Pro-Ukrainian Hackers Use AI-Generated Documents in Cyberattacks on Russian Defense Firms
Cybersecurity researchers discovered that a pro-Ukrainian hacking group used AI-generated fake documents to target Russian defense firms in a cyber espionage campaign. The decoy documents, created with accessible AI tools, appeared to be official invitations and government requests designed to compromise the companies' security.
What happened
Russian technology companies working on air defense, sensitive electronics and other defense applications were targeted in recent weeks by a cyber espionage group using AI-generated decoy documents, according to cybersecurity firm Intezer.
The campaign is likely the work of a hacking group tracked as either "Paper Werewolf" or GOFFEE, a group active since 2022 that is widely thought to be pro-Ukrainian and has focused nearly all of its efforts on Russian targets.
In one case, an apparently AI-generated document purported to be an invitation, written in Russian, to a concert for high-ranking officers. In another case, a document purported to be sent from the Ministry of Industry and Trade of the Russian Federation, asking for price justification under government regulations around pricing.
Index analysis
The group's use of AI-generated decoy documents demonstrates how "accessible AI tools can be repurposed for malicious goals," according to senior security researcher Nicole Fishbein, and shows how emerging technologies can lower the barrier for sophisticated attacks.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.