Support The Moscow Times!

Pro-Ukrainian Hackers Target Russian Defense Contractors – Reuters

Revan Pratama / unsplash

Several Russian defense contractors specializing in air defense, advanced electronics and other weaponry have been targeted by a pro-Ukrainian cyberespionage group using AI-generated documents as decoys, Reuters reported Friday.

The attacks discovered by U.S.-based cybersecurity company Intezer were likely conducted by a group known as Paper Werewolf or GOFFEE, senior security researcher Nicole Fishbein told Reuters.

The group, active since 2022, focuses almost exclusively on Russian targets and is considered pro-Ukrainian within cybersecurity circles.

In one instance, the group used a document purporting to be a concert invitation for senior military officers that was apparently generated by artificial intelligence.

Another document sent under the guise of Russia’s Industry and Trade Ministry requested justification of prices according to state pricing regulations.

Paper Werewolf's use of AI-generated documents shows how “accessible AI tools can be repurposed for malicious goals” as well as how “emerging technologies can lower the barrier for sophisticated attacks and why misuse, not the technology itself, remains the core problem,” Fishbein said.

Russian cyber policy researcher Oleg Shakirov told Reuters that the choice of targets highlights the attackers’ interest in Russia’s defense industry.

Access to internal data from major defense contractors could reveal information on “everything from scopes to air defense systems, but also into defense supply chains and R&D processes,” he said.

Sign up for our free weekly newsletter

Our weekly newsletter contains a hand-picked selection of news, features, analysis and more from The Moscow Times. You will receive it in your mailbox every Friday. Never miss the latest news from Russia. Preview
Subscribers agree to the Privacy Policy

A Message from The Moscow Times:

Dear readers,

We are facing unprecedented challenges. Russia's Prosecutor General's Office has designated The Moscow Times as an "undesirable" organization, criminalizing our work and putting our staff at risk of prosecution. This follows our earlier unjust labeling as a "foreign agent."

These actions are direct attempts to silence independent journalism in Russia. The authorities claim our work "discredits the decisions of the Russian leadership." We see things differently: we strive to provide accurate, unbiased reporting on Russia.

We, the journalists of The Moscow Times, refuse to be silenced. But to continue our work, we need your help.

Your support, no matter how small, makes a world of difference. If you can, please support us monthly starting from just $2. It's quick to set up, and every contribution makes a significant impact.

By supporting The Moscow Times, you're defending open, independent journalism in the face of repression. Thank you for standing with us.

Once
Monthly
Annual
Continue
paiment methods
Not ready to support today?
Remind me later.

Read more