Information Warfare — 2026-10-02

SBU Warns Russia Sharply Increasing Fake Ukrainian Government Websites to Recruit Agents and Extract Personal Data for Missile Targeting

BLUFRussia's imitation-site pipeline links low-cost social engineering to missile targeting data, and Ukraine's whack-a-mole takedowns cannot outpace an adversary that rebuilds cloned pages in hours.

The Security Service of Ukraine (SBU) said on its Telegram channel on September 28 that Russian intelligence services have increased creation of websites and social media pages imitating Ukrainian government bodies and domestic media 123. The SBU stated the pages serve information-psychological operations and disinformation, and that Russian services hack accounts of users who follow them to steal personal data later used for recruitment 13. The SBU said the data sought centers on the combat and operational activities of Ukraine's defense and security forces 12. Its Cybersecurity Department blocked more than 50 sites copying SBU branding, and the SBU directed citizens to a hotline, which Euromaidan Press gave as 1516 14.

Analysis
Russian services are building a pipeline that turns ordinary readers of imitation government and media pages into recruitment leads, so Ukrainian counterintelligence must treat follower lists of impostor channels as a targeting surface. The SBU's focus on the combat and operational activity of defense and security forces points to battlefield and infrastructure targeting as the end use. Blocking 50-plus SBU-branded sites addresses only the visible layer, since cloned pages are cheap to rebuild and account compromise happens off-platform. The "sharp increase" rests solely on the SBU's own characterization, with no published baseline. All four reports restate one Telegram statement, with no independent technical verification. The announcement may instead be partly a deterrence and trust-building message rather than evidence of a measurable change in Russian activity.

5 sources