SSU shuts down bot farms that helped russia spin kremlin fakes and hack Ukrainian defenders’ phones

The SSU has dismantled two bot farms operating in Zhytomyr and in Dnipro. The persons involved in their operation helped russian intelligence services to hack the phones of Ukrainian servicemen and spread kremlin propaganda.

In Zhytomyr region:

jointly with the National Police, the SSU uncovered a woman from Korosten who, on enemy orders, massively registered virtual mobile numbers of Ukrainian operators and anonymous accounts in Telegram.

She sold or leased the activated ‘accounts’ through specialized russian Internet platforms.

Later, the russian intelligence used these numbers to hack into the phones of Ukrainian defenders.

To do this, they sent phishing emails to the devices of the Defence Forces servicemen from anonymous numbers and Internet addresses registered in Ukraine.

When files with malware were opened, a spyware virus was automatically downloaded to the phone, collecting confidential data.

The enemy also used the anonymous bot farm accounts to spread kremlin narratives supposedly on behalf of ordinary Ukrainian citizens.

According to the investigation, the woman installed the specialized software in her flat and registered over 600 mobile numbers. The payments for selling them was transferred to her crypto wallet.

The perpetrator was notified of suspicion under Article 361.5 of the CCU (unauthorized interference with the operation of information and communication systems, electronic communication networks).

In Dnipro:

A 30-year-old local resident was detained for registering almost 15,000 fictitious accounts in various social networks and messengers. SIM cards of Ukrainian mobile operators were used for this.

The man sold the accounts on Darknet forums, where his main customers were russian intelligence services.

Now, he is charged with committing a crime under Article 110.1 of the CCU (encroachment on Ukraine’s territorial integrity and inviolability).

The investigations are ongoing.

The operations were carried out by the SSU Offices in Zhytomyr and Dnipropetrovsk regions jointly with the Defence Intelligence of Ukraine and the National Police under the procedural supervision of the regional prosecutor’s offices.