SSU shuts down 2 bot farms that spread destructive content in Ukraine

The SSU Cyber Department has dismantled another 2 bot farms: in Kyiv region and in Odesa. The ‘bot army’ of almost 7,000 accounts was used to spread destructive content aiming to:

• discredit the Defence Forces of Ukraine and the state’s leadership;
• justify russia’s armed aggression;
• destabilize social and political situation in Ukraine.

In Kyiv region:

According to the investigation, a 5,000-account-stong bot farm was created and administered by a 24-year-old native of Zaporizhzhia region, who currently lives in Kyiv region.

For secrecy, he registered fake accounts through russian e-mail services and virtual numbers of russian and belarusian mobile operators. In some cases, he used forged documents of Ukrainian citizens for verification.

The organizer rented out or sold ‘ready-made’ bots to interested parties, accepting payment to a bank card.

It was established that his ‘clients’ included representatives of the PR departments of political parties and russian citizens promoting destructive and provocative material in Ukrainian information space.

The law enforcement conducted a search at the administrator’s home and seized computer equipment with evidence of unlawful activity and special software.

The investigators will notify the bot farm organizer of suspicion under Article 361.1 of the CCU (unauthorized interference in operation of information (automated), electronic communication, information and communication systems, electronic communication networks).

In Odesa region:

The bot farm was organized by four locals.

Other Topics of Interest

Russian Attacks on Ukraine Energy Could Trigger ’Tipping Point’: UN

With Russia’s full-scale invasion approaching the 1,000-day mark, 3.7 million people have already been displaced inside Ukraine and around 6.7 million have fled as refugees, according to UN figures.

Their main activity was creation and promotion of accounts in social networks and messengers. The group used the bots to spread panic in the region, for example, by disseminating disinformation and fake news from the front.

As a result of operational and investigative actions, the SSU established that the group’s ‘clients’ were from russia.

During the searches carried out at the suspect’s homes, the law enforcement discovered and seized:

• computer equipment, 4 servers, more than 250 USB modems and mobile phones with evidence of unlawful activity;
• bank cards, to which their ‘clients’ paid;
• over 400 SIM cards of mobile operators.

The seized items have been sent for examination. The investigation is ongoing.

After the examinations, investigators will notify the involved of suspicion under two articles of the CCU:

• 111-1.1 (collaboration);
• 361.1 (unauthorized interference in operation of computers, automated systems, computer networks or telecommunication networks).

The operations were carried out by the SSU together with the National Police under the procedural supervision of Odesa and Kyiv Region Prosecutor’s Offices.