Spilnota Detector Media

Disclosure Office of National Security and Defense Council of Ukraine emails malicious software

This was reported in the State special communications service. The Ukraine government computer emergency response team (CERT-UA) has documented the massive distribution of dangerous emails sent on behalf of the Office of the National Security and Defense Council of Ukraine.

The subject line of the emails sent out is “critical security update”. The title of the attachment also refers to a “security update”. Attached to the letter is an archive with an image of “instructions that are important to read” and an installation file. After the computer boots up and starts, the hidden remote access program is installed. This gives third parties access to computer control and data. Recently, attackers distributed emails with similar software on behalf of JSC Ukrtelecom. Probably, the purpose of the attackers is espionage.

The Office urged not to open received letters with similar attachments and not to follow the links if one is not sure of their safety.

Disclosure What Medvedchuk said on Belarusian television: key pro-Russian messages

Accused of high treason, Viktor Medvedchuk, a former people's deputy from the pro-Russian OPZZh (Opposition platform — for life) party, gave his first interview after a full-scale invasion. More precisely, he joined the show via Skype on the Belarusian state channel STV. The host Nadiia Sass, a former journalist of his TV channels, who in 2020 ran for the Dnipropetrovsk regional council on behalf of the Opposition Platform - for Life, spoke with Medvedchuk.

In his speech, Medvedchuk said that he was returning to the big game, launching a new political project, “The other Ukraine”, and would try to “demonopolize the right of President Zelenskyi to represent Ukraine at the international level”. Detector Media collected five key points from Medvedchuk's speech. All of them are in tune with the rhetoric of Russian propaganda, which during the year of the war spread dozens of disinformation messages to different audiences.

1. Ukraine constantly failed in peace negotiations, and tried to “get rid” of Donbas. Here, Medvedchuk resorts to a classic reflection technique, a tactic that involves accusing Ukraine and the West of accusations that were once made against Russia. A typical attempt to turn everything upside down and make the victim of aggression guilty of the attack. This mantra was heard on the air of Medvedchuk's channels for years. In particular, the audience was convinced that Ukraine was “bombing the Donbas” and that it itself did not want the reintegration of this territory, because, they say, without this region, Ukraine would vote the way the authorities needed. According to Medvedchuk, it is his participation that is needed in the negotiations to achieve peace between the two countries. Despite this, he disclaims responsibility for the allegedly failed Minsk agreements, because he was an intermediary and did not influence its implementation. In fact, any peace agreements with Russia do not work not because of the fault of Ukraine, but precisely because Russia violates them.

2. The West was interested in destabilizing the situation near the borders of Russia. The event did not put pressure on Kyiv to comply with the Minsk agreements. The purpose of this thesis is to remove any accusations from Russia for unleashing a war in eastern Ukraine and shift the blame to the ephemeral “West”. According to Medvedchuk, it is not the Russian army that is destabilizing the situation in the East of Ukraine, but the “West” is destabilizing the situation near the borders of Russia in order to harm it. This is a typical Russian accusation against Ukraine and Western states. Thus, Russian propagandists are trying to justify the war that Russia unleashed. They say that the peace agreements were not implemented through the fault of Ukraine and the Western countries, and if Russia had not intervened and started a war, everything would have been even worse.

3. Ukraine is a failed state because it has lost its sovereignty, independence and democracy. This is one of the common narratives about Ukraine that Russian propaganda has shared. Propagandists regularly nourish it with messages that Ukraine is not a real state, because it does not have its own history and culture; that Ukraine was created by Lenin; that the Ukrainian government failed to build a normal system; that corruption is widespread in Ukraine, etc. By spreading such messages, Russia also justifies itself and seeks to create the appearance that the ongoing war on the territory of Ukraine is justified. Like, Russia is fighting for the lands that have always belonged to it. However, the failed state has dispersed basic power functions and an atrophied ability to implement collective decisions. Over the past year, Ukraine has effectively resisted the aggressor and gradually liberated the occupied territories. By the way, amid the escalation, more and more political scientists are talking about Russia as a failed state.

4. Ukraine underestimated Belarus and did not thank Lukashenko for assistance in the peaceful settlement of the Donbas issue. Like, Ukraine did not appreciate Lukashenko's efforts to provide a platform for dialogue between Ukraine and Russia. In fact, Belarus does not support Ukraine in the conditions of war with Russia. On the contrary, the self-proclaimed president of Belarus, Oleksandr Lukashenko, admitted that Belarus is participating in the war on the side of Russia and has repeatedly repeated Russian propaganda messages that it is Ukraine that is the aggressor. There were also theses that Ukraine was allegedly preparing an attack on Belarus. Thus, Lukashenko is trying to justify his support for Russia and the fact that Belarus has actually become a springboard for the Russian army. In particular, part of the Russian missiles that hit Ukrainian cities and villages are launched from the territory of Belarus. That is why the attitude towards Belarus and its self-proclaimed leader in Ukraine is ambiguous.

However, because of such messages, it seems that Ukraine is not ready to negotiate with Russia, because it did not appreciate Lukashenko's efforts in organizing a platform for this. However, the Ukrainian authorities have repeatedly stressed that they are not ready to negotiate with Russia on its terms, which provide for the annexation of the occupied territories and a neutral status.

5. Ex-deputies of the Opposition Platform - for Life who fled to Russia are launching the political project “The other Ukraine”, so that President Zelenskyi would not represent Ukraine abroad, but Medvedchuk. According to Viktor Medvedchuk, there are millions of Ukrainians who want friendship with Russia (according to the results of a sociological survey, now only 3% of Ukrainians have a positive attitude towards Russians). It is their interests that he is ready to represent with his team. The name of the new political force “The other Ukraine” is associated with the political project of the Russian national bolshevik Eduard Limonov “The Other Russia”. The organization was in opposition to Putin, for which it was recognized as extremist. In addition, this name contains the idea of a split and division of Ukraine and Ukrainians into sorts, however, this “has already happened”. For example, it was Russian propaganda that divided Ukrainians into Russian-speaking and Ukrainian-speaking, into Western and Eastern, etc. Viktor Medvedchuk himself is deprived of Ukrainian citizenship and is in Russia. That is, he cannot lead any political organization in Ukraine. Therefore, they are probably talking about the creation of a Russian organization with the word “Ukraine” in the title.

A month ago, Medvedchuk already tried to signal his political ambitions: in the Russian media “Izvestia” (News), he published an article about the alleged “anatomy” of the modern military confrontation between Ukraine and Russia, as well as about the role of the West in this war. We have already analyzed it in detail.

Disclosure On Ukrainian Telegram, there are networks of "draft notice" channels that distribute probably unverified information

Oleksii Pivtorak, Olha Bilousenko

There are about 80 telegram communities in the Ukrainian telegram segment, whose users report the movement of military personnel allegedly distributing draft notices in Ukrainian cities. In these channels, messages can be added by everyone who sees the military with draft notices on the streets with the help of special bots. However, the administrators of telegram communities do not check whether each message about the likely distribution of draft notices on a street is true.

According to the Telemetrio platform, which provides analytics on the work of telegram communities, at the end of January 2023, about 80 channels and groups were operating in the Ukrainian segment of this messenger, having the words “draft notice” or “mobilization” or their equivalents in Russian. The audience of these communities ranges from 120 to 115 thousand people. The oldest of the currently active community with the name “Where do they distribute draft notices? Dnipro” appeared on March 12, 2022. Now this channel has 1.1 thousand subscribers. The total audience of these communities in the telegram is about 1.2 million messenger users.

As Detector Media analysts found out, Ukrainian telegram channels and groups that talk about draft notices cover an audience of 21 regions and Kyiv city. As a rule, most telegram communities operate in regions where the largest cities of Ukraine are the administrative centers. Nine are oriented to Kyiv and the region, 7 - to Kharkiv region and 7 - to Odesa region, 6 - to Lviv region.

In the Ukrainian segment, channels that operate on the territory of Donbas, Luhansk, Kherson and Crimea could not be found yet.

There are two types of communities where draft notice handouts are reported. The first includes those where one can exchange messages without the help of administrators or telegram bots. The second, respectively, include those where they publish only messages that were written to the bots, or subscribers cannot be told anything at all and the authors of the channel create the content themselves, but do not indicate the sources of information in the messages.

As an example of telegram channels of the first group, we can name the “Mobilization Draft Notice Ukraine News” channel, which has 17.6 thousand subscribers. Its participants write in the chat questions of varying complexity regarding how mobilization is taking place in Ukraine. For example, if a person who is the stepfather of three children will be allowed to go abroad. Most of the telegram communities where they communicate and warn about the issuance of draft notices belong to the second category. Either one can’t write messages there at all, or one needs to write them through a bot that publishes these messages. Judging by the names of the bots and the design of the telegram channels, there are at least three networks in the Ukrainian telegram that moderate the so-called draft notice communities. These networks control about 30 telegram communities.

For example, the @moderatorukr_bot network operates in the telegram, which is run through a bot with the nickname @moderatorukr_bot. It covers at least 22 channels covering 21 regions and Kyiv city. The telegram channels of the network are easily recognizable by their yellow logos with the word “draft notice” in black in the middle. These channels appeared in October-November 2022. One can publish messages only through the bot @moderatorukr_bot. First, in the bot, you need to select the area in which you have information about the distribution of draft notices, and then write a message. However, the bot does not delay the publication of any messages too much. And this can be abused to spread false or unverified information. For example, living in one end of Ukraine, one can report the distribution of draft notices in another part of the country. And this information will be published without verification. In the first months after the creation of telegrams, the channels of this network were probably seen as a source of profit. For example, from October to November, in the description of the “Zhytomyr Draft notices” channel, it was possible to contact the user @marcuss92 with promotional offers.

Also, in the Telegram there are networks of such communities as “Solidary friend” and “gde” (Where).

Thanks to the archive of these telegram channels, Telemetrio managed to find the contacts of the administrator of Solidary Friend Oleksandr. He was the only one of the moderators of telegram channels with draft notice information who answered the question of how he fights disinformation on the channels. “Today, our bot has a ban system, if a person spreads false information several times, he or she loses the opportunity to use the bot. We also have chats for each channel, where people actively help us in content moderation”, Oleksandr explained in a comment to Detector Media. He added that users of the telegram channel who communicate in the chat, the link to which is contained in the description of the telegram channels of this network, help to verify the veracity of the information. That is, the verification method is again unreliable, because messages are first published, and only then checked.

The danger of such networks of telegram channels is that they are run by anonymous people. Therefore, it is impossible to find out the purpose of creating specific networks of so-called draft notices channels, just as it is impossible to verify the information they publish. It should be understood that the distribution of draft notices to men of military age in the conditions of mobilization is legal, however, representatives of the Territorial recruitment centers do not say where and when they will distribute draft notices to men. Also, employees of the territorial recruitment centers took part in the spread of anxious moods in society. For example, when draft notices were handed over to defendants in criminal cases of rape; issued them to people who had sex in a public place or to visitors of mass events or just to men on the streets. That is, such actions probably provoked the emergence of such telegram communities.

The public importance of the topic and the great interest of people in it, as evidenced by the same search queries in Google, the authors of anonymous sites can use to make money and promote messages that are beneficial to them. In addition, information about the distribution of draft notices in different cities of Ukraine only nourish the level of tension in society. In conditions of war, when mobilization is underway, the dissemination of such messages can provoke panic and undermine confidence in the army command and government. Also, messages in such channels can be misleading, because due to the fact that the networks themselves are anonymous, it is impossible not only to verify the accuracy of the information referred to in the messages, but also to find out the algorithms by which the authors of such channels try to check the facts, or attempt to do so.

Disclosure The “Digital army of Russia” spreads fake comments and destabilizes the mood of Ukrainians

The telegram channel “Digital army of Russia” operates on the network, the authors of which in their messages give instructions to subscribers from Russia on how to comment on messages in Ukrainian telegram channels.

The fact-checkers of the “Beyond the News” project investigated this case and found that the subscribers of the “Digital army” are the distributors of prepared comments found in Ukrainian telegram channels. In the tasks, the administrator points out to the “digital army fighters” that they should evoke emotions in Ukrainians. For example, impotence, sadness, panic, fear, “everything is gone” feeling. Or the administrators set the task of convincing Ukrainians with comments that “nothing will ever change”. Comments are translated into Ukrainian through a translator, so there are typical errors. The administrator also attaches names and links to telegram channels to the task, where one can write something.

Analysts add that another goal of the “Digital Army of Russia” is to force Ukrainian telegram channels to close comments so that Ukrainians do not have platforms to express their opinions. Then, according to the intention of the authors, Ukrainians will switch to pro-Russian resources for the “truth”, but in reality, those are resources imbued with Russian propaganda and lies.

Disclosure Fraudsters offer five thousand hryvnias of assistance from PrivatBank

In social networks, in particular, in the Ukrainian segment of Facebook, they spread messages about the opportunity to receive five thousand hryvnias of assistance from PrivatBank. To do this, you need to fill out a questionnaire and take a short survey. However, this is a scam.

According to the fact-checker of the “Brekhunets” (Lier) project, such a financial assistance program does not exist. Experts found that when you go to a site with a survey, an antivirus program immediately works and warns that the resource can be harmful. Fact-checkers are convinced that the site has nothing to do with an official bank. There is not a word on the official website of PrivatBank that the organization makes payments of certain financial assistance from the state. Moreover, people who allegedly received the winnings write with errors in the comments.

After completing the survey, you are invited to send a link to your friends.

By spreading such messages, scammers are trying to mislead Ukrainians, because the method of such mailings is beneficial in social networks in order to increase activity and sharings.

Disclosure Residents of Kherson receive SMS messages that the Armed Forces of Ukraine are preparing massive strikes on the city

According to the Center for Combating Disinformation, residents of Kherson received information that the Armed Forces of Ukraine are planning missile strikes on the city and, accordingly, civilians should take care of their safety. "Dear residents! Evacuate immediately. There will be shelling of the residential quarters by the Armed Forces of Ukraine..." such SMS reads.

The Center informs that this information isn't true. "Recently, the commander of the Russian army, Surovikin, announced the alleged preparation of a missile strike by the Armed Forces of Ukraine on Kherson and the Kakhovska HPP dam, as a result of which the population will be "evacuated" from the city. At the same time, Vitaliy Kim reported that "the Russians are probably preparing to attack Kherson... We will not be surprised if they fire on crowds of people and residential areas to blame this on the Armed Forces. We warn.

This disinformation is aimed at sowing panic and deporting as many more Ukrainians as possible under the guise of "evacuation." The Armed Forces of the Ukrainian SSR has never conducted targeted attacks on the civilian population, and even more, haven't warned the occupiers about their plans," the Center said.

Disclosure Propagandists are spreading a manual for the Ukrainian military “how to surrender properly”

Anonymous telegram channels disseminate a call to Ukrainians to “save the life of their son, husband, father, brother, friend, and even enemy”. To do this, they propose to convey orally or in writing (through repost) the content of the video instructions on how to properly leave their positions and avoid criminal liability.

Propagandists offer to leave their positions and leave the combat area with entire military formations. Like, the more people, the better. They argue that allegedly only individual military personnel, but not units, can allegedly be accused of desertion. They also advise "to isolate or neutralize the nationalists and informers of the SSU in your unit." Propagandists call for recording a video message to the leadership of Ukraine, the command of the Armed Forces of Ukraine, a unit, a military unit, which should include all military personnel who decide to leave their positions. Like, this will also “protect” from the charge of desertion.

In fact, Article 408 of the Criminal Code of Ukraine provides for criminal liability and imprisonment for both individual (two to five years) and group (five to ten years) desertion. Desertion under martial law is punishable by up to 12 years in prison.

Fake Refugees from Ukraine became clients of Russian-speaking travel agencies in Germany in the absence of Russian citizens

This thesis was spread by the pro-Russian Internet publication in Ukraine Strana.ua. It refers to Deutsche Welle. Strana.ua writes that Ukrainian refugees are attracted by low prices in Russian-speaking travel agencies and that they are not embarrassed by the Russian language of the staff and signs “We speak Russian”. However, this is not true.

Some Ukrainian refugees in Germany actually used the services of one Russian-speaking travel agency in Bonn not because it was Russian-speaking, but because the employees of this travel agency changed the business format and decided to support and help the Ukrainians.

According to the representative of this bureau, many of their excursions are funded by charitable organizations in Cologne and Bonn. She had to convince many Ukrainians that there is nothing to be ashamed of if, instead of sitting in hostels for refugees, they go to Amsterdam for one day. In addition, the representative of the travel agency said that Ukrainians in Germany do not have Russophobia, they can clearly separate Russians who condemn the war from those who support the Putin regime and military aggression against Ukraine.

Some women told Iryna that they also faced hostility towards them from Russian-speaking residents in Germany, these are mainly those who watch Russian propaganda TV channels here and believe that Putin is fighting “Nazis and Bandera”, the article says.

Fake Pupils of Ukrainian schools are urged to inform teachers about their parents

This fake is spread by the Russian media, in particular in their telegram channels. Reports say that allegedly in Ukrainian schools, students are forced to complain about their parents if they suddenly speak Russian in everyday life or if their relatives live in Russia. Like, teachers post such ads in their classrooms. However, this is an outright lie.

As they say, if the cap fits, wear it. That is about the propagandist: due to poor-quality translation, instead of the phrase "Tell the teacher" (rozpovisy vchyteltsi) the Russians made a mistake and wrote "Rospovi vchytelke" so it is quite clear that this is another Russian fake.

Tell the teacher:

— If you have relatives in Russia;

— If your parents speak Russian at home;

— If your parents watch TV in Russian;

- If your parents speak badly about Volodymyr Zelenskyi.

In addition, in Ukraine there are no norms regulating the language of communication in everyday life. According to the law “On Ensuring the Functioning of the Ukrainian Language as the State Language”, its effect does not apply to the sphere of private communication. Even in many cities, in schools or kindergartens, children still communicate in Russian.

Such fake propagandists go around in order to discredit the Ukrainians and justify Russia in the war that it unleashed. Like, in Ukraine, they are forced to dislike everything Russian, starting from schools.

Disclosure The Russians mistook the abutment of the old bridge for the destroyed "barge with the Ukrainian landing party"

The Russian Ministry of Defense announced the so-called great success of the Russian army on the territory of Ukraine. Like, the Russian military destroyed a barge with a landing force of the MTR of the GUR of Ukraine, who was trying to capture the Zaporizhzhia nuclear power plant.

The telegram channel of the ministry published a video showing how helicopters are shooting at an object called a barge. However, all this is not true. According to The Insider, the shot object really resembles a barge from afar, but without deck superstructures, that is, it is not self-propelled. Such a barge can move only with the help of a tug or a pusher, but it is not in the frame. “What is the point of landing on an unguided floating craft is not clear. In the Gray Zone Telegram channel, they were able to recognize the "barge". It turned out to be the support of the bridge across the Dnipro near Enerhodar.

The bridge was built in 1943 by the German invaders and six months later it was blown up by German sappers during the retreat. In this form, the remainder of the bridge stood for 78 years until the victorious strike of Russian helicopters. Writing stories about the successes of the Russian army on the territory of Ukraine, propaganda seeks to somehow hide its own failures, in particular, their retreat due to pressure from the Armed Forces of Ukraine in the Kharkiv region.

Disclosure Fraudsters offer Ukrainians to receive seven thousand hryvnias from confiscated assets of the Russian Federation

A message with information that all Ukrainians can receive compensation from seven thousand from confiscated assets of the Russian Federation is distributed on Facebook from a page called Info Plus. 

The report says that recently in Ukraine they “signed a law” and you can become one of the first to receive funds. However, all this is an invention of scammers who use photos from well-known Ukrainian banks in their messages to make their messages look more truthful in the eyes of Ukrainians.

In fact, there is not a single law in Ukraine that allows Ukrainians to receive compensation from the confiscated assets of the Russian Federation. Also, there are no regulations that allow you to receive such payments. As the fact checker of the Brekhunets (Lier) project writes, if you go to the site indicated in the message and click on the “get paid” button, go through all the procedures on the site, a tab will open with the inscription: “to receive a multi-thousandth payment, you need to pay a commission several times”.

The scammers promise to return the so-called commission within 24 hours, and then a page opens where you need to indicate the bank card number along with confidential data. With this data, scammers can get access to the money on your cards, so never send your details to strangers.

Disclosure Russian hackers send malicious emails with the subject "Final Payment"

The Government Computer Emergency Response Team of Ukraine CERT-UA, which operates under the State Service of Special Communications and Information Protection of Ukraine, reported a new cyber attack: mass sending of emails with the subject "Final Payment" and an attachment of the same name in the form of TGZ- archive. The archive contains an EXE file, the opening of which will lead to the download of malicious programs on the computer and, as a result, data theft. The attack is linked to the group of Russian hackers UAC-0041.

Disclosure Volodymyr Zelenskyy revoked the citizenship of Poroshenko, Bakanov, Filatov, Denisova, Medvedchuk, and Marchenko

The fake document, allegedly Volodymyr Zelenskyy's decree on depriving the citizenship of former President Petro Poroshenko, ex-SSU chief Ivan Bakanov, Dnipro mayor Boris Filatov, ex-ombudsman Lyudmyla Denisova, people's deputy Viktor Medvedchuk and his wife Oksana Marchenko, suspected of treason, etc., was spread on social networks.

In fact, the document is fake. The number of the "decree" was indicated as "502/2022"; it was dated "July 23, 2022". Such a number was on a document that the mass media distributed earlier related to the deprivation of citizenship of other persons. However, the date on that document is "July 18, 2022." Also, in the supposedly "official document," mistakes were made in the name of the capital, namely "Kyyievi." In addition, the Telegram channel, launched by the Dnipro authorities to refute disinformation, "Stof fake Dnipro" writes that the information about the deprivation of Filatov's citizenship is unreliable.

Disclosure Russian hackers send malicious emails on behalf of the SSU Academy

Ukraine's government computer emergency response team CERT-UA, which operates under the State Service of Special Communications and Information Protection of Ukraine, reported a new cyber attack: massive sending of emails with the topics "Information Bulletin" and "Combat Order."

They are supposedly sent to private email addresses from the National Academy of the Security Service of Ukraine. Opening the attachments in the emails will lead to the launch of the malicious program GammaLoad.PS1_v2 on the computer and, as a result, data theft. The attack is associated with the Russian FSB hacker group Armageddon (UAC-0010).

Disclosure A fake newsletter on behalf of the SSU is being distributed on social networks

In the messages received on social networks supposedly on behalf of the SSU, it is said that "new rules of communication are appearing in Ukraine - all calls will be recorded, and all messengers will be monitored."

It is not true, and the SSU does not send such letters to users. According to the Center for Combating Disinformation, the disinformation campaign of the occupiers aims to discredit the country's leadership, as well as psychological pressure on the people.

The fake that in wartime all calls of Ukrainians will be listened to is not new. Such information has been circulating since the first weeks of the full-scale invasion, but there is no official confirmation of this data. In official departments, the report was denied every time.

Disclosure Russian hackers infiltrated the airwaves of several Ukrainian radio stations and spread a fake about "Zelensky in intensive care"

As reported by TAVR Media, the largest radio holding in Ukraine. Ukrainian radio stations broadcast an urgent announcement that the President of Ukraine, Volodymyr Zelensky, was in intensive care and was in serious condition.

This information is fake, and Russian hackers hacked the radio stations' broadcasts. "Today, there was a cyber attack on the servers and networks of TAVR Media radio stations. Now the relevant services are working on solving this problem," said the report.

Disclosure Cybercriminals are sending dangerous emails that mention the Operational Command "South"

The Government Computer Emergency Response Team of Ukraine, CERT-UA, has warned of a new cyber attack in which criminals are sending the file "Report_050722_4.ppt", which contains a thumbnail image that mentions the operational command "South." If you open the document, it will open the AgentTesla malware on your computer and steal your information. CERT-UA noted that the attack could be directed against state organizations in Ukraine.    

Disclosure Six new Telegram channels are spreading Russian disinformation and propaganda

The Center for Combating Disinformation has updated the list of Telegram channels that spread Russian disinformation under the guise of Ukrainian ones. In July, six channels were added to the list, including "Ukrainian Format" and "Ukraine Novosti."

Disclosure Cybercriminals send malicious emails to the addresses of government agencies in Ukraine

According to the State Intelligence Service, the public authorities of Ukraine received new dangerous letters with the subject "Specialized prosecutor's office in the military and defense sphere. Information about the availability of vacancies and their staffing". According to the department, the letters have an attachment in the form of an XLS document containing a macro, the activation of which will lead to the creation and launch of the "write.exe" file on the computer. It may cause the device to be damaged by Cobalt Strike Beacon. The State Intelligence Service associates the activity with the work of the UAC-0056 group, which was already involved in cyberattacks in Ukraine in April and March.    

Disclosure A fake page of Valerii Zaluzhny was created on Twitter

The Twitter social network created a fake page of the Commander-in-Chief Armed Forces of Ukraine, Valery Zaluzhny. The General Staff of the Armed Forces reported that Zaluzhny does not have an official Twitter page.    

Disclosure Fraudsters promise guaranteed payments to all Ukrainians from the European Union

The fake message about social benefits to all Ukrainians with the support of European Union countries is being distributed on the Facebook social network. Fraudulent advertising was spread specifically to the Volyn region.

According to the Brekhunets, two versions of the fake were distributed this time. In the first option, they promised a refund of VAT for the last three years per Resolution 28-9329k. In the second case, each citizen was pledged to the payment of 9,800 hryvnias using a manipulative clip of a video with Volodymyr Zelensky. Next, using the link, you need to enter the bank card's last name, first name, and last six digits. Remember that the card number, CVV code, or PIN code are personal data that cannot be disclosed to anyone, not even bank employees. Resolution 28-9329k, which the authors of the messages refer to, does not exist at all. Using a reference to a non-existent document gives the impression that the offer has legal force. People write that they have been paid different amounts on the fraudulent page in the comments. Still, the state constantly clearly regulates the amounts of funds that are paid out as financial assistance to different categories of citizens. All these signs point to fraud. The goal of fraudsters is to steal card data to gain access to the personal funds of their owners. Previously, we wrote about how fraudsters offered payments from the EU using the fake page of Lesya Nikityuk or provided compensation for VAT refunds in the amount of 7-9 thousand hryvnias, etc.    

Disclosure 100 million hryvnias were stolen from Ukrainians under the guise of social security payments from the EU

The cyber police reported that they exposed a group of nine criminals who, under the guise of social security payments from the EU, gained access to the bank data of more than five thousand Ukrainians. According to law enforcement officials, 100 million hryvnias were stolen from Ukrainians under this scheme. "Nine people created over 400 fake web resources to obtain citizens' banking data. Through the websites, Ukrainians were offered to form an application for the payment of financial assistance from the countries of the European Union. Hackers took surveys and entered bank card details using phishing links. After receiving the data, the attackers made an unauthorized intervention in online banking and withdrew money from the accounts," said the cyber police.

Disclosure The enemy collects data on Ukrainians using a fake chatbot

According to the Center for Combating Disinformation at the NSDC, the occupiers are trying to collect personal data of Ukrainians. According to Viktor Andrusiv, adviser to the Minister of Internal Affairs of Ukraine, the Russian special services created the spektr_robot bot for this purpose.

The Center warns not to use it to protect yourself and provides blocking instructions: you need to enter the name of the bot in the Telegram search bar; go to the settings of the specified bot (without clicking "start"); choose to "complain about" the illegal storage and use of personal data and the use of said data by the occupation authorities of the Russian Federation in the occupied territory of Ukraine against civilians. "We also advise you to send information about the spektr_robot bot to the Cyber ​​Police of Ukraine using the Telegram bot StopRussia | MRIYA @stopdrugsbot," said the Center's message.

Disclosure Fraudsters, under the guise of the "Ukraine 24" logo, are trying to steal payment card data - offering "compensation" for VAT paid along with "assistance from EU countries"

On Facebook, the attackers launched an old fraudulent scheme of alleged "compensation for VAT paid," which now was combined with "assistance from EU countries." This advertisement is promoted on Facebook, using the Ukraine 24 TV channel logo. The message is illustrated by a photo of Volodymyr Zelensky with the "signed decree" captions and "urgent check of cards for payments to each citizen from UAH 9,800" to draw attention to the information in it. The post's description states that "Ukrainians will receive financial assistance from EU countries" and about "VAT refunds for the last three years." To receive "compensation," social network users are offered to go to a third-party site, where they are asked to provide all the card data, they say "for verification." With this card information, attackers will appropriate all the money in the account. A similar scheme was distributed in 2021 when photos of the host of "1 + 1" Alla Mazur were used.

Disclosure Cars were assembled across the country at the "rally in support of Russia" in the Luhansk region

On the day of Russia, the propaganda media published a lot of news about the celebration of this date in the so-called "LPR," including a rally in the occupied part of the region. According to the propagandists, all this should have convinced the audience of Russia's support for the local population. But the fact-checkers from Russia received evidence that in the column of cars that went under the flags of the invader, there were cars with Crimean license plates, from Chuvashia, from other regions of Russia. They suggest that most of them belong to the Russian military. And in the column was an ambulance, which the occupiers seized from Ukrainian medics - and did not even stick the inscription on it in Ukrainian.