Ukraine’s Security Service (SBU) and National Police shut down a Kyiv-based network of several dozen people who allegedly used fake cryptocurrency investment platforms and malicious code to steal digital assets from citizens of EU countries, the SBU said on 1 September.

Investigators identified the alleged organizer as a 25-year-old Kyiv IT specialist, according to the SBU. The case reaches beyond Ukraine because the agency says the alleged victims were EU citizens. The agency said the network’s monthly turnover from funds obtained illegally could reach $1 million during its most lucrative periods.

The SBU said investigators had documented alleged crimes by every member of the group. However, its statement did not specify how long the network had operated, how many EU citizens were affected, which countries they lived in, or the total amount allegedly stolen.

The agency did not name any foreign law enforcement partners involved.

How the crypto ring operated

The alleged organizer of the crypto ring recruited other tech workers in the capital, the SBU said. Posing as cryptocurrency-platform representatives, they offered targets seemingly profitable ways to invest in digital assets.

The network found victims by posting about supposedly lucrative crypto projects in popular Telegram channels, then showed them fabricated trading results and fake profits to make the operation look legitimate, investigators said.

Engaged targets were sent a link to a counterfeit site that mimicked a real crypto service and were persuaded to connect their wallets and approve a transaction, the SBU said. The site carried malicious code called a “drainer” that, the agency said, let the operators withdraw the victims’ assets to addresses they controlled—emptying the wallets.

During 23 searches of the suspects’ offices and homes, officers seized phones, computers, money believed to be criminal proceeds, and 16 high-end cars, including Porsche, BMW, and Mercedes-Benz models, the SBU said.

Authorities were still deciding whether to serve notices of suspicion, while the investigation continued under the Prosecutor General’s Office, the SBU said. Those involved could face up to 12 years in prison with confiscation of property.

Ukraine’s role in combating cross-border cybercrime

Ukraine has previously joined with foreign agencies to pursue cross-border cyber threats. In April, the SBU said it worked with the FBI, EU law enforcement, and Polish counterintelligence to disrupt Russian military-intelligence spying through hacked routers. The operation blocked more than 100 servers and removed hundreds of routers in Ukraine from Russian control.

Ukraine’s General Staff confirmed that Ukrainian forces struck the Novatek-Ust-Luga production complex in Russia’s Leningrad Oblast on 1 September, saying the target was hit and a fire followed. The scale of the damage remains under assessment.

Russian authorities initially acknowledged damage and a fire but did not identify the facility. Ukraine’s military intelligence later named the Novatek complex as the target, and the General Staff has now confirmed the strike and said the facility supports Russia’s armed forces. It did not explain how, nor say whether, production was disrupted.

Ukraine’s military intelligence agency, HUR, was first to identify the target, saying on 1 September that its operators had struck the complex alongside Ukraine’s Defense Forces in a joint deep-strike operation. Key elements of the site’s oil-processing installation and other equipment were hit, and a large fire broke out, the agency said. The General Staff confirmed the strike the following day.

The Novatek complex at Ust-Luga separates stable gas condensate—a liquid produced during natural gas extraction—into fuel and petroleum components and handles their shipment through the Baltic port. Its design capacity exceeds six million tons a year, the General Staff said. The plant produces light and heavy naphtha, kerosene, a diesel fraction, and a marine-fuel component.

Explore further

Drone attack damages Russia’s Baltic oil port as drone crosses Latvia into Estonia

Ukraine has repeatedly targeted the Ust-Luga port

Before Ukraine named the target, Leningrad Oblast Governor Alexander Drozdenko acknowledged infrastructure damage and a fire at Ust-Luga on 1 September, but did not identify the specific facility. HUR subsequently named the Novatek complex as the target and reported damage to key equipment.

The operation continued Ukraine’s campaign against Ust-Luga’s energy and port infrastructure. Ukrainian agencies confirmed the first strike on Novatek’s complex overnight on 24–25 March. Drones returned on 31 March, setting fuel-storage tanks ablaze, damaging a pier and pumping equipment, and temporarily halting port operations, followed by another reported attack on 7 April. Ukrainian drones last hit the port on 14 August, marking the sixth such attack there in 2026.

Whether or not US president fits the definition of a Russian asset, his actions align closely with the Kremlin’s interests

• Don’t get This Is Europe delivered to your inbox? Sign up here

Could Donald Trump be a Russian asset? The headline on a review in the Guardian of my new book Betrayal has provoked heated international debate. Written by the historian Lawrence Freedman, the piece generated thousands of comments from across Europe and beyond on social media. Many people responded with a single word: “Duh!”

Trump’s relationship with Vladimir Putin is the biggest mystery in international politics. In 2017 I wrote a book called Collusion, which set out Moscow’s operation to support and cultivate Trump, going back decades. The US president, of course, denies links with Russia. But in his second term, his behaviour towards Putin has been as weird and perplexing as during his first.

On 1 September, Russian President Vladimir Putin said during a conversation with journalists that Russian troops had 12 km left to reach Sumy. Censor.NET estimated from DeepState’s map that Russian forces were approximately 17 km from Sumy’s administrative boundary.

Russian military commanders have systematically exaggerated their gains on the battlefield. The Institute for the Study of War (ISW) describes such claims as part of a Kremlin information campaign aimed at creating the impression of major Russian gains. In this case, the Russian president cited exaggerated gains that, compared with his previous claims, appear to be a setback.

What Putin said

“The ‘North’ group of forces continues to create a security belt along the Russian-Ukrainian border in the border areas of the Sumy region... There are 12 km left to Sumy, to the Sumy ring road,” Putin said during the press conference.

Censor.NET reported that Russian forces were about 17 km from Sumy without specifying the reference point, while Putin did not say which section of the city’s ring road his 12 km figure referred to.

Putin previously gave a different distance

On 28 June, during an interview with Russian propagandist Pavel Zarubin, Putin said that Russian troops had “about 10.5 km” left to reach Sumy. At the time, he also explained the offensive as the creation of a “security zone” along Russia’s border.

Putin’s claimed distance to Sumy therefore increased by approximately 1.5 km in just over two months, contradicting the Kremlin’s portrayal of a continuing advance.

Other exaggerations

In July 2026, Putin claimed that Russian forces had “completely captured” Kostiantynivka. Ukraine’s General Staff rejected the claim, saying Ukrainian forces continued defensive operations in the city. ISW also said some videos of Russian flags being raised in Kostiantynivka were likely AI-altered.

On 2 December 2025, Putin claimed that Russian forces had captured Pokrovsk in Donetsk Oblast. ISW found no evidence confirming the city’s complete capture and assessed that its fall would not enable Moscow to achieve a significant breakthrough.

Russian propagandists used the Matryoshka disinformation network to circulate a digitally altered front page of the Polish regional weekly Przegląd Regionalny warning of a “hungry fall and winter” in Ukraine, the country’s Center for Countering Disinformation reported.

The fake turns genuine anxiety over Russian attacks on warehouses and food logistics into an unsupported prediction of mass starvation. The Center said Matryoshka routinely disguises fabricated material as reporting by established Western outlets, lending Russian narratives borrowed credibility while creating the impression that foreign media consider Ukraine’s situation hopeless.

The fabricated Przegląd Regionalny front page claimed Russian strikes would push 63% of Ukrainians to the brink of famine over a “hungry autumn and winter.” No such article ran—the real front page of that issue looked entirely different, and the circulated image was built using graphics-editing software, the Center said.

The image spread through Matryoshka, a network that dresses invented content in the mastheads of recognized Western outlets. In this case, the campaign was meant to frighten Ukrainians and weaken public confidence, according to the Center.

Although it impersonated a Polish outlet, the Center described Ukrainians—not Polish readers—as the campaign’s target: the Polish masthead supplied an apparently independent foreign voice for a Russian narrative.

The fake works because the disruption it points to is real. Russian attacks on warehouses and food logistics had destroyed up to 90% of Ukraine’s modern food storage capacity, and suppliers were moving stocks and changing delivery routes and storage methods in response, Agriculture Minister Taras Vysotskyi said on 28 August 2026, according to Interfax-Ukraine.

Supermarket chain ATB has temporarily capped purchases of certain essential goods at 6 units of any single product per customer, citing both Russian strikes and resellers buying in bulk.

What the fake predicts, though, is not what officials expect. Presidential defense-technology adviser Serhii “Flash” Beskrestnov urged Ukrainians not to panic and said a systemic food shortage was not expected, ZN.UA reported.

How Russia spreads disinformation in Poland

Russia has repeatedly exploited Poland’s information space to turn political, economic, and security anxieties against Ukraine. Polish Deputy Prime Minister Krzysztof Gawkowski said Russian intelligence had offered Poles €3,000–€4,000 ($3,500–$4,600) to spread disinformation before the 2025 presidential election.

After Russian drones entered Poland that September, Prime Minister Donald Tusk said the Kremlin was using real fears and emotions to fuel anti-Ukrainian sentiment. False claims about Ukrainians living off Polish taxpayers have also fed hostility as bilateral relations frayed.

The head of the Moscow-based Russian Orthodox Church, Patriarch Kirill, personally consecrated Igor Pashentsev as bishop of Skadovsk and Oleshky after occupation authorities appointed him to lead the Skadovsk diocese, the Ukrainian outlet IPC-South reported, citing Russian sources.

The appointment advances the Russian church’s incorporation of occupied Ukrainian parishes into a Moscow-controlled structure created after Russia seized the area. Pashentsev will oversee churches across five occupied Kherson districts through a diocese IPC-South describes as operating illegally on Ukrainian territory.

Ukraine banned the Moscow-based Russian Orthodox Church from operating in the country in 2024 and established a court process for suspending Ukrainian religious groups that fail to sever Russian control. The measure targets Russian control, not Orthodox Christianity.

IPC-South says Pashentsev graduated from a Soviet military command school of chemical defense and served in the Soviet Defense Ministry’s 12th Main Directorate from 1981 to 1992. The Federation of American Scientists says the directorate stored, maintained, transported, and secured the Soviet Union's nuclear arsenal, but public records do not identify his duties there.

Ordained in 1993, Pashentsev completed the Moscow Theological Seminary in 1998, later led a Tambov diocesan office for relations with the armed forces and detention facilities, and served in the Barysh diocese. Known in the church as Joseph, he held the rank of archimandrite—a senior Orthodox monk—before his consecration.

During a Dormition liturgy—a major Orthodox feast honoring the Virgin Mary—Kirill gave Pashentsev an episcopal staff symbolizing a bishop’s authority and delivered instructions before his ministry began, Russian church accounts relayed by IPC-South said.

The Russian Orthodox Church created the Skadovsk diocese—a regional church administration—on 27 December 2023 after the occupation made it impossible for the existing Kherson diocese to oversee parishes on the Dnipro’s left bank. The new body incorporated parishes across the occupied Oleshky, Hola Prystan, Kalanchak, Skadovsk, and Chaplynka districts. IPC-South describes it as operating illegally on Ukrainian territory.

Russia weaponizes church control while suppressing other faiths

Pashentsev’s appointment is part of the Moscow Patriarchate’s wider effort to control religious life in occupied Ukraine. Religious communities that reject Kremlin authority face interrogations, threats, closures, and confiscation.

Ukraine’s Security Service has accused church structures of recruiting and training mercenaries for Russia’s military. The Institute for the Study of War, a US-based think tank, says occupation authorities also arbitrarily detain clergy and destroy places of worship while suppressing independent Ukrainian religious identity.