Two Majors, One Morning: Inside the Russian Milblogger Briefing Pipeline That Frames the Air War

At 05:23 UTC on 25 June 2026, a short block of text appeared on the English-language Telegram channel Rybar. At 05:27, a near-identical version posted to DDGeopolitics, attributed as a forward "from @" — the original author unspecified. At 05:34, the Two Majors channel itself published its own report. At 05:35, the same block, again, on Rybar in English. The four messages, captured within a thirteen-minute window, are not four reports. They are one report, distributed.

The content is the daily Two Majors briefing — a recurring format in the Russian milblogger ecosystem that summarises overnight air activity, drone interceptions, and front-line claims. The 25 June edition reports that "several drones flying towards the capital were shot down during the night," that combat operations against enemy drones were conducted "in Crimea and Sevastopol," and that the morning summary continues into further theatre-specific reporting. The substantive claims are modest: drone interceptions overnight, operational tempo in occupied Crimea, and the standard forward-look. What is not modest is the distribution machinery.

How the daily moves

The chain is short and recognisable to anyone who has watched Russian-aligned information operations for the past three years. Two Majors — a channel run by a self-identified group of Russian officers, presented in the third person as a collective — publishes a daily morning and evening report. Other channels that position themselves as English-language bridges to that material — Rybar in English, DDGeopolitics, and a handful of others — then republish, sometimes attributing the original channel, sometimes stripping the attribution and reposting as a forward. The 25 June morning cycle shows the pattern running at its usual tempo: the originating post at 05:34, the republications bracketing it on either side within minutes.

For the reader, the practical effect is that by the time a Western analyst is at their desk in Brussels or Washington, the Two Majors daily has already been re-broadcast into at least three English-language feeds. Each reposting marginally flattens the original's framing, makes the source harder to trace, and creates the appearance of independent confirmation. The repetition itself becomes a form of validation: a claim that appears in three places must, the cognitive shortcut runs, be more credible than a claim in one.

This is not unique to Two Majors. The Russian milblogger ecosystem — Rybar, WarGonzo, the Fighterbomber channel that briefly went private after being named in a Russian treason case, Readovka, Two Majors itself — operates a dense network of mutual republication, attribution, and amplification. Researchers at the Institute for the Study of War and the Atlantic Council have tracked the phenomenon across the war. What the 25 June morning cycle offers is a clean, datable example of the loop in motion: one post, three feeds, thirteen minutes.

What the briefing actually claims

The factual content of the 25 June Two Majors report is consistent with what Ukrainian and Russian sources have been reporting for months: nightly long-range drone exchanges, with Ukrainian strikes aimed at Russian military and infrastructure targets and Russian strikes aimed at Ukrainian cities and energy assets. Two Majors, true to its position in the ecosystem, frames the drone traffic toward "the capital" — a phrase almost certainly referring to Moscow — as an aggression requiring defence, and frames Russian operations in Crimea and Sevastopol as legitimate.

Both framings are contestable. Ukraine's long-range drone strikes on Russian territory, including reported approaches to Moscow, are part of Kyiv's stated strategy of degrading Russian logistics and war-making capacity deep behind the front line. The Russian framing of these strikes as attacks on "the capital" is accurate geographically but elides the targeting question: most struck sites have been military or industrial, not civic centres. Conversely, Russian claims of combat operations in Crimea — which Two Majors and the republished versions report without elaboration — sit on top of a long documented record of Russian fortification and use of occupied Crimea as a logistics hub and launch platform. The brief in isolation does not engage any of this; the brief is a frame, not an account.

What we verified and what we could not

Verified. Four Telegram posts, all dated 25 June 2026, all containing overlapping text consistent with the Two Majors daily format. Timestamps as reported by the Telegram clients: 05:23, 05:27, 05:34, and 05:35 UTC. The text overlap between the DDGeopolitics post and the Two Majors post is near-total; the Rybar posts are reworded variants of the same source material. The English-language framing in Rybar in English is consistent with that channel's standard practice of translating and lightly editing Russian-aligned milblogger copy. The 25 June cycle is a representative instance of a routine distribution pattern, not an aberration.

Partially verified. The substantive claims about overnight drone activity toward Moscow, combat operations in Crimea and Sevastopol, and continued front-line action are not independently corroborated in the four Telegram posts themselves. They are consistent with the standard Two Majors content profile and with the broader reporting picture, but no Western wire, Ukrainian General Staff briefing, or Russian MoD statement is cited inside any of the four messages. A reader relying on this pipeline alone has no external anchor for any specific assertion.

Could not verify. The authorship of Two Majors as a specific named individual or group. The channel presents itself in the third person as a collective of officers and has never, in the materials available to Monexus, been authoritatively linked by mainstream reporting to a specific named figure. The claimed identity of DDGeopolitics is similarly opaque. The original text of the 25 June post on the Two Majors channel appears to originate with that channel by self-attribution, but the forward chain through Rybar and DDGeopolitics strips that attribution in places and reproduces the text without sourcing. The pipeline obscures its own provenance by design.

Why the distribution layer matters

The structural fact is this: in any given twenty-four-hour cycle, the English-language information environment about the air war in Ukraine includes, as a significant input, a small number of Russian milblogger briefings republished across a handful of aligned channels. The republications are not balanced by equivalent counter-publication in the opposite direction. Ukrainian official briefings reach English-language readers primarily through Western wires, which add framing, sourcing caveats, and editorial distance. The Russian milblogger brief reaches the same readers as raw, attributed material — sometimes to the original channel, sometimes to a republisher, but rarely with a structured Western contextualisation attached.

The asymmetry matters because of how the reading audience is segmented. Specialist Russia-watchers treat the milblogger ecosystem as a primary source to be mined for sentiment, for hints of internal Russian military disagreement, and for the rare operational detail that has not yet been censored. General readers, including journalists and editors working under time pressure, often encounter the same material stripped of those signals — as a daily summary that looks like any other wire. The thirteen-minute reposting cycle is engineered for that second audience.

Western outlets that do cite Two Majors or its republishers almost always add explicit caveats. Reuters, AP, and the Institute for the Study of War routinely note "Russian milblogger" or "Russian-aligned channel" on first reference. The caveat works for the reader who sees it. It works less well for the reader who sees the same content quoted secondhand in a social media post, a Substack, a podcast, or a chat group, where the sourcing has typically fallen off. By the time a claim reaches a third-party audience, the framing often has too.

The pattern inside the larger frame

What the 25 June cycle illustrates is a familiar feature of contemporary war reporting: the gap between the speed at which a claim can move through aligned channels and the speed at which it can be independently corroborated. The Two Majors daily is, functionally, an editorial product — a curated summary of overnight action shaped by the channel's own position in the Russian information ecosystem. Its republication network treats it as a wire service feed. Western outlets treat it as one source among many, hedged accordingly. The downstream audience receives a hybrid: a curated product with wire-service presentation and source-by-source caveats that have often fallen away in transit.

The broader pattern is not new, and not unique to this war. Information layers have always run ahead of verification in active conflicts. What the milblogger ecosystem has done is compress the lag and increase the throughput, with a small number of channels functioning as both newsroom and distribution platform. The 25 June morning cycle is a single datable example of that compression running at normal speed.

Stakes

The stakes for the information environment are concrete. If a daily briefing of this kind becomes a routine input into English-language coverage — quoted, summarised, or paraphrased without the original framing attached — the Russian milblogger position acquires a structural amplification it would not otherwise have. The Kremlin's official channels speak rarely and at high cost; the milblogger network speaks daily, in volume, and at low cost. The republication network is what makes the low-cost, high-volume output reach the audiences that the official channels cannot.

For the reader, the practical test is straightforward. When a claim about the air war appears without an obvious primary source, the question to ask is: is this a Western wire, a Ukrainian official briefing, a Russian official briefing, or a milblogger republication? Each of those has a different evidentiary weight and a different framing default. The 25 June morning cycle is a useful reminder that the republication step, not the original claim, is often where the framing is set.

Desk note: Monexus treats Russian-aligned milblogger channels as counter-claim material, with explicit sourcing caveats on every use. The republication pattern documented here is described as an information-layer phenomenon, not as evidence about the underlying military events.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/rybar_in_english
• https://t.me/two_majors
• https://t.me/DDGeopolitics
• https://t.me/rybar_in_english