Russian intelligence services have sharply stepped up building websites and social media pages that impersonate Ukrainian state bodies and media, the Security Service of Ukraine (SBU) warned. Moscow uses the fakes to spread disinformation and to steal personal data it can turn into spy recruitment. The SBU says it has already blocked dozens of clones of its own brand.

Counterfeit pages built for propaganda and data theft

The fake sources serve Russian psychological operations and disinformation campaigns, the SBU said on 28 September. Their aim is to destabilize the situation inside Ukraine and damage its position abroad. Russian intelligence also uses them to extract Ukrainians' personal data, the agency said.

Alongside its full-scale invasion, Russia wages war on Ukraine in the cyber domain and through espionage and sabotage. Every agent Russia recruits inside Ukraine can help steer missiles and drones onto targets, and the SBU keeps catching such recruits.

Hacked accounts become recruitment leads

Russians often hack the accounts of users who subscribe to the fake pages and messenger channels, the SBU found. They then use the stolen information for recruitment operations and to collect confidential data.

Moscow is most interested in the combat and operational work of Ukraine's defense and security forces, the agency said. The SBU's cybersecurity department found and blocked more than 50 resources that copied the agency's own branding and positioning.

The fake pages are not Russia's only digital tool. Earlier in September, Anthropic said it had caught Russian spies running a campaign against Kyiv on its Claude AI chatbot.

Explore further

Poland and the Baltics risk Russian sabotage for backing Ukraine, Bloomberg says

How Ukrainians can protect themselves

The SBU urged citizens not to follow suspicious links and to rely only on official sources. Anyone who sees a dubious web address, or gets a message from someone posing as an SBU officer, should call the 1516 hotline, the agency said.

What Russia's recruits are sent to do

The SBU's own reports from the past week show what Russia's recruits are tasked with. A mobilized soldier allegedly recruited by the FSB, Russia's Federal Security Service, tried to direct a Russian missile strike on his own unit in Kharkiv Oblast, the SBU said. His repair battalion restores Ukrainian drones.

A Lviv Oblast resident who worked at a drone production site in western Ukraine was allegedly recruited to guide a missile strike on it, the agency reported. The strike was meant to disrupt the steady supply of strike and reconnaissance drones to Ukrainian troops, the SBU said.

A court also sentenced a 17-year-old agent of Russia's military intelligence (GRU), exposed in November 2024, to 10 years in prison, the SBU announced. She tracked Ukrainian air defenses in Chernihiv Oblast under the cover of taxi rides. She talked to her GRU handler through an anonymous messenger chat.

OpenAI, the US company behind ChatGPT, will hand Ukraine's government free access to a cyber-defense system and its most powerful artificial-intelligence (AI) model, Ukrainian defense outlet Militarnyi reported. The company unveiled the deal alongside the UN General Assembly, pitching it as a cyber shield for the hospitals and power plants Russia keeps targeting.

Russia's war on Ukraine runs through wires as much as skies. Its hackers have hammered energy, transport, and defense networks for years, on top of the blackouts its missiles already force on Ukrainian cities—and Western tech firms have kept stepping in to help hold the line.

What the Daybreak system does

The tool is called Daybreak. It scans digital systems, finds their weak points fast, and helps specialists close them, the report said. Daybreak handles the whole job on its own—a loop of inventory, detection, verification, assignment, remediation, and confirming the fix held.

The system is meant to shield civilian infrastructure, hospitals and power stations among it, from cyberattacks, BBC reported. Ukraine's Computer Emergency Response Team (CERT-UA) logged nearly 6,000 cyberattacks in 2025.

Explore further

14 killed as Russia unleashes massive overnight barrage on unprotected Kyiv, striking homes, hospital, school and railway infrastructure

Ukraine also gets OpenAI's top model

The agreement opens access to GPT 5.6 Sol, OpenAI's flagship and strongest model. The company built it for complex professional work—programming, research, science, and cybersecurity, the report said. Both come as part of one agreement between OpenAI and Kyiv.

George Osborne—Britain's former chancellor and now Head of OpenAI for Countries—put the aim plainly.

"Protecting civilian infrastructure means defending it against both physical and digital attacks, so people can continue to live, work and access essential services," he said.

Independent analysts called the deal useful but not unprecedented. Rafe Pilling of cyber firm Sophos said it could serve as a force multiplier for a Ukrainian cyber defense that is already highly capable but heavily burdened. Jamie MacColl of the Royal United Services Institute noted that Western tech firms have been supporting Ukraine for some time, partly altruistically but also because they gain valuable intelligence from an active conflict, and that Ukraine already has access to AI tools from OpenAI's competitors, including Google. The same frontier AI capabilities cut both ways—spotting weaknesses helps defenders block hackers and attackers find a way in.

OpenAI's rival Anthropic has restricted access to its most powerful cyber models on those grounds, while OpenAI has opened them to some European firms and UK banks, BBC reported.

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has imposed sanctions on the Russian IT company Aeza Group for hosting infostealers and ransomware operations, according to a press release published on July 1.

Restrictions were imposed on two subsidiaries and four members of the Aeza Group's management as well, the statement read.

The U.S. Treasury Department characterized Aeza as a "bulletproof hosting service" that provided services to the Meduza and Lumma infostealers, as well as to the BianLian and RedLine ransomware groups.

Aeza Group also hosted the Russian-language darknet marketplace for illegal drugs, BlackSprut.

According to the U.S. Treasury Department, Aeza Group sells access to specialized servers that help cybercriminals avoid detection and resist attempts by law enforcement agencies to suppress their criminal activities.

Sanctions against the company involve blocking all assets of the named individuals located in the U.S. Any legal entities that are owned, directly or indirectly, individually or in the aggregate, by 50% or more by one or more of the mentioned individuals are also blocked.

Violation of the U.S. sanctions may result in civil or criminal penalties.

The news comes as Ukraine continues to call on the U.S. to strengthen sanctions against Russia. Despite Russia's refusal to accept the ceasefire proposal and its army's ongoing advance across Ukrainian territory, the Trump administration has not yet imposed new restrictions.

Meanwhile, Senators Lindsey Graham (R) and Richard Blumenthal (D) introduced a bill to impose a 500% tariff on imports from countries that continue to buy Russian oil and raw materials.

The legislation currently has broad bipartisan support, with 82 out of 100 U.S. senators backing it. U.S. House Speaker Mike Johnson also voiced his support for the bill.

Ukraine’s new interceptor UAVs are starting to knock Russia’s long-range Shahed drones out of the sky

Russia’s Shahed drone swarms are pummeling Ukraine on a nightly basis, inflicting ever more death and destruction in cities that had managed to carve out some sense of normalcy amid wartime. Civilian alarm has grown. With traditional air defense stockpiles running low, the government is banking on newly created

The Kyiv IndependentKollen Post

Ukraine's security service (SBU) is teaching teenagers how to avoid recruitment by Russian intelligence online, the New York Times (NYT) reported on June 21.

"Maybe not all of these special operations are reported in the media — but believe me, the enemy is not sleeping... They are working actively and carrying out illegal activities, as strange as it may sound, directly inside your phones," SBU spokesperson Roksolana Yavorska-Isaienko told students.

Approximately 22% of Ukrainians recruited by Russian intelligence to conduct sabotage or terrorist attacks are minors, Artem Dekhtiarenko, SBU spokesperson, said on April 2.

Russian intelligence attempts to recruit Ukrainian civilians online, offering easy money in return for sharing sensitive data or preparing sabotage or terrorist acts.

Russian intelligence finds its recruits using social platforms, including Telegram, Discord, and TikTok.

Unsuspecting teenagers are often offered hundreds or even thousands of dollars to conduct simpler tasks such as delivering packages or taking photos of energy sites, the NYT reports.

More serious tasks are commonly assigned to teenagers once they have been blackmailed for conducting less serious operations beforehand or when their phones are hacked to reveal compromising photos.

Russian intelligence is actively attempting to recruit Ukrainian nationals for illegal operations across the EU, Ukraine's military intelligence agency (HUR) said on June 2.

"The recruitment of Ukrainians for hostile operations in Europe is yet another tool of hybrid aggression that the Russian Federation is waging against Ukraine and the entire European community," HUR said.

The SBU caught a Russian agent as he was filming a military airfield in preparation for a Russian strike, the agency reported on June 15.

The Russian Federal Security Service (FSB) recruited the unemployed 24-year-old via the Telegram messaging app to collect coordinates for air attacks on airfields and logistic depots, the SBU said.

The Russian FSB allegedly offered "easy money" and instructed the recruit to find military facilities and carry out reconnaissance on the ground.

Love, sex, survival — Ukrainian author on how war shapes intimacy in Ukraine

In Ukraine, Russia’s war of aggression has upended not just borders but the country’s cultural landscape. Conversations about identity, gender, and sexuality have gained new urgency. Women are increasingly stepping into combat roles once dominated by men, while relationships can dissolve as quickly as they form. Many people

The Kyiv IndependentKate Tsurkan