Russian intelligence services have sharply stepped up building websites and social media pages that impersonate Ukrainian state bodies and media, the Security Service of Ukraine (SBU) warned. Moscow uses the fakes to spread disinformation and to steal personal data it can turn into spy recruitment. The SBU says it has already blocked dozens of clones of its own brand.

Counterfeit pages built for propaganda and data theft

The fake sources serve Russian psychological operations and disinformation campaigns, the SBU said on 28 September. Their aim is to destabilize the situation inside Ukraine and damage its position abroad. Russian intelligence also uses them to extract Ukrainians' personal data, the agency said.

Alongside its full-scale invasion, Russia wages war on Ukraine in the cyber domain and through espionage and sabotage. Every agent Russia recruits inside Ukraine can help steer missiles and drones onto targets, and the SBU keeps catching such recruits.

Hacked accounts become recruitment leads

Russians often hack the accounts of users who subscribe to the fake pages and messenger channels, the SBU found. They then use the stolen information for recruitment operations and to collect confidential data.

Moscow is most interested in the combat and operational work of Ukraine's defense and security forces, the agency said. The SBU's cybersecurity department found and blocked more than 50 resources that copied the agency's own branding and positioning.

The fake pages are not Russia's only digital tool. Earlier in September, Anthropic said it had caught Russian spies running a campaign against Kyiv on its Claude AI chatbot.

Explore further

Poland and the Baltics risk Russian sabotage for backing Ukraine, Bloomberg says

How Ukrainians can protect themselves

The SBU urged citizens not to follow suspicious links and to rely only on official sources. Anyone who sees a dubious web address, or gets a message from someone posing as an SBU officer, should call the 1516 hotline, the agency said.

What Russia's recruits are sent to do

The SBU's own reports from the past week show what Russia's recruits are tasked with. A mobilized soldier allegedly recruited by the FSB, Russia's Federal Security Service, tried to direct a Russian missile strike on his own unit in Kharkiv Oblast, the SBU said. His repair battalion restores Ukrainian drones.

A Lviv Oblast resident who worked at a drone production site in western Ukraine was allegedly recruited to guide a missile strike on it, the agency reported. The strike was meant to disrupt the steady supply of strike and reconnaissance drones to Ukrainian troops, the SBU said.

A court also sentenced a 17-year-old agent of Russia's military intelligence (GRU), exposed in November 2024, to 10 years in prison, the SBU announced. She tracked Ukrainian air defenses in Chernihiv Oblast under the cover of taxi rides. She talked to her GRU handler through an anonymous messenger chat.