SSU shuts down bot farm network with 200,000-user audience that operated to undermine situation in Ukraine

The SSU’s cyber units have exposed an interregional network of bot farms that disseminated disinformation to undermine the socio-political situation in Ukraine.

Primarily, the offenders acted to discredit Ukraine’s top military and political leadership amidst the ongoing war.

They also spread false reports about terrorist attacks in Ukrainian cities and hoax bomb alerts.

To spin the fakes, the group created anonymous accounts on Facebook, Instagram and Twitter with a total audience of almost 200,000 users.

As a result of a multi-stage special operation in several oblasts of Ukraine, the law enforcement dismantled 9 bot farms and identified their organizers.

Among them are active supporters of one of Ukraine’s political parties.

The disinformation ‘cells’ operated in Ternopil, Poltava, Cherkasy, Sumy, Lviv, Chernivtsi, Kharkiv, Mykolaiv and Zakarpattia regions.

The offenders installed hardware and software complexes for ‘growing’ bots at their homes or in office premises.

The items found during the searches include:

  • computer equipment with evidence of the unlawful activity;
  • bank cards for receiving payments;
  • 5,000 SIM cards of Ukrainian mobile operators;
  • GSM gateways and other specialized equipment.

Based on the collected evidence, the bot farm organizers are to be served notices of suspicion under Article 361 of the CCU (unauthorized interference with the operation of electronic computers, automated systems, computer networks or telecommunication networks).

The investigation is underway.

The SSU’s cyber units conducted the special operation jointly with the National Police under the procedural supervision of the Prosecutor General’s Office.