Adversary Intelligence — 2026-07-06

Russian Intelligence-Linked Pranksters Penetrate Greek National Security Adviser Communications in Social Engineering Operation

BLUFDokos is unlikely to lose his post by August 4, as Athens has chosen to frame the breach as an external hybrid attack, but the unresolved dispute over whether basic social engineering or AI enabled access leaves the government's defensive narrative exposed to further erosion.

Russian pranksters Vladimir Kuznetsov ("Vovan") and his partner "Lexus" tricked Greek National Security Adviser Thanos Dokos into a video call on Wednesday by posing as Rustem Umerov, head of Ukrainian President Volodymyr Zelenskyy's national security council 12. During the call Dokos discussed a recent Ukrainian drone found off Lefkada, Greek election timing in the coming months, and a planned trip by the EYP intelligence chief to Kyiv, while the pranksters, posing as Ukrainian officials, claimed Ukraine's defense minister had "gone crazy," was ignoring Zelenskyy, and would keep sending drones into Greek waters to strike Russian ships and oligarchs' yachts 23. The Greek government characterized the incident as a "hybrid attack" using "highly advanced artificial intelligence" and said no classified information was disclosed 14, an account Kuznetsov disputed, saying the pranksters gained access with a simple email from a Gmail account that Dokos' office answered 34. Dokos, appearing on SKAI TV, said he believed he was speaking live with Umerov, had no indication the contact was fraudulent, and grew suspicious only near the end of the call when his interlocutor pressed unusually hard on the Lefkada drone issue 3. Opposition parties including PASOK, SYRIZA, KKE, Greek Solution and Niki, along with former Prime Minister Antonis Samaras, called for Dokos' resignation, while the government said he would remain in his post 23.

Analysis
Dokos' resignation or removal is unlikely by August 4, since the Mitsotakis government has explicitly rejected five-party opposition demands and framed the incident as an external hybrid attack rather than an internal failure. Low confidence reflects the single-cluster Greek and Cypriot sourcing without independent corroboration from Ukrainian, American, or European outlets on the government's internal deliberations. The dispute over whether the breach involved sophisticated AI or a simple Gmail-based approach remains unresolved and could generate further political pressure within the window. The operation belongs alongside the Latvian espionage prosecution and UK chemical-weapons sanctions this cycle as concurrent demonstrations of Russia's hybrid-domain probing of NATO members ahead of the Ankara summit.
6 sources
  1. National Security Advisor of Greek PM falls victim to Russian pranksters (Video) - Keep Talking Greece
  2. Greek Security Chief Duped by Russian Pranksters; Opposition Demands Resignation - GreekReporter.com
  3. Russian Pranksters Mock Athens Over Dokos Hoax Call - To Vima
  4. Russian Pranksters Target Greek National Security Adviser - Greek City Times
  5. Φάρσα σε Θάνο Ντόκο: Υβριδική επίθεση με χρήση AI - Δεν διέρρευσαν απόρρητα - Sigmalive
  6. Russian Pranksters Mock Athens Over Dokos Hoax Call - To Vima

View in full brief →

UNCLASSIFIED // OPEN SOURCE