On the social network TikTok, videos of some “bloggers” are being distributed who promote the thesis about the alleged “illegitimacy” of the Ukrainian authorities with calls for Ukrainians to go to protests. The Center for Countering Disinformation at the National Security and Defense Council writes about this.

This is happening as part of Russia's massive disinformation campaign called Maidan-3. Its goal is to destabilize the situation in Ukraine as much as possible, discredit the military-political leadership of the state, and also sow chaos and an atmosphere of mistrust in Ukraine.

The Center adds that such calls correspond to the interests of Russia, which is preparing for an offensive at the front and is interested in disorganizing the situation in Ukraine. And the main efforts aimed at this are being prepared for the 20th of May.

Statements by Russian figures about the need for destruction and withdrawal of the population of Kharkiv were accompanied by a constant stream of similar messages on social networks. Since the beginning of 2024, there have been signs of an organized campaign to fill the online space with alarming messages promoting the idea that Kharkiv will soon become uninhabitable. Mariia Avdieyeva writes about this for the Ukraine Alert Atlantic Council project.

In her opinion, the role of social networks in Russia’s information attack against Kharkiv is very important. Platforms such as Telegram, TikTok and X (formerly known as Twitter) serve as platforms for carefully orchestrated Russian propaganda. Groups of accounts associated with the Kremlin are intensively promoting key propaganda messages on this topic. These include the hopelessness of the military situation in Ukraine, the inability of the Ukrainian state to protect its citizens and the likelihood that Kharkiv will suffer the same fate as Mariupol.

The Russian information attack is also expressed through the spread of false statements attributed to Ukrainian authorities. For example, accounts from Russia spread disinformation that the Ukrainian government was allegedly calling on residents of Kharkiv to immediately leave the city to avoid a cordon by Russian troops. Fake reports from Ukrainian authorities were also distributed that Kharkiv was on the verge of a humanitarian crisis.

These fakes usually look convincing and are almost indistinguishable from official communications from the Ukrainian government. They even come with detailed information about “safe escape routes”. As a result, many residents of Kharkiv are exposed to this misinformation and unwittingly become accomplices in the spread of Russian fakes.

In addition, propagandists use real news and distort it to mislead the population and provoke panic. For example, they described a series of planned evacuations from certain settlements along the front line as a full-fledged evacuation of entire districts of the Kharkiv region.

In addition to faking government announcements and deliberate distortions, propagandists are also actively distributing videos. One of them said that thousands of cars were allegedly leaving Kharkiv. However, it later turned out that this is archived video from the beginning of the invasion in the spring of 2022.

The Center for Strategic Communications and Information Security at the Ministry of Culture and Information Policy of Ukraine reports that the Kremlin has launched another disinformation campaign.

According to the Coordination Headquarters for the Treatment of Prisoners of War, the Russians are spreading fake news about the alleged division of prisoners of war into categories or about Ukraine’s reluctance to release individual defenders and defenders from Russian captivity.

This is done with the aim of sowing discord among the families of captured military personnel provoking artificial conflicts. At the same time, such actions indicate Russia’s recognition of the effectiveness and perseverance of Ukraine in the issue of the release of all prisoners, including defenders from the Mariupol garrison, the Center adds.

For Ukraine, the priority is the release of every captive, regardless of age, gender, religion or other characteristics. Previously, we analyzed a Russian fake about lists of Ukrainian prisoners of war, whom Ukraine does not seem to want to return.

The Center for Countering Disinformation under the National Security and Defense Council has recorded a new information campaign by Russian propagandists to discredit the approval by the US Congress of a bill to allocate almost $61 billion in aid to Ukraine.

According to the Center, the key narrative of Kremlin propaganda is: “US assistance will have no impact on the situation on the battlefield”.

Russia also promotes the following messages:

“Assistance will only prolong the war and lead to more casualties among Ukrainians”;

“Most of the funds will remain in the United States. Americans are enriching themselves at the expense of the lives of Ukrainians”;

“The allocated assistance will be the last that Ukraine will receive”;

“The United States provided assistance during the harsh mobilization in Ukraine”;

“Now, after the decision to help Ukraine, is the best time to negotiate a truce”.

Russian propagandists, on behalf of Alina Bondarchuk, deputy head of the Center for Countering Disinformation at the National Security and Defense Council, claim that Ukrainian military prisoners are being used as part of the “Evader” flash mob.

In fact, Alina Bondarchuk did not make a corresponding statement. They write about this in the Center itself. There is no information with similar content on her official Facebook page, where the correspondence was allegedly taken from. In addition, the official profile of the Deputy Head of the Center has a different name and a different photo.

Such fakes are being spread as part of Russia’s large-scale information campaign called “Evader” in order to discredit the work of the Center, which, in particular, is counteracting this information campaign. Discrediting mobilization, sowing discord among Ukrainian society, and undermining Ukraine’s ability to defend itself are the main goals of this IPSO.

Users of such messengers as Telegram and Signal began to receive messages on behalf of the State Emergency Service of Ukraine that the Ukrainian authorities recommend that residents of Kharkiv evacuate from the city by April 22, 2024 due to its likely encirclement by Russian troops. In addition, these messages are accompanied by a reminder about what to do in case of evacuation.

In fact, the State Emergency Service stated that they did not send such messages to Ukrainians. The military leadership of Ukraine is constantly monitoring the situation and has not recorded any signs of Russia’s readiness to attack Kharkiv. They write about this in the Center for Strategic Communications and Information Security at the Ministry of Culture and Information Policy of Ukraine.

The very messages about the evacuation from Kharkiv are informational stuffing aimed at destabilizing the situation in Ukraine, the State Emergency Service notes and urges not to trust dubious sources of information.

This is not the first time that disinformation about the “evacuation from Kharkiv” has been spread. Previously, we refuted the information that “panic sentiments allegedly prevail in Kharkiv - city residents are leaving en masse”, “Ukraine allegedly announced the deportation of Kharkiv residents, preparing it for defense”, or that “Kharkiv authorities are allegedly planning to flee the city”.

The Russians launched a large-scale information campaign aimed at romanticizing evasion of mobilization and the evaders themselves. Videos have systematically begun to appear on TikTok and other social networks in which supposedly Ukrainian men film themselves abroad on vacation and call themselves “evaders”. This was reported by the Main Intelligence Directorate of the Ministry of Defense of Ukraine.

Such content quickly gains views and comments from the audience - approving and critical, but discussions under these videos only propel them into trends. “Folk” songs have even been created for such videos, the lyrics of which always contain the main message – praise of the evaders, the GUR adds.

The following things indicate a targeted Russian information campaign:

the synchronicity of the appearance of numerous songs and videos “heroizing” men who refuse to stand up in defense of their own country;

anonymity of video authors;

promotion of this content by organized groups of bots.

The head of the Center for Countering Disinformation under the National Security and Defense Council, Lieutenant Andrii Kovalenko, commented on the situation: “The pseudo-flash mob with the hashtag evader is another hostile IPSO. This is a classic technology of splitting society, which uses the same principle as the technology of splitting by language, only in this case the enemy incites hatred, leveling the constitutional obligation”.

Discrediting mobilization, sowing discord among Ukrainian society, and undermining Ukraine’s ability to defend itself are the main goals of this IPSO.

Read also: “Defending the Fatherland is a punishment”, “the party of draft dodgers would defeat the Servant of the People”. Theses of Russian propaganda on mobilization in Ukraine are in the MediaSapiens section.

According to Microsoft, Russian hackers have become more active over the past 45 days. At the same time, this activity is still less compared to the 2020 American elections. Reuters reports this.

Messages are distributed through traditional media and social networks by at least 70 cyber groups. Accounts linked to Russia spread controversial content, such as criticizing American support for Ukraine. Moreover, hackers spread disinformation in different languages and allegedly in the name of a “whistleblower” or “journalist”.

The fake messages are then published on a number of websites, including DC Weekly, Miami Chronical and Intel Drop. They write about this in the Center for Strategic Communications and Security at the Ministry of Culture and Information Policy of Ukraine. It should be noted that the mentioned resources are fake, created by Russians and, accordingly, information is distributed to them in the interests of Russia. Previously, we analyzed the manipulation of Russian propaganda, saying that the West and PACE are “interfering” in the Russian presidential elections.

The first episode of the Zelenskyi Unmasked project was recently released: Who is Volodymyr Zelenskyy? (“Zelenskyi without a mask: Who is Volodymyr Zelenskyi?”). It was brought to the attention of journalist Serhii Mamaiev and a detailed analysis on his YouTube channel “Special Projects of Serhii Mamaev”.

The series is hosted by Ben Swann, who calls himself an investigative journalist. But it is not so. Mamaiev found out that he was actually a television sports producer, and later a news journalist, producer and editor-in-chief of the FOX network affiliates and Russia Today America. Based on the released analysis, Detector Media presents the main messages consonant with Russian propaganda, which can be found within the first series of the project.

Volodymyr Zelenskyi did not know Ukrainian and came to power dishonestly

The authors of the film made many inaccuracies in the biography of the President of Ukraine, which indicates that the material was not carefully prepared. In particular, they also noted that Kryvyi Rih is located in the south of Ukraine, although the map that was inserted into the video refutes this. According to the creators of the project, Zelenskyi allegedly did not know Ukrainian at all before his presidency. However, in fact, he only did not use Ukrainian in everyday life.

In addition, the authors demonized both the creation of Kvartal 95, the transition of Kvartal to 1+1, and the series “Servant of the People”, the creation of the “Servant of the People” party and Zelenskyi’s participation in the presidential elections. Like, he is not who he claims to be.

The situation in Donbas is expected as it is historically a Russian region

The authors of the project repeated Russian propaganda cliches on Euromaidan and the war in Donbas from 2014. They deliberately did not mention the true reasons for the Revolution of Dignity and the shooting of students. The presenter also kept silent about the annexation of Crimea and Russia’s orchestration of the creation of the so-called LPR and DPR. The authors of the project do not talk about torture and executions of pro-Ukrainian activists in Donbas by Russians. Instead, all this is summed up with the message that Donbas is in fact a historically Russian region. However, Mamaiev notes that most of the residents of the eastern regions identified themselves as Ukrainians in the population census.

Zelensky is spreading ultranationalism in Ukraine

The presenter says that Zelenskyi allegedly betrayed his native Russian language and turned Ukrainian society towards ultra-nationalism. They say that discrimination against Russian-speaking Ukrainians is also evidenced by legislation restricting Russian music and literature. Allegedly, this was one of the reasons for the invasion. However, the authors do not mention that the Decrees on quotas on Ukrainian music and acts limiting the distribution of Russian literature came after the full-scale invasion.

Russia only wants to restore the USSR, and NATO and the USA really provoked it to attack Ukraine and sabotaged the peace process

The authors justify Russian aggression by saying that Russia simply wanted to rebuild the Soviet Union and presented this statement in a positive sense, as if what Ukraine is against looks strange. In addition, according to the presenter, it was the United States and NATO that provoked Russia into invading Ukraine, since NATO allegedly surrounded Russia on all sides. But even here the authors contradict themselves, since they show a map where NATO members indicate states that joined the Alliance after Russia’s attack on Ukraine.

Next, the authors tell how in the spring of 2022, Ukraine and Russia almost agreed on a peace agreement. However, according to the presenter, the peace fell apart allegedly because of the United States and Europe, which pushed Ukraine to continue the war. They say that it is because of them that Ukraine allegedly thwarted all agreements and continued repression within the country. However, in fact, the negotiations were stopped after the criminal actions of Russian troops in Bucha. And Russia calls “repression” any actions directed against violations of the law on cooperation with occupiers, deliberately dramatizing the situation.

Propagandists as project experts

A number of people who regularly play along with Russian propaganda provided their comments for the first episode. Among them is Andrii Telizhenko, a former Ukrainian diplomat who was a frequent guest on Medvedchuk’s channels, where he promoted relevant narratives. At one time, according to Mamaiev, he also tried to help promote the idea of then-President Trump, who supposedly Zelenskyi was collaborating with the US Democratic Party.

Another character in the project is Gonzalo Lira, about whose history we have written more than once before. The project repeats the story about the “illegality” of his detention. Like, in fact, he is in prison because of his criticism of Zelenskyi. However, the SBU, during Lira’s imprisonment, emphasized that the main charge for this was the justification of Russian aggression against Ukraine.

Zelenskyi destroys religion in Ukraine

The authors of the project repeated the Russian message, complaining that Zelenskyi is trying to usurp religion in the state for himself, trying to delegalize the UOC-MP. However, they are silent about the fact that the priests of this denomination justified the invasion of Ukraine and aimed missiles at civilians. And not a word that Ukraine has its own church. The authors create the impression that Zelenskyi bans Orthodoxy in Ukraine as a whole, although this is not the case.

The United States has already made films about Ukraine, where they disseminated messages in tune with Russian propaganda. In particular, director Oliver Stone at one time began making films about dictators. In particular, in 2016 he published the work “Ukraine on Fire”, where he interviewed Medvedchuk. A year later, he recorded an interview with Putin.

Conservative media in the United States further spread skepticism regarding Ukraine, including through the spread of conspiracy theories. All this has a special context, given that the first impeachment of then US President Donald Trump was announced due to the phone call scandal with Volodymyr Zelenskyi. Since then, Trump fans have called the topic of Ukraine “toxic” and are trying in every possible way to reconcile Ukraine with Russia. This is clearly visible on Trump’s Truth Social, where we previously found a large amount of anti-Ukrainian rhetoric. This “information bubble” does not help Ukraine, and anti-Ukrainian messages are supported by the target audience of these media - recent polls from CBS News show that 61% of US citizens who identify as Republicans oppose assistance to Ukraine.

While monitoring the information space, the Center for Countering Disinformation discovered a fake telegram bot posing as the official account of the Chernihiv Regional State Administration. This bot directs users to an anonymous Telegram channel that distributes misinformation.

“If you come across a fake Chernihiv regional military administration resource, block it and do not follow any links. The Center calls on Telegram channel administrators not to create fake pages of official government agencies, so as not to mislead readers”, the Center for Countering Disinformation urges.

Fake telegram channels from authorities or officials may be created to spread misinformation. For example, in mid-July 2023, attackers created a fake telegram channel with the name of the head of the Main Intelligence Directorate of Ukraine, Kyrylo Budanov. This channel spread a fake that Budanov thanked Ukrainian patriots for the partisan special operation in Crimea. The news was replicated by both Ukrainian and pro-Kremlin media. Later it turned out that Kyrylo Budanov did not make such statements.

In November 2023, a fake page of the then Commander-in-Chief of the Armed Forces of Ukraine, Valerii Zaluzhnyi, appeared on Telegram.

The head of the Poltava Regional Military Administration, Filip Pronin, said that scammers on his behalf are sending fake letters asking for financial assistance for the Armed Forces of Ukraine. They write about this in the Center for Strategic Communications and Security at the Ministry of Culture and Information Policy of Ukraine. 

However, the Poltava Regional Military Administration did not send any such letters. Attackers are speculating on the topic of supporting the Ukrainian military. Pronin urged everyone who receives such letters to contact law enforcement officers.

Russian propagandists are distributing a video about the everyday life of two young Ukrainians: one is relaxing, having fun with girls, drinking alcohol and drugs, while the other is fighting.

Russian propaganda is trying to undermine the authority of the Armed Forces of Ukraine, as well as sow discord in Ukrainian society. The Center for Countering Disinformation at the National Security and Defense Council writes about this.

The authors of the video staged “two realities” of Ukrainians, deliberately manipulating sensitive topics for the Ukrainian people in order to attract attention and provoke conflict. However, Russian propagandists ignore the fact that Ukrainians enlist in the military not for popularity and “luxury conditions”, but to protect their country and future.

This manipulative video appeared against the backdrop of public discussions of the Law of Ukraine “On mobilization preparation and mobilization”. More materials on this topic can be found here.

Australia's national broadcaster ABC has released a documentary “The Ukrainian War: The Other Side”, in which British journalist Sean Langan covers the war through the eyes of the Russian side.

In particular, the film disseminates the following Russian propaganda narratives:

- in 2014, a coup d’état took place in Ukraine;

- Ukrainians from Donbas wanted to go to Russia;

- Ukrainians are Nazis supported by the West;

- Bucha is a fake;

- The Ukrainian Armed Forces use civilians as “human shields” and fire at civilians;

– Russia did not start the war, it is ending it.

That is, in attempts to show the “other” side, Sean Langan actually provided the Russians with a platform to justify their aggression against Ukraine. The Center for Countering Disinformation at the National Security and Defense Council writes about this.

The dissemination of such materials to an international audience is promoting Russia and humiliating the Ukrainians, who today are fighting with blood for the right to freedom and independence. We previously wrote that the Ukrainian Ambassador to Australia Vasyl Myroshnychenko called the film “the equivalent of a bowl of vomit”, contacted the country’s Ministry of Communications and asked for an explanation from the TV channel.

Also, in February 2024, a British journalist filmed a similar documentary with the occupiers near Avdiivka, which also turned into an oasis of Russian narratives.

The Main Intelligence Directorate of the Ministry of Defense of Ukraine reports that the Kremlin has intensified its disinformation campaign against Ukraine in the Middle East.

Russia is intensively using its diplomatic missions and intelligence network, and various means of propaganda.

The task of the Kremlin’s next hybrid special operation:

● justify a war of conquest;

● discredit Ukraine and Western countries;

● impose unacceptable terms of negotiations;

● improve your own position in the region;

● achieve a reduction in the economic and political pressure that Moscow experiences due to aggression and the commission of war crimes.

Employees of the Russian embassy in Egypt, for example, received instructions from the Kremlin to hold a series of meetings under diplomatic cover to spread disinformation about the war and carry out recruitment activities.

Also, as part of this operation, the Russians are sending propaganda materials to the embassies of other states in Cairo, which justify waging war against Ukraine.

It is, in particular, about two “documents” entitled “On the role of the West in the conflict in Ukraine” and “On the situation around Ukraine”. These materials present a pro-Putin version of the history of Ukraine since the collapse of the USSR. And Russia, of course, is presented as a victim.

The key idea that Russia is promoting in the Middle East is that there is no alternative to the scenario it has imposed for ending the war.

Russia is silent about the situation in the Belgorod and Kursk regions - the Putin regime is not able to ensure security in the border areas. Russian authorities are hiding attempts by residents there to evacuate on their own, and are also blocking the evacuation.

That is, propaganda is doing everything possible to hide the truth about the security situation in the country. Russia’s goal is to use the population as a “human shield” and hold “elections” at any cost. This was reported by the Center for Countering Disinformation under the National Security and Defense Council.

Propaganda resources are spreading disinformation to prevent the evacuation of children from the Kupiansk district of the Kharkiv region, which is under massive shelling from Russia.

In such messages, residents of the Kharkiv region are called upon to refuse evacuation, intimidated by the fact that the Ukrainian Armed Forces military will immediately move into their homes, and their children will be taken to the west of Ukraine, where they will be persecuted for speaking Russian.

At the same time, propagandists are spreading stories glorifying Avdiivka women who “buried children from evacuation”. However, of course, Russian propaganda does not mention that in this way parents exposed their children to mortal danger, writes the Center for Countering Disinformation at the National Security and Defense Council.

Propagandists present their “advice” as trusteeship, but the only goal of this campaign is to use the civilian population as a human shield to deter the actions of the Ukrainian Armed Forces.

Russia systematically uses Ukrainian children for its criminal purposes, in particular by carrying out illegal deportations from the TOT. At least 20 thousand children have already been taken to Russia, for which a court in The Hague issued an arrest warrant for Putin.

The Center for National Resistance and the Center for Strategic Communications and Information Security reported that the Russians are trying to force Ukrainians to participate in voting for Putin.

The occupation pseudo-administration announced a flash mob called “The whole family goes to the polls”, in which participants must publish photographs of their families from “polling stations” on social networks. In this way, Russians hope to create the illusion of mass participation in the elections.

The Center for National Resistance adds that the occupiers informed all employees of fake government agencies in the occupied Luhansk region that participation in the flash mob was mandatory. You can also read about how Russian propaganda uses residents of (de)occupied territories and what to do about it in another material of the Detector Media.

In some schools in Mariupol, which is temporarily under occupation, brochures with anti-Ukrainian content are being distributed. This was reported by the Mariupol City Council and the Center for Strategic Communications and Information Security.

The postcards feature Russian propaganda clichés, namely Ukraine's “gay troops” and false comparisons. They say that Russia and its supporters are good, but Ukraine is a “wrong choice” and fascism.

The main goal of these materials is to justify and glorify the Russian occupiers and discredit the Ukrainian military. The main target audience of such postcards are children, which means that with their help they want to shape their civic position.

You can also read about how Russian propaganda uses residents of (de)occupied territories and what to do about it in another material of the Detector Media.

A team of propagandists from Kyrienko, the first deputy head of Putin’s administration, was involved in the Russian special operation Maidan-3 (M3). This is stated by the head of the Center for Countering Disinformation under the National Security and Defense Council, Lieutenant Andrii Kovalenko.

Also involved in the implementation of the special operation are the Russian special services - the Foreign Intelligence Service and the Main Directorate of the General Staff of the Armed Forces of the Russian Federation, which are responsible for creating profiles on TikTok, Russian channels on Telegram, as well as bot farms from which disinformation is spread.

Moreover, Medvedchuk and his project “The Other Ukraine” have been added to this special operation, which “uses individual odious pro-Russian characters with Ukrainian passports working for Russia”, notes Andrii Kovalenko.

Let us recall that the Intelligence Committee under the President of Ukraine previously revealed the plan of the Russian special operation “M3”, the budget of which was $1.5 billion and the goal of which was to destabilize the situation inside Ukraine.

• Read also: During the spring of 2024, the Russian information special operation Maidan-3 will reach its climax - The Main Directorate of Intelligence of the Ministry of Defense of Ukraine

The Internet advertises sites that are allegedly associated with the ex-commander of the Armed Forces of Ukraine Valerii Zaluzhnyi. Resources are located on different domains and created by anonymous users.

The Center for Countering Disinformation at the National Security and Defense Council reports that these sites are not associated with Zaluzhnyi, and Ukrainian law enforcement agencies have already been informed of their existence. Probably, behind the creation of these online platforms are Russians who are striving to split Ukrainian society, which is why they use different means to achieve this.

The sites lead to anonymous telegrams that collect information about users, which in the future can be used against citizens of Ukraine. The Center warns against registering on these resources and asks you to trust only verified sources.

In such messages, the authors, on behalf of the “prayer department”, offer to pray for the Ukrainian military who find themselves surrounded. For example, one of the messages talked about two Ukrainian brigades that were allegedly surrounded by 40 thousand Russian soldiers near Avdiivka.

The Center for Strategic Communications and Information Security reports that the vast majority of such messages are the work of Russian intelligence services.

This is evidenced by the following:

- sometimes messages are written in Russian, which may already be the first sign of it;

- in the structure of the Armed Forces of Ukraine there is no “prayer department” responsible for prayers;

- lack of specifics about the brigades and the time of the location of hostilities;

- the desire to evoke an emotional reaction in the reader in order to obtain maximum coverage;

- in the comments there may be calls for Ukrainians to give up.

Russians can manipulate even such intimate areas as religion, so you should not trust overly emotional messages and calls on this topic.

Pro-Kremlin telegram channels are distributing a video in which an unknown person in a Ukrainian Armed Forces uniform allegedly shoots a serviceman for allegedly refusing to participate in assault operations. As propagandists write, the victim of the “execution” seems to be a soldier of the 425th Special Operations Brigade “Skala” of the Main Intelligence Directorate of the Ministry of Defense of Ukraine.

However, after verifying the information together with the StratCom of the Armed Forces of Ukraine and other relevant structures of the Ministry of Defense and Armed Forces of Ukraine, the Center for Countering Disinformation reported that this video was fake. It is impossible to identify the characters and the area, as well as determine the nationality of the participants in the video. In addition, 425th Special Operations Brigade “Skala” is part of the Ground Forces of the Ukrainian Armed Forces, and not the Main Intelligence Directorate, as propagandists are trying to imagine.

Considering all the above-described signs of a fake and the fact that the video is being distributed by Russian resources, the Center reports that the video was probably shot by the Russians as part of the IPSO in order to discredit the Armed Forces of Ukraine. This is not the first time that fake videos have been created to demonize the Ukrainian army. Here, for example, is an analysis of a video in which the Russian military allegedly captured a pregnant Ukrainian female soldier.

This was recorded by the fact-checker of the Brekhunets (Liar) project. They explain that Ukrainians began to receive messages seemingly from Ukrposhta that their parcel was “detained because it does not have a number”. In order for it to be sent, one needs to update their address by clicking on the link.

The Ukrposhta main office previously warned that messages with similar content could be sent on their behalf. Ukrposhta specialists are convinced that in this way scammers are ready to obtain users’ personal data in order to take possession including, for example, of their funds. Therefore, one should not click on unclear links.

Attackers in the Signal messenger send messages to Ukrainian Armed Forces military personnel on the topic of recruiting for the Third Separate Assault Brigade of the Ukrainian Armed Forces and the Israel Defense Forces (IDF), containing malicious software.

The hackers’ messages contain archived files, the launch of which will lead to infection of the computer with REMCOSRAT and REVERSESSH malware. At the same time, the attackers try to make the names and contents of the archives interesting for the military: “interrogation of a prisoner”, “geolocation”, “encoding commands”, “claims”, etc. Specialists from the American-Japanese company Trendmicro showed suspicious activity back at the end of December 2023.

Afterwards, the Ukrainian government computer emergency response team CERT-UA, operating under the State Special Communications Agency, took action on a series of cyber attacks. The team also noted that if suspicious activity is detected on computers and in information and communication systems of the Armed Forces of Ukraine, the ITS Cyber Security Center (military unit A0334; email: csoc@post.mil.gov.ua ) should be immediately informed.

An information attack in the form of mass SMS messaging is aimed at Ukrainians located in different countries of the world. The messages were created in the style of Lubianka linguists: next to the cliché about the need to work together “to revive Kyiv  Rus to harm our enemies” there are phrases like “take care of yourself and your loved ones” or “save the lives of people” - Russian propaganda and threat in one sentence.

The Main Intelligence Directorate notes that in addition to the provocative content with a call to help Moscow expel “American Satanists” from the “original Russian land”,  Kremlin intelligence officers add the cynical one: “from Russia with love”.

The purpose of this information attack is to intimidate, demoralize and disorganize Ukrainian citizens. If you receive such messages, we urge you to ignore them and think critically.