’s wife Jodie Evans, ²³ shifted from criticizing China’s human rights record before 2017 to launching a “China Is Not Our Enemy” campaign after the marriage, ^30,31 with Evans describing Uyghurs as “terrorists.” ³² Chinese state media retweeted Singham network organizations at least 122 times since February 2020. ^33,23

The InfoEpi Lab (March 25, 2026) confirmed that the Sovereign Media Collective “overlaps with the Singham Network,” documenting that journalists within SMC member outlets have “prior employment or affiliation with state media organizations including RT, PressTV, TeleSUR, and CGTN.” ¹ This overlap is structural: Qiao Collective, an SMC coalition partner, ³⁴ co-sponsored events with The People’s Forum and Code Pink, ^32,17 and is listed as a member of Progressive International alongside Sovereign Media. The UC Irvine report found Qiao’s “funding and background is not transparent,” with the collective never stating who its members are. ³⁵ Congressional investigators described it as providing “organizational legitimacy as a United States-based organization defending China from the U.S.” ³⁶

The strategy memo: building media that “appears independent”

A companion document, an Iranian media strategy memo in Farsi with English translation, provides the operational blueprint. It proposes creating an English-language analytical news platform and evaluates two scenarios. Scenario 1, the recommended approach, calls for an independent platform based outside Iran, with Lebanon/Beirut as the preferred location. Scenario 2 envisions an Iran-based operation. The memo explicitly discusses avoiding “source bias” by creating media that “appears independent”, and describes its purpose as including “psychological operations.”

The proposed editorial team comprises Sharmine Narwani (Iranian-Canadian journalist, Columbia MIA, former Senior Associate at Oxford’s St. Antony’s College), ³⁷ Hala Jaber (Lebanese-British journalist, former Sunday Times writer, author of Hezbollah: Born With a Vengeance), ³⁸ Ilya Mughnair, and Dr. Amal Saad (Lebanese political scientist, University of Birmingham PhD, author of the definitive academic study of Hezbollah, described by Noam Chomsky as “the leading Lebanese academic scholar of Hezbollah”). ³⁹ The memo notes that RT Russia has been consulted and is interested in broadcasting content, confirming cross-state coordination at the planning stage. The annual budget: $514,000.

The memo’s “Scenario 1” appears to have been implemented. In September 2021, Narwani launched The Cradle (thecradle.co), an English-language analytical platform based in Beirut covering “West Asian geopolitics from within the region.” ⁴⁰ It publishes in English, Arabic, and Turkish. ^40,41 It uses the term “West Asia”, standard Iranian state terminology. Journalist Babak Taghvaee has alleged that Narwani receives $140,000–$250,000 annually from the Iranian regime, paid “mostly in cash by Iranian diplomats in Beirut.” ⁴² When the 2022 Black Reward hack of PressTV released approximately 17,000 documents, Narwani acknowledged that documents bearing her “name, passport photo, and signature” were in the cache. ⁴³ The Cradle claims to be “entirely independent and relies on donations.” ⁴⁰

The invoice: documenting payments to Western contributors

A PressTV Live Shots Invoice covering January–February 2019 documents financial payments to U.S.-based contributors for live broadcasts, totaling approximately $39,000 per month. The named contributors form a roster that appears across RT, Sputnik, and PressTV simultaneously:

• Scott Rickard: self-described “former American intelligence linguist,” ^44,45 prolific PressTV/RT/Sputnik contributor. The FBI visited his Florida home in July 2019 regarding attendance at Iran’s New Horizon Conference, threatening prison if he attended again. ⁴⁶
• F. Michael Maloof: former senior security policy analyst in the Office of the Secretary of Defense (~30 years of federal service), ⁴⁷ listed as an official RT contributor, ⁴⁸ also visited by the FBI over New Horizon attendance.
• George Szamuely: co-founder of “TheGaggle” with RT host Peter Lavelle, ⁴⁹ confirmed appearances on both PressTV’s Spotlight ⁵⁰ and RT.
• Alexander Azadgan: described by PressTV as “senior geopolitical analyst from Tehran,” self-identifies as contributor to PressTV, CCTV/CGTN America, Radio Sputnik (English, Persian, and Russian desks), Fars News, Tasnim News, and IRIB, spanning Iranian, Russian, and Chinese state media simultaneously. Also listed on Russian Katehon think tank and Geopolitika.ru (Alexander Dugin’s network).
• Dan Kovalik: University of Pittsburgh law professor, ⁵¹ official RT contributor, PressTV regular, author of The Plot to Scapegoat Russia, ⁵¹ Russian citizen supporter.
• David Swanson: director of WorldBeyondWar.org, appeared on RT’s CrossTalk.
• Bruce Gagnon: coordinator of Global Network Against Weapons & Nuclear Power in Space, ⁵² regular PressTV and RT contributor.
• Lawrence Freeman: former AFRICOM civilian advisor, ⁵³ regular PressTV Africa Today contributor, published by Xinhua (Chinese state news), affiliated with the LaRouche movement.

The invoice reveals a systematic payment structure maintaining a standing roster of Western-credentialed analysts available across all three states’ media ecosystems. The U.S. Treasury’s September 2023 OFAC designation of PressTV explicitly stated it “had been used by Iranian intelligence services to recruit sensitive assets, including U.S. persons” ⁵⁴, a finding underscored by the Monica Witt case, where PressTV presenter Marzieh Hashemi played an early-stage role in recruiting a U.S. Air Force counterintelligence specialist ⁵⁵ who defected to Iran. ⁵⁴

Part II — The Operational Network

From African Stream to Sovereign Media: the Nairobi pipeline

The operational timeline in Nairobi reveals a deliberate succession plan:

Date	Event
June 19, 2025	Kenya Website Experts migrates to hosting.com
June 20, 2025	Sovereign Media launches (announced on Progressive International’s website)
June 22, 2025	African Stream announces closure
July 1, 2025	African Stream publishes final video
October 2025	Sovereign Media begins formal operations

African Stream was founded in 2022 by Ahmed Kaballo, a British-Sudanese journalist ^3,56 whose career trajectory traces directly through state media: approximately six to seven years at PressTV’s London bureau (2016–2022), plus work as a political analyst for RT. ² His father, Dr. Sidgi Kaballo, is a member of the central committee of the Sudanese Communist Party. ⁵⁷

African Stream reached 30–40 million people monthly across platforms before Secretary of State Blinken accused it in September 2024 of being “secretly run by RT.” ⁵⁸ YouTube, Meta, and TikTok banned the outlet within days. The Stanford Internet Observatory confirmed the operation exhibited “characteristics consistent with past covert Russian influence operations” ^3,2 and documented that Kaballo plus at least five reporters had “extensive experience working for state media outlets” ⁵⁹ including RT, PressTV, CGTN, and TeleSUR. ^2,1

The two-day gap between Sovereign Media’s launch and African Stream’s closure announcement indicates the transition was planned, not reactive. ¹ Ahmed Kaballo transitioned directly from CEO of African Stream to Editor of Sovereign Media ¹, a fact confirmed across multiple outlets including Pacifica Radio, Black Agenda Report, and Peoples Dispatch, all identifying him as “Sovereign Media Editor Ahmed Kaballo” in subsequent coverage. ^60,61

Sovereign Media’s founding statement, published on Progressive International’s website, condemned Israel’s bombing of IRIB headquarters in Tehran ^5,62, making its first public act an explicit defense of Iran’s state broadcaster. ⁵ Its coalition partners, Qiao Collective, Black Agenda Report, Kawsachun News, Orinoco Tribune, Venezuelanalysis, Naam, and Vox Ummah ⁶³, span Chinese-diaspora advocacy, African-American radical media, Latin American left-aligned outlets, and Muslim-focused platforms, ¹ mirroring the geographic and demographic targeting described in the strategy memo.

Technical infrastructure and the Kenya connection

Sovereign Media’s technical architecture reveals careful operational security. The site is hosted on IP 178.162.235.197 (Leaseweb, Netherlands), ⁶⁴ with nameservers at rs101/rs102.rcnoc.com, sharing server space with 815 other Kenyan domains via Kenya Website Experts (KWE). KWE, registered as CPR/2012/66973 at 4th Floor, International House, Mama Ngina Street, Nairobi, ^65,66 is Kenya’s largest domain registrar with 50,000+ domains and KeNIC accreditation. ^67,68 Run by Peter Kimani Irungu (^69,70), the company transferred to KWE Holding Limited as recorded in Kenya Gazette Vol. CXXVII No. 20 (January 31, 2025), with legal representation by Vruti Shah at Bowmans (Coulson Harney LLP), one of Kenya’s largest corporate law firms. ⁷¹ KWE was acquired by hosting.com on June 19, 2025 ^72,73, one day before Sovereign Media’s launch.

The SSL certificate history contains an anomaly: a November 2025 certificate covering sovereignmedia.online.saifrealestate.ug (a Ugandan real estate company) suggests shared hosting infrastructure or misconfigured wildcard certificates connecting the Nairobi and Kampala operations. Sovereign Media uses Google Workspace for email, with the first SSL certificate issued September 29, 2025, via GoDaddy.

KWE itself appears to be a legitimate commercial hosting provider rather than a network participant, its scale (50,000+ domains across 30+ countries), KeNIC accreditation, ⁶⁷ and subsequent acquisition by hosting.com ⁷² all suggest standard commercial operations. The choice of a large Kenyan hosting provider for a Nairobi-based outlet with Dutch server infrastructure represents operational compartmentalization rather than ideological alignment.

The amplification layer

TheAltWorld: Iranian state infrastructure behind a Western facade

TheAltWorld (thealtworld.com), registered on February 17, 2019, exemplifies the charter’s operational model. While claiming to be “completely independent, with no financial backing from governments,” ⁷⁴ the site’s technical infrastructure tells a different story. Its DNS resolution runs through ns1–4.irandns.com, Iranian DNS infrastructure registered through CSL Computer Service Langenbach / joker.com, a German registrar ^75,76 whose traffic is disproportionately from Iran, the UK, and Turkey. The same nameservers (directi1/directi2.irandns.com) serve tvvaresh.com, an Iranian broadcaster. ⁷⁷ The infrastructure connects to iranserver.com / GreenWeb, one of Iran’s largest hosting providers with 200,000+ customers, headquartered at the Persian Gulf Trade Center in Mashhad. ⁷⁷

The site directly embeds PressTV video content from preview.presstv.ir servers, a technical integration that goes beyond mere editorial alignment. Its original WHOIS registration listed Evert Rauws / Greenhost (an Amsterdam-based ethical hosting provider focused on internet freedom) as registrant, with hosting on 5.9.190.65 (Hetzner, Germany).

TheAltWorld’s contributor roster reads like a directory of the charter network’s Western-facing assets. Dr. Mohammad Marandi, professor at the University of Tehran, son of Supreme Leader Khamenei’s personal physician, and adviser to Iran’s nuclear negotiation team ⁷⁸, chairs discussions and features prominently. Iran International describes him as a “mouthpiece” of the Iranian government. ⁷⁸ Alastair Crooke, a former MI6 officer of nearly 30 years who now runs the Beirut-based Conflicts Forum, ⁷⁹ is the site’s most prolific contributor and appears regularly on PressTV. ⁸⁰ Pepe Escobar, a founding member of the International Russophile Movement, ⁸¹ contributes to TheAltWorld, ⁸² The Cradle, RT, PressTV, Sputnik, and Strategic Culture Foundation simultaneously. ⁸¹ Andrew Korybko, a Moscow-based American ⁸³ with a PhD from MGIMO (Russia’s diplomatic academy), was identified by EU vs Disinfo as connected to Russian state structures and a frequent contributor to Kremlin disinformation outlets. ⁸⁴

Other listed contributors include Scott Ritter, Vanessa Beeley, Eva Bartlett, Finian Cunningham, Philip Giraldi, and Sharmine Narwani, nearly all of whom hold documented connections to RT, PressTV, or both.

By contrast, TheAltWorld’s infrastructure is explicitly Iranian: DNS through irandns.com (registered via the same German registrar, joker.com, whose traffic is disproportionately Iranian), hosting on Hetzner (Germany), and direct content embedding from PressTV’s preview servers. The infrastructure chain runs: German registrar → Iranian DNS → German hosting → Iranian content servers, a multi-jurisdictional architecture designed to prevent any single government from disrupting operations.

Grayzone and MintPress: the amplification network

The Grayzone, founded by Max Blumenthal within a month of attending RT’s 10th anniversary party in Moscow in December 2015 (where Putin was present), ⁸⁵ serves as a primary amplification node. Its personnel overlap with state media is near-total: managing editor Wyatt Reed received approximately $5,500 from PressTV ⁸⁶ (documented in the Black Reward hack, reported by the Washington Post in June 2024) ⁸⁷ and previously worked for Sputnik. ^86,88 Blumenthal’s wife Anya Parampil is a former RT America anchor. ^89,86 Contributors Alex Rubinstein, Kit Klarenberg, Mohamed Elmaazi, Dan Cohen, Rania Khalek, and Jeremy Loffredo all have RT or Sputnik backgrounds. ⁸⁶ Aaron Maté served as a briefer for Russia’s Permanent Mission to the United Nations, with Russian UN representative Dmitry Polyanskiy personally thanking both Maté and Blumenthal for their testimonies. ^85,86 The Australian Strategic Policy Institute found Chinese state media cited The Grayzone ⁸⁶ at least 313 times between December 2019 and February 2021. ⁸⁶

MintPress News, founded by Mnar Muhawesh in 2012, received $10,000 in grants from the Association for Investment in Popular Action Committees. ⁹⁰ Its staff writer Alexander Rubinstein previously reported for RT and Sputnik. MintPress was listed as a “partner” of PeaceData, a Russian fake news site operated by the Internet Research Agency (Russia’s troll farm), and published fake authors attributed to the GRU. ⁹⁰ It employed Ibrahim Abul-Essad as a graphic designer and field photographer, ⁹¹ placing him within the network before his deployment with Sovereign Media.

Leaked PressTV call records obtained by the Network Contagion Research Institute through the Black Reward hack revealed over 200 outgoing calls from PressTV to leaders of the Party for Socialism and Liberation and ANSWER Coalition over 29 months ⁹², 69 calls to ANSWER national coordinator Brian Becker and 46 calls to PSL founder Gloria La Riva. ⁹² These organizations maintain overlapping roles with Singham network entities including Code Pink and The People’s Forum. ^92,23

The financial nexus: awards, associations, and donor-advised funds

A California-based 501(c)(3) called the Association for Investment in Popular Action Committees, deliberately using the acronym AIPAC to mirror the pro-Israel lobby ⁹³, functions as a financial nexus linking multiple network nodes. The Association administers the Serena Shim Award, named after a deceased PressTV journalist, distributing cash prizes ^94,95 of $2,500–$20,000 to aligned media figures. ^96,94 Total prizes exceed $250,000. ⁹⁴ Its treasurer, Paul Larudee, ⁹⁷ frequently appears on PressTV and served as an international election observer at Assad’s 2014 sham election. ⁹⁶ Between 2007 and 2017, the Association received over $1.8 million from undisclosed donors. ^96,98

Recipients of the Serena Shim Award include Max Blumenthal (The Grayzone, ⁹⁹ $20,000), ⁸⁹ MintPress News, Black Agenda Report, Venezuelanalysis, ⁹⁶ Gareth Porter, Aaron Maté, Rania Khalek, ⁹⁹ Jimmy Dore, ⁹³ Scott Ritter, Eva Bartlett, Julian Assange, Sharmine Narwani, and The Grayzone as an organization. ⁹⁴ The overlap with Sovereign Media’s coalition is significant: Black Agenda Report and Venezuelanalysis are both Serena Shim Award recipients and founding SMC members. The Association also directed $87,000 to MintPress News (2017–2021) and $75,000 to MintPress-affiliated “Behind the Headlines.” ¹⁰⁰

In September 2019, Bellingcat documented that Award winners and Association members attended a regime-sponsored conference in Damascus, personally addressed by Bashar al-Assad, ^96,96 during a period when Syria was generally not issuing travel visas to U.S. citizens. ^96,97 Attendees included Blumenthal, Khalek, Baraka, and Larudee. ^96,97

This financial architecture, combined with the Singham network’s routing of CCP funds through donor-advised funds and shell nonprofits, reveals a sophisticated system for obscuring the relationship between state funding and editorial output. Money flows are deliberately fragmented across multiple entities, and individual awards are small enough to plausibly appear as independent grants rather than systematic compensation from state actors.

Part III — The UK Dimension

PressTV’s continuing London operations

Despite Ofcom revoking PressTV’s UK broadcast licence in January 2012, after the broadcaster aired a coerced confession from journalist Maziar Bahari ¹⁰¹ and investigators determined editorial control resided in Tehran ^102,101, PressTV has maintained continuous operations in London through corporate structures and social media. ⁵⁵ Two London companies, Rad Media World LTD and London Broadcasting Partners LTD, received over £27,000 in UK government COVID furlough grants between June 2020 and March 2021, channeling these funds to pay PressTV contributors and presenters. ¹⁰³ A leaked contract showed a £150,000 production deal between an individual and PressTV through these entities. ¹⁰³

PressTV now hides its branding behind unlabeled show channels. Programs like Palestine Declassified (hosted by former Labour MP Chris Williamson and former Bristol University professor David Miller) operate without PressTV logos to evade platform state-media labels. ^104,105 The Telegraph reported in 2026 that PressTV’s London office has assumed “a more significant role in recruitment efforts” as the broadcaster has been sanctioned elsewhere. ^55,54 Terrorism specialist Jonathan Hackett described PressTV as providing “commercial cover” for Iranian intelligence (Vaja) officers to “spot, assess, recruit, handle, and task initially unwitting targets including American and British government officials.” ⁵⁴

The Ibrahim Abul-Essad case: from cultivation to deployment

Ibrahim Abul-Essad represents the newest link in this chain. ¹⁰⁶ A British Palestinian with a BA from SOAS and an MA from Leiden University ¹⁰⁷ (thesis: assessing “democidal acts of violence” by the IDF during the Great March of Return), he operates simultaneously across multiple nodes of the network. He works as a ¹⁰⁸ videographer for The Canary (UK left-wing outlet), a graphic designer and field photographer for MintPress News, ⁹¹ and a contributing writer for The New Arab. He has appeared on PressTV (November 2022, discussing the NUS anti-Semitism investigation; profiled in January 2026 in “The new trailblazer” episode), TRT World, and TheAltWorld (featured in a segment on Israeli lobby targeting of MintPress staff). PimEyes facial recognition identified his image appearing on presstv.ir, thealtworld.com, thejc.com, and nationaldailypress.com.

PressTV’s January 2026 profile described him as “a videographer and activist” and “a familiar presence in the UK’s activism scene.” ¹⁰⁶ He was arrested on January 24, 2026, at Wormwood Scrubs while documenting a Palestine Action–linked protest for The Canary, one of 86 arrests that night, with officers reportedly stating “arrest now, find evidence later.” ^109,110

His trajectory illustrates the network’s personnel development model: academic credentialing at respected Western institutions (SOAS, Leiden), profiling and cultivation through PressTV, deployment across multiple “independent” outlets (The Canary, MintPress, The New Arab, TheAltWorld), and operational assignment as a state-aligned media collective’s field operative at a sensitive military installation.

UK security context

MI5 Director General Ken McCallum revealed in October 2024 that since January 2022, MI5 has responded to 20 Iran-backed plots presenting “potentially lethal threats to British citizens and UK residents.” ¹¹¹ Iranian state actors, he stated, “make extensive use of criminals as proxies.” ¹¹² Iran represents the largest proportion of hostile state casework handled by MI5 and police, surpassing Russia and China. ¹¹³ A man was jailed in December 2023 for conducting reconnaissance against Iran International’s London headquarters. ¹¹² Three Iranians were arrested in 2025 under the National Security Act for suspected espionage. ¹¹⁴

The Community Security Trust warned that PressTV’s Palestine Declassified program creates effective “target lists for terrorists” by highlighting Jewish charities, schools, and community organizations. ^104,54 Former Labour MP Chris Williamson’s parliamentary pass was revoked ^115,104 in February 2023 specifically due to his PressTV links. The UK’s Foreign Influence Registration Scheme now mandates registration for activities conducted at the direction of Iranian state bodies. ¹¹⁶

The MoD incident: April 10, 2026

The Sovereign Media Collective’s deployment of Ibrahim Abul-Essad at the Ministry of Defence on April 10, 2026, represents a significant escalation of the network’s operations. Protesters stormed the UK Ministry of Defence building in London, ¹¹⁷ with demonstrators attempting to “swarm Royal Navy officers walking into the building.” Abul-Essad, deployed as Sovereign Media’s “field journalist,” produced content from the scene. Sovereign Media’s Instagram posting claimed “Armed British police pointed rifles in the direction of our field journalist”, a post that garnered 18,400 likes from Sovereign Media’s 123,000-follower Instagram account. ¹¹⁸

This represents an information operation conducted on British soil by personnel with documented connections to a sanctioned foreign state broadcaster. A state-aligned media collective, staffed by a former PressTV bureau chief, deploying a PressTV-profiled field journalist at a sensitive military installation to produce viral content framing British armed police as aggressors against journalists, constitutes an operational deployment with real-world consequences for UK national security and the integrity of its media landscape.

Conclusion: A System, Not a Conspiracy

The evidence assembled here does not describe a monolithic conspiracy directed from a single command center. It describes something more resilient and more concerning: a formally chartered coordination mechanism between state broadcasters that produces operational effects through layered intermediaries. The charter provides the governance framework. The strategy memo provides the operational doctrine, explicitly including “psychological operations” and media designed to “appear independent.” The invoice documents the payment infrastructure. And the ground-level entities, Sovereign Media, TheAltWorld, The Cradle, The Grayzone, MintPress, provide the platforms through which state narratives reach Western audiences under independent bylines.

Three features distinguish this from ordinary editorial alignment. First, personnel recycling: the same individuals rotate between PressTV, RT, The Grayzone, TheAltWorld, MintPress, and Sovereign Media, carrying institutional knowledge and relationships across platforms. ^85,1 Second, financial obscurity: money flows through donor-advised funds, shell nonprofits at UPS Store addresses, ¹¹⁹ cash payments via diplomats, and awards from pro-Assad organizations, all designed to sever the visible link between state funding and editorial output. Third, operational continuity: when one vehicle is exposed and deplatformed (African Stream), the same personnel launch a successor (Sovereign Media) ¹²⁰ within 48 hours, using different hosting infrastructure and different institutional framing, while maintaining the same editorial mission ^121,1 and the same connections to Tehran, Moscow, and Beijing.

The network is not static. It adapts to enforcement action, learns from deplatforming, and exploits the gap between the speed of information operations and the pace of regulatory response. Sovereign Media’s 123,000 Instagram followers ¹¹⁸ and 936 posts within its first year of operation suggest the model works, at least until the next exposure cycle begins.

Policy Implications

The documented structure of this network presents a series of urgent policy challenges that extend across multiple regulatory and security frameworks.

Ofcom should investigate whether PressTV’s unlabeled show channels (Palestine Declassified and others) constitute evasion of state-media labelling requirements. The licence revocation was intended to remove PressTV entirely from UK broadcast platforms. The subsequent use of corporate intermediaries and unlabeled shows operated by individuals with documented PressTV connections represents an attempt to circumvent that regulatory decision. Ofcom’s regulatory authority should extend to scrutinizing the structural relationship between PressTV’s management and these successor platforms.

The Foreign Influence Registration Scheme should be tested against the documented connections between Sovereign Media personnel and IRIB/PressTV. The FIRS framework is designed to address influence operations conducted at the direction of foreign state bodies. The evidence that Sovereign Media was launched within 48 hours of African Stream’s deplatforming, by the same personnel, with founding statements defending Iran’s state broadcaster, and operated from a location (Kenya) with minimal regulatory oversight, suggests that FIRS registration requirements may apply.

The Crown Prosecution Service should consider whether the documented financial flows from PressTV to UK-based individuals via Rad Media World and London Broadcasting Partners constitute sanctions evasion. The leaked contract showing £150,000 production payments, combined with Treasury designations of PressTV, raises questions about whether current asset seizure and sanctions compliance mechanisms adequately address structured arrangements designed to evade financial freezes.

DSMA (Defence and Security Media Advisory Committee) should assess whether state-aligned media operatives at Ministry of Defence protests constitute a security risk requiring updated guidance. The April 10, 2026 incident, in which a documented member of a state-aligned media network was deployed as a field operative at a sensitive UK military installation, suggests that DSMA’s existing relationships with mainstream media outlets may be insufficient to address contemporary information operation tactics.

Platform companies should be notified that Sovereign Media represents a successor operation to a previously deplatformed entity with the same personnel and editorial mission. YouTube, Meta, and TikTok’s decision to remove African Stream followed clear evidence of covert Russian state control. The evidence that the same personnel immediately launched Sovereign Media, with the same editorial alignment to state broadcasters, suggests that deplatforming decisions require sustained follow-up and that successor entities should be evaluated under the same evidentiary standards that led to the original removal.

Sources

1. Substack: https://infoepi.substack.com/p/a-state-aligned-media-collective
2. stanford: https://cyber.fsi.stanford.edu/news/african-stream
3. Wikipedia: https://en.wikipedia.org/wiki/African_Stream
4. The Kenya Times: https://thekenyatimes.com/latest-kenya-times-news/nairobi-based-media-outlet-announces-its-closure-after-alleged-censorship-by-us/
5. Progressive International: https://progressive.international/wire/2025-06-20-their-aim-is-silence–ours-is-truth/en/
6. Wikipedia: https://en.wikipedia.org/wiki/Islamic_Radio_and_Television_Union
7. United Against Nuclear Iran: https://www.unitedagainstnucleariran.com/ideological-expansion/islamic-radio-and-television-union-irtvu
8. The Washington Institute: https://www.washingtoninstitute.org/policy-analysis/understanding-irans-vast-media-network-arab-countries
9. U.S. Treasury: https://www.treasury.gov/ofac/downloads/sdnlist.pdf
10. Al Mayadeen: https://english.almayadeen.net/aboutus
11. Wikipedia: https://en.wikipedia.org/wiki/Al_Mayadeen
12. Ynetnews: https://www.ynetnews.com/culture/article/sys3p4uqa
13. The Times of Israel: https://www.timesofisrael.com/security-cabinet-approves-order-to-shut-down-hezbollah-affiliated-al-mayadeen-news/
14. Wikipedia: https://en.wikipedia.org/wiki/Neville_Roy_Singham
15. Just The News: https://justthenews.com/world/asia/singham-uses-extensive-ccp-aligned-network-china-he-finances-global-marxist-influence
16. Fox News: https://www.foxnews.com/politics/house-hearing-raises-red-flags-former-tech-moguls-ccp-network-allegedly-funding-far-left-groups
17. China Media Project: https://chinamediaproject.org/2023/08/16/code-pink-code-red/
18. InfluenceWatch: https://www.influencewatch.org/person/neville-roy-singham/
19. Network Contagion Research Institute: https://networkcontagion.us/wp-content/uploads/SID4P-Report_May-2024.pdf
20. Ways and Means: https://waysandmeans.house.gov/2025/09/04/chairman-smith-exposes-u-s-nonprofit-as-likely-ccp-funded-propaganda-arm-operating-under-tax-exempt-status/
21. VOR News: https://www.vornews.com/news/singham-investigated-over-ccp-ties/
22. The Daily Beast: https://www.thedailybeast.com/neville-singham-funded-breakthrough-news-is-pushing-moscow-beijing-propaganda/
23. The Jerusalem Post: https://www.jpost.com/diaspora/antisemitism/article-801204
24. Yahoo!: https://www.yahoo.com/news/u-tech-mogul-bankrolls-pro-031329568.html
25. KeyWiki: https://keywiki.org/BreakThrough_News
26. Komo News: https://komonews.com/news/nation-world/house-ways-and-means-panel-holds-tuesday-hearing-on-foreign-influence-in-nonprofits-ccp-pro-hamas-jason-smith
27. Wikipedia: https://en.wikipedia.org/wiki/Vijay_Prashad
28. yourNEWS: https://yournews.com/2026/04/04/6757242/investigation-maps-extensive-china-based-network-tied-to-neville-singham-and/
29. The Gateway Pundit: https://www.thegatewaypundit.com/2023/08/code-pink-exposed-as-communist-china-shill-former/
30. U.S. Senate: https://www.cotton.senate.gov/news/press-releases/cotton-to-bondi-investigate-code-pink
31. China Media Project: https://chinamediaproject.org/author/david-bandurski/page/9/
32. United States Senate Committee on the Judiciary: https://www.judiciary.senate.gov/press/rep/releases/grassley-takes-aim-at-radical-activist-groups-foreign-ties
33. Free Beacon: https://freebeacon.com/latest-news/code-pink-used-to-criticize-china-on-human-rights-then-its-founder-married-a-propagandist-for-the-regime/
34. Qiao Collective: https://www.qiaocollective.com/
35. InfluenceWatch: https://www.influencewatch.org/organization/qiao-collective/
36. Tax Notes: https://www.taxnotes.com/research/federal/legislative-documents/congressional-tax-correspondence/jason-smith-links-nonprofit-chinese-party-demands-donor-info/7szdd
37. TheAltWorld: https://thealtworld.com/sharmine_narwani/iran-warns-of-colossal-counterattack-if-us-strikes-power-plants-ep-182
38. Goodreads: https://www.goodreads.com/book/show/491584.Hezbollah
39. Wikipedia: https://en.wikipedia.org/wiki/Amal_Saad-Ghorayeb
40. The Canary: https://www.thecanary.co/global/world-analysis/2026/01/14/the-cradle/
41. Sobh Media Festival: https://sobhfestival.com/guests/4385/sharmine-narwani-2/
42. X: https://x.com/DIL0VANALI/status/1817661677862875272
43. Substack: https://thealtworld.substack.com/p/journalists-in-the-firing-line
44. Wikispooks: https://wikispooks.com/wiki/Scott_Rickard
45. Presstv: https://www.presstv.com/Detail/2015/05/29/413339/Syria-Iraq-Middle-East-USA-ISIL
46. PressTV: https://www.presstv.com/Detail/2019/08/11/603265/US-FBI-Iran-New-Horizon-guests-harrassed-Talebzadeh
47. Secure the Grid: https://securethegrid.com/story-30/
48. GFCN: https://globalfactchecking.com/participants/michael-maloof
49. Wikipedia: https://en.wikipedia.org/wiki/Peter_Lavelle
50. PressTV: https://www.presstv.ir/Detail/2021/07/04/661535/Spotlight
51. Wikipedia: https://en.wikipedia.org/wiki/Dan_Kovalik
52. Space4peace: https://space4peace.org/bruce-gagnon/
53. Newafricadaily: https://newafricadaily.com/taxonomy/term/710
54. Jewishonliner: https://jewishonliner.org/p/uk-london-presstv-iran-regime-sanctions-intelligence-europe-us-eu-media
55. Kurdistan24: https://www.kurdistan24.net/en/story/904072/iranian-spy-network-allegedly-operates-through-london-press-tv
56. Black Agenda Report: https://www.blackagendareport.com/african-stream
57. Ceasefire Magazine: https://ceasefiremagazine.co.uk/author/ahmed-kaballo/
58. ScheerPost: https://scheerpost.com/2025/07/05/blinken-ordered-the-hit-big-tech-carried-it-out-african-stream-is-dead/
59. IntelliNews: https://www.intellinews.com/social-media-outlet-african-stream-is-russian-disinformation-operation-stanford-study-finds-346420/
60. Capitalismraceanddemocracy: https://capitalismraceanddemocracy.org/2025/12/22/proxy-war-and-civil-war-sovereign-media-editor-ahmed-kaballo-on-the-agony-of-sudan/
61. Black Agenda Report: https://www.blackagendareport.com/struggling-sovereignty-sudan-after-two-years-civil-war
62. Orinoco Tribune: https://orinocotribune.com/sovereign-media-collective-statement-their-aim-is-silence-ours-is-truth/
63. X: https://x.com/sov_media/status/1973430791884390750
64. Netify: https://www.netify.ai/resources/hosting/leaseweb
65. Whois.com: https://www.whois.com/whois/kenyawebexperts.co.ke
66. Mapcarta: https://mapcarta.com/W239056076
67. LinkedIn: https://ke.linkedin.com/company/kenya-website-experts
68. Kenyawebexperts: https://kenyawebexperts.com/index.php?rp=%2Fknowledgebase%2F15%2FDNS-Name-Servers
69. RocketReach: https://rocketreach.co/peter-kimani-email_114915517
70. Email: mailto:kimoxide@gmail.com
71. Bowmans: https://bowmanslaw.com/lawyer/vruti-shah/
72. Hosting: https://status.hosting.com/notices/3pboehjs2zzvtt07-kenya-website-experts-joining-hosting-com
73. hosting.com: https://hosting.com/en-ke/about/
74. Medium: https://thealtworld.medium.com/the-alternative-world-thealtworld-about-us-6ef53d11e821
75. Joker: https://joker.com/index.joker?t_whois=csl-gmbh.net&tool=whois&Submit=los
76. Csl: https://csl.de/
77. IP Address: https://www.ipaddress.com/website/irandns.com/
78. Wikipedia: https://en.wikipedia.org/wiki/Mohammad_Marandi
79. TheAltWorld: https://thealtworld.com/author/alastair_crooke
80. Wikipedia: https://en.wikipedia.org/wiki/Alastair_Crooke
81. Rad-patriot: https://rad-patriot.com/bio-pepe-escobar/
82. KeyWiki: https://keywiki.org/Pepe_Escobar
83. Russian International Affairs Council: https://russiancouncil.ru/en/blogs/andrew-korybko/
84. EUvsDisinfo: https://euvsdisinfo.eu/one-world-one-author-one-chain-of-command/
85. New Lines Magazine: https://newlinesmag.com/argument/public-mistrust-of-gaza-coverage-is-opening-space-for-russia-linked-media-on-the-left/
86. Wikipedia: https://en.wikipedia.org/wiki/The_Grayzone
87. Noah News: https://noah-news.com/grayzone-receives-funding-from-russian-and-iranian-government-media-outlets-documents-reveal/
88. Google Translate: https://translate.google.com/translate?client=srp&hl=es&sl=en&tl=es&u=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FThe_Grayzone
89. RationalWiki: https://rationalwiki.org/wiki/The_Grayzone
90. Wikipedia: https://en.wikipedia.org/wiki/MintPress_News
91. mintpressnews: https://www.mintpressnews.com/stop-the-hate-uk-israel-aligned-group-investigation/290585/
92. Network Contagion Research Institute: https://networkcontagion.us/wp-content/uploads/Master-PSL_ANSWER_Rodriguez-Brief.pdf
93. InfluenceWatch: https://www.influencewatch.org/non-profit/association-for-investment-in-popular-action-committees/
94. Wikipedia: https://en.wikipedia.org/wiki/Serena_Shim_Award_for_Uncompromised_Integrity_in_Journalism
95. Wikispooks: https://wikispooks.com/wiki/Serena_Shim_Award
96. bellingcat: https://www.bellingcat.com/news/2019/09/30/pro-assad-lobby-group-rewards-bloggers-on-both-the-left-and-the-right/
97. Thelevantnews: https://thelevantnews.com/en/article/pro-assad-lobby-group-rewards-bloggers-on-both-the-left-and-the-right
98. Wikipedia: https://en.wikipedia.org/wiki/Paul_Larudee
99. hyperleapsite: https://hyperleap.com/topic/Serena_Shim
100. The Jerusalem Post: https://www.jpost.com/israel-news/article-833225
101. Wikipedia: https://en.wikipedia.org/wiki/Press_TV
102. Wikipedia: https://en.wikipedia.org/wiki/PressTV
103. The Insider: https://theins.ru/en/politics/268781
104. Press TV: https://www.presstv.ir/Detail/2023/04/27/702324/UK-Press-TV-ADL
105. DFRLab: https://dfrlab.org/2025/02/06/press-tv-telegram-rumble/
106. PressTV: https://www.presstv.ir/Detail/2026/01/05/761944/The-new-trailblazer
107. ResearchGate: https://www.researchgate.net/profile/Ibrahim-Abul-Essad
108. Israelpalestinenews: https://israelpalestinenews.org/stop-the-hate-uk-the-shadowy-israel-aligned-group-targeting-mintpress-staff-anti-genocide-organizers/
109. World Socialist Web Site: https://www.wsws.org/en/articles/2026/01/26/tnbx-j26.html
110. The Canary: https://www.thecanary.co/skwawkbox/2026/01/24/wormwood-scrubs-protest-arrests/
111. TechUK: https://www.techuk.org/resource/mi5-director-general-gives-latest-threat-update.html
112. MI5: https://www.mi5.gov.uk/director-general-ken-mccallum-gives-latest-threat-update
113. British Brief: https://britbrief.co.uk/politics/diplomacy/iran-war-raises-uk-attack-risk-says-counter-terror-head.html
114. FDD: https://www.fdd.org/analysis/2025/05/05/british-police-bust-iranian-terrorist-cells-in-major-counterterrorism-operations/
115. Press TV: https://www.presstv.ir/Detail/2023/02/22/698672/UK-lawmakers-revoke-ex-MP-parliamentary-pass-over-link-to-Press-TV
116. House of Commons Library: https://commonslibrary.parliament.uk/research-briefings/cbp-10413/
117. GB News: https://www.gbnews.com/news/ministry-of-defence-protestors-storm-building-london
118. Instagram: https://www.instagram.com/sovereign_media_/
119. Business Today: https://www.businesstoday.in/latest/story/who-is-neville-roy-singham-accused-of-funding-chinese-propaganda-in-india-and-abroad-393168-2023-08-07
120. MR Online: https://mronline.org/2025/06/26/war-propaganda-state-controlled-media-and-the-end-of-african-stream/
121. noirpress: https://noirpress.org/the-shut-down-of-african-stream-too-powerful/