Al-Ghadeer TV, Badr Organization official media, posted at 19:14 on 27 July 2026: "مستشار الامن القومي العراقي: خلايا استخباراتية اوكرانية تنفذ هجمات في العراق وتنسبها لفصائل المقاومة" ("Iraqi national security adviser: Ukrainian intelligence cells are carrying out attacks in Iraq and attributing them to the resistance factions"). Unit 10,000, KH-affiliated, had carried the identical substance six minutes earlier at 19:08. Neither post names the adviser, cites a specific incident, or gives a venue or date for the remarks; the deterministic text-matching run for this window produced no republication cluster, meaning the two posts are not byte-identical relays. No external media reporting in the collected window carries the adviser's remarks, so the desk can confirm only that two faction-linked outlets published the claim, not that the remarks were made as worded.
If the national security adviser's office is the source of a standing alternative attribution for attacks in Iraq, the Iraqi state's own security apparatus is supplying the factions' deniability rather than investigating them.