SSU busts a 65,000-strong bot army in 2021

Since the start of 2021, the SSU Cyber Security Department has shut down 12 bot farms with a total 65,000 accounts. The farms were spreading anti-Ukrainian, anti-vaccination and other destructive content in social media.

Over 1200 cyber-attacks and cyber incidents against critical infrastructure were contained. The SSU operations in protection of the state’s cyber security led to 427 criminal proceedings. 62 criminals have been brought to criminal responsibility.

One of major special operations of the SSU Cyber Security was busting the activity of a transnational hacker group that used their malware Egregor and Maze to hack over 150 companies in Europe and the USA. The losses caused by the group are estimated to be over USD 80 m.

The SSU dismantled a large-scale criminal scheme of issuing seamen’s permits. Through unauthorized interference in the State Registry, the offenders unlawfully received over USD 150 m every year.

The SSU is tirelessly countering the spread of fakes and pro-Russian propaganda. Over the reporting period, 36 criminal proceedings have been initiated in relation to actions aimed at forceful change or overthrow of the constitutional order, take-over of government and trespass against territorial integrity and inviolability of Ukraine. 23 individuals have been convicted.

The SSU Cyber Security exposed a large-scale agent network that carried out intelligence and subversive activities upon the orders of Russian special services. The aggressor state engaged Ukrainians to create and administer a number of political nation-wide and local Telegram channels: Legitimate, Resident, Cartel, Gossip Girl, etc.

The Service also stopped the destructive activity of Internet agents managed from Russia. The network was active in Dnipropetrovsk, Kherson, Poltava and Zakarpattia regions and instigated social media users to participate in protests and civil disorders.  

83 foreigners involved in separatist propaganda on the Internet have been banned from entry to Ukraine.


The SSU Cyber Security Department submitted proposals to the NSCD regarding sanctions against 187 physical and legal entities. Moreover, the NSDC decision restricted the operation of 500 web resources as they spread destructive information on violation of the constitutional order and infringing on Ukraine’s territorial integrity.

The activity of 81 software developers and suppliers of computer equipment from the aggressor state was banned as they acted to the detriment of Ukraine.

The operation of 3 electronic payment systems and 29 affiliated companies in Ukraine was blocked as they were used for terrorism financing.