Russian intelligence services have sharply stepped up building websites and social media pages that impersonate Ukrainian state bodies and media, the Security Service of Ukraine (SBU) warned. Moscow uses the fakes to spread disinformation and to steal personal data it can turn into spy recruitment. The SBU says it has already blocked dozens of clones of its own brand.

Counterfeit pages built for propaganda and data theft

The fake sources serve Russian psychological operations and disinformation campaigns, the SBU said on 28 September. Their aim is to destabilize the situation inside Ukraine and damage its position abroad. Russian intelligence also uses them to extract Ukrainians' personal data, the agency said.

Alongside its full-scale invasion, Russia wages war on Ukraine in the cyber domain and through espionage and sabotage. Every agent Russia recruits inside Ukraine can help steer missiles and drones onto targets, and the SBU keeps catching such recruits.

Hacked accounts become recruitment leads

Russians often hack the accounts of users who subscribe to the fake pages and messenger channels, the SBU found. They then use the stolen information for recruitment operations and to collect confidential data.

Moscow is most interested in the combat and operational work of Ukraine's defense and security forces, the agency said. The SBU's cybersecurity department found and blocked more than 50 resources that copied the agency's own branding and positioning.

The fake pages are not Russia's only digital tool. Earlier in September, Anthropic said it had caught Russian spies running a campaign against Kyiv on its Claude AI chatbot.

Explore further

Poland and the Baltics risk Russian sabotage for backing Ukraine, Bloomberg says

How Ukrainians can protect themselves

The SBU urged citizens not to follow suspicious links and to rely only on official sources. Anyone who sees a dubious web address, or gets a message from someone posing as an SBU officer, should call the 1516 hotline, the agency said.

What Russia's recruits are sent to do

The SBU's own reports from the past week show what Russia's recruits are tasked with. A mobilized soldier allegedly recruited by the FSB, Russia's Federal Security Service, tried to direct a Russian missile strike on his own unit in Kharkiv Oblast, the SBU said. His repair battalion restores Ukrainian drones.

A Lviv Oblast resident who worked at a drone production site in western Ukraine was allegedly recruited to guide a missile strike on it, the agency reported. The strike was meant to disrupt the steady supply of strike and reconnaissance drones to Ukrainian troops, the SBU said.

A court also sentenced a 17-year-old agent of Russia's military intelligence (GRU), exposed in November 2024, to 10 years in prison, the SBU announced. She tracked Ukrainian air defenses in Chernihiv Oblast under the cover of taxi rides. She talked to her GRU handler through an anonymous messenger chat.

The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data.

The breach, in which the hackers stole personal information on “all FBI employees and applicants” including physical addresses, job roles, names of spouses, and medical records, represents a significant national security and counterintelligence threat. Criminals in the same ecosystem as the hacking group, called ShinyHunters, have previously used hacked phone data to track and harass the FBI agents investigating them. When 404 Media first broke news of the breach, the group sent the personal data of an agent and their spouse who they said was investigating the group.

Andy Burnham’s accusation against the Kremlin tells half the story. Domestic extremists amplified by US big tech are part of the same problem

In November 2020, Barack Obama warned of an “epistemological crisis” facing western democracies. Polarisation and radicalisation were corroding trust in established information sources. “If we do not have the capacity to distinguish what’s true from what’s false, then by definition the marketplace of ideas doesn’t work,” the former US president said.

That vulnerability has grown since then. Democracy’s enemies have become more determined to exploit it. This is the threat that Andy Burnham highlighted in a speech at the United Nations this week. The prime minister accused Russia of waging an “industrial-scale assault” on the UK’s information environment using bot armies and fake websites to spread falsehoods, interfere in elections, foment discord and poison inter-community relations.

FBIjobs.gov offline on Wednesday as ShinyHunters group claims to have accessed records of agents and applicants

The FBI is investigating an apparent breach of its jobs website as a criminal hacking group claimed to have accessed “very sensitive data” on nearly all agents and job applicants.

“The FBI is aware of claims regarding unauthorized activity affecting FBIjobs.gov and is currently investigating,” the bureau said in a statement. The website, the main portal for prospective employees to learn about the FBI and initiate the application process, remained offline Wednesday morning.

A high profile hacking group claims it has breached multiple FBI-related services and stolen data “on all FBI employees and applicants.” A representative of the group, called ShinyHunters, told 404 Media the data includes FBI agents’ names, home addresses, phone number, and information on their spouse.

The data breach could be massively significant and may have all sorts of national security and counterintelligence implications. Criminals from the same ecosystem as ShinyHunters have previously used hacked data like phone records to track, intimidate, and harass the FBI agents investigating them. The highly sensitive data could also be a boon to foreign intelligence agencies who want to better understand how one of the most important law enforcement and intelligence agencies in the U.S. operates. And if the data fell into the hands of more criminals, FBI agents and their spouses could face serious threats to their safety.

“We hacked the FBI. We hold data on all FBI employees and applicants,” the representative of the group told 404 Media.