PARIS—When French President Emmanuel Macron emerged as a leading candidate in 2017, his campaign was targeted by waves of hacking attempts that cybersecurity researchers linked to Moscow.

Now, French security services are investigating any Kremlin role in social media activity that has amplified the yellow-vests movement and spread misinformation about it, helping the protests become the most serious threat to Mr. Macron’s young presidency.

“There...