Virtual Event: Threat Detection and Incident Response Summit - Watch Sessions
Connect with us

Hi, what are you looking for?



Facebook Battles Cyber Campaigns Targeting Ukraine

Facebook’s parent company Meta on Thursday said Russian state actors and others are relentlessly trying to use the social network against the Ukraine with deception, hacking and coordinated bullying campaigns.

Facebook’s parent company Meta on Thursday said Russian state actors and others are relentlessly trying to use the social network against the Ukraine with deception, hacking and coordinated bullying campaigns.

Social media networks have become one of the fronts in Russia’s invasion of Ukraine, home to sometimes misleading information but also real-time monitoring of one of the biggest geopolitical crises in decades.

“Since the start of the Russian invasion of Ukraine, our teams have been on high alert to detect and disrupt threats and platform abuse, including attempts to come back by networks we removed before,” Meta said in its latest threat report.

A spike in activity aimed at Ukraine shortly before it was invaded by Russia in February has become an entrenched battle, according to Meta influence operations threat intelligence team leader Ben Nimmo.

[ Read: Threat of Local Cyber Operations Escalating Into Global Cyberwar ]

Tactics have included using bogus accounts to spread false stories such as Ukrainian troops surrendering or call for a street protest in Warsaw against the Polish government.

Meta said it disrupted a network of about 200 Facebook accounts in Russia that were working together to falsely accuse people of violating the social network’s policies to get posts about Ukraine removed.

Advertisement. Scroll to continue reading.

Those involved tried to disguise their collaboration as a cooking-themed group, according to the social network.

“The majority of these fictitious reports focused on people in Ukraine and Russia,” Meta said in the report.

“The people behind this activity relied on fake, authentic, and duplicate accounts to submit hundreds – in some cases, thousands – of complaints against their targets.”

Such coordinated bullying campaigns are referred to as “mobbing.”

– Ghostwriter –

Meanwhile, government-linked “actors” from Russia and its ally Belarus have engaged in cyber espionage and covert influence operations online, according to Meta.

That malicious activity took aim at the Ukrainian telecom and defense sectors along with tech platforms, journalists and activists, the report indicated.

Meta executives said they have seen a “further spike” in attacks by a Russia-linked hacker-group known as Ghostwriter.

Ghostwriter’s typical tactic is to target victims with “phishing” emails that trick them into clicking on deceptive links in an effort to steal log-in credentials.

The goal appeared to be to spread links to misinformation.

“Since our last public update, this group has attempted to hack into the Facebook accounts of dozens of Ukrainian military personnel,” Meta said in the report.

“In a handful of cases, they posted videos calling on the Army to surrender as if these posts were coming from the legitimate account owners.”

Meta blocked those videos from being shared, according to head of security policy Nathaniel Gleicher.

– Further action? –

“These threat actors are not going to give up,” Gleicher said on a telephone briefing.

“They are increasingly blending their techniques.”

Facebook has restricted Russian state media’s ability to earn money on the social media platform and has refused to stop using fact-checkers and content warning labels on state media posts.

“We are actively reviewing additional action we should take, particularly in the context of misinformation from government pages,” Gleicher said.

Meta, whose family of apps includes Instagram, has blocked the accounts of the Russian state-run media RT and Sputnik in the European Union. 

Moscow responded by blocking Facebook and Instagram.

RelatedRussia, Ukraine and the Danger of a Global Cyberwar

RelatedRussia vs Ukraine – The War in Cyberspace

RelatedTalking Global Cyberwar With Kaspersky Lab’s Anton Shingarev

RelatedTalking UK Cyberwar With Sir David Omand

Written By

AFP 2023

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.


Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.


Expert Insights

Related Content


WASHINGTON - Cyberattacks are the most serious threat facing the United States, even more so than terrorism, according to American defense experts. Almost half...


The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.


Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.


As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.


A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...


Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.