Adversary Intelligence — 2026-07-05

Lithuanian Presidents Security Adviser Targeted by Kremlin Impersonation of Ukrainian Official

BLUFMoscow will likely direct further AI voice-spoofing operations against Baltic and Ukrainian security officials in the coming months, exploiting a technique that nearly bypassed Lithuanian verification protocols.

Deividas Matulionis, national security adviser to Lithuanian President Gitanas Nausėda, said he received a call in May from someone impersonating Rustem Umerov, Secretary of Ukraine's National Security and Defence Council, proposing regular contact with the Baltic presidents 12. He said the caller's voice was closely mimicked, reportedly through artificial intelligence, and that he was nearly certain he was speaking with the real Umerov 123. Russian pranksters Vovan and Lexus published a recording of the call 23, and Lithuanian checks subsequently found the number matched Umerov's genuine one only in its last four digits 12. Matulionis said no sensitive information was disclosed and that Lithuania alerted Ukrainian counterparts, after which Umerov publicly confirmed the impersonation and warned other European officials of a broader campaign 12.

Analysis
The impersonation likely reflects a coordinated Kremlin voice-spoofing campaign against Baltic and Ukrainian security officials rather than an isolated prank, since Umerov's own warning to European counterparts points to parallel attempts elsewhere. Vovan and Lexus may instead have acted independently for publicity, with the Kremlin attribution resting on Matulionis's own inference rather than confirmed tasking. Confidence in that attribution is moderate, given reporting traces to a single primary account with secondary outlets reproducing it without independent corroboration. Lithuania's quick catch of the spoofed number and confirmation that no sensitive material moved likely reflects verification habits already tightened after earlier prankster incidents targeting Western officials, and similar AI-voice approaches against Baltic or Ukrainian security staff are likely over the coming months given the operation's demonstrated technical maturity, a pattern that would push Baltic and Ukrainian services toward mandatory callback-verification protocols if further attempts confirm coordination.

5 sources